City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.121.106.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24016
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.121.106.54. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012101 1800 900 604800 86400
;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 04:10:49 CST 2025
;; MSG SIZE rcvd: 106
Host 54.106.121.14.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 54.106.121.14.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 122.232.62.185 | attack | spam |
2020-09-04 20:54:05 |
| 201.243.251.19 | attackspam | firewall-block, port(s): 445/tcp |
2020-09-04 21:02:53 |
| 1.34.183.217 | attackbots | 23/tcp [2020-09-04]1pkt |
2020-09-04 21:25:37 |
| 222.186.175.148 | attackbots | Sep 4 15:04:19 dev0-dcde-rnet sshd[1926]: Failed password for root from 222.186.175.148 port 30992 ssh2 Sep 4 15:04:31 dev0-dcde-rnet sshd[1926]: error: maximum authentication attempts exceeded for root from 222.186.175.148 port 30992 ssh2 [preauth] Sep 4 15:04:37 dev0-dcde-rnet sshd[1928]: Failed password for root from 222.186.175.148 port 25024 ssh2 |
2020-09-04 21:06:55 |
| 183.82.111.97 | attackbots | Icarus honeypot on github |
2020-09-04 21:21:10 |
| 189.80.37.70 | attackbots | 2020-09-01 18:03:48,944 fail2ban.actions [1312]: NOTICE [sshd] Ban 189.80.37.70 2020-09-01 18:21:58,903 fail2ban.actions [1312]: NOTICE [sshd] Ban 189.80.37.70 2020-09-01 18:40:08,494 fail2ban.actions [1312]: NOTICE [sshd] Ban 189.80.37.70 2020-09-01 18:58:12,325 fail2ban.actions [1312]: NOTICE [sshd] Ban 189.80.37.70 2020-09-01 19:16:06,021 fail2ban.actions [1312]: NOTICE [sshd] Ban 189.80.37.70 ... |
2020-09-04 20:40:24 |
| 177.85.172.145 | attackbotsspam | Sep 4 03:01:59 instance-2 sshd[21141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.85.172.145 Sep 4 03:02:01 instance-2 sshd[21141]: Failed password for invalid user lu from 177.85.172.145 port 33900 ssh2 Sep 4 03:07:10 instance-2 sshd[21232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.85.172.145 |
2020-09-04 20:52:04 |
| 129.204.146.171 | attack | IP 129.204.146.171 attacked honeypot on port: 6379 at 9/3/2020 9:50:17 AM |
2020-09-04 20:59:15 |
| 77.247.181.165 | attackbots | 77.247.181.165 (NL/Netherlands/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 4 08:32:53 server2 sshd[29416]: Failed password for root from 181.13.132.88 port 55278 ssh2 Sep 4 08:34:22 server2 sshd[30189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107 user=root Sep 4 08:26:10 server2 sshd[25330]: Failed password for root from 77.247.181.165 port 4008 ssh2 Sep 4 08:34:24 server2 sshd[30189]: Failed password for root from 134.209.148.107 port 41828 ssh2 Sep 4 08:37:27 server2 sshd[31858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.207.57 user=root IP Addresses Blocked: 181.13.132.88 (AR/Argentina/-) 134.209.148.107 (IN/India/-) |
2020-09-04 21:27:52 |
| 125.212.203.113 | attackspam | Sep 4 12:44:03 mellenthin sshd[14943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.212.203.113 Sep 4 12:44:05 mellenthin sshd[14943]: Failed password for invalid user elastic from 125.212.203.113 port 37004 ssh2 |
2020-09-04 20:44:46 |
| 150.136.208.168 | attackbots | Invalid user nina from 150.136.208.168 port 41906 |
2020-09-04 20:42:29 |
| 180.107.109.21 | attack | Failed password for invalid user adk from 180.107.109.21 port 31542 ssh2 |
2020-09-04 21:06:00 |
| 201.18.237.254 | attackspambots | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: tcp cat: Potentially Bad Trafficbytes: 60 |
2020-09-04 21:05:27 |
| 192.241.220.50 | attackspambots | Sep 4 12:55:43 mail postfix/submission/smtpd[17112]: lost connection after UNKNOWN from unknown[192.241.220.50] ... |
2020-09-04 21:04:56 |
| 51.210.44.194 | attackspam | Invalid user hadoop from 51.210.44.194 port 42530 |
2020-09-04 21:20:40 |