City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.21.242.168
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56394
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.21.242.168. IN A
;; AUTHORITY SECTION:
. 598 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 13:46:55 CST 2022
;; MSG SIZE rcvd: 106Host 168.242.21.14.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 168.242.21.14.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.92.0.138 | attack | $f2bV_matches |
2020-02-21 06:27:05 |
| 106.13.128.71 | attack | 2020-02-20T16:20:42.6076631495-001 sshd[62032]: Invalid user fangjn from 106.13.128.71 port 38842 2020-02-20T16:20:42.6172701495-001 sshd[62032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.128.71 2020-02-20T16:20:42.6076631495-001 sshd[62032]: Invalid user fangjn from 106.13.128.71 port 38842 2020-02-20T16:20:44.0870181495-001 sshd[62032]: Failed password for invalid user fangjn from 106.13.128.71 port 38842 ssh2 2020-02-20T16:34:02.1482641495-001 sshd[62805]: Invalid user sinusbot from 106.13.128.71 port 45856 2020-02-20T16:34:02.1520561495-001 sshd[62805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.128.71 2020-02-20T16:34:02.1482641495-001 sshd[62805]: Invalid user sinusbot from 106.13.128.71 port 45856 2020-02-20T16:34:04.1178771495-001 sshd[62805]: Failed password for invalid user sinusbot from 106.13.128.71 port 45856 ssh2 2020-02-20T16:36:11.0562031495-001 sshd[62892]: Invalid ... |
2020-02-21 06:23:01 |
| 61.140.177.204 | attackspam | Lines containing failures of 61.140.177.204 (max 1000) Feb 20 13:14:40 localhost sshd[28896]: Invalid user em3-user from 61.140.177.204 port 54322 Feb 20 13:14:40 localhost sshd[28896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.140.177.204 Feb 20 13:14:42 localhost sshd[28896]: Failed password for invalid user em3-user from 61.140.177.204 port 54322 ssh2 Feb 20 13:14:44 localhost sshd[28896]: Received disconnect from 61.140.177.204 port 54322:11: Bye Bye [preauth] Feb 20 13:14:44 localhost sshd[28896]: Disconnected from invalid user em3-user 61.140.177.204 port 54322 [preauth] Feb 20 13:38:42 localhost sshd[32597]: Invalid user ghostname from 61.140.177.204 port 43304 Feb 20 13:38:42 localhost sshd[32597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.140.177.204 Feb 20 13:38:44 localhost sshd[32597]: Failed password for invalid user ghostname from 61.140.177.204 port 43304 ss........ ------------------------------ |
2020-02-21 06:14:58 |
| 129.28.196.215 | attack | Invalid user centos from 129.28.196.215 port 49206 |
2020-02-21 06:47:24 |
| 193.106.29.66 | attack | TCP port 3306: Scan and connection |
2020-02-21 06:23:34 |
| 80.82.77.212 | attack | ET DROP Dshield Block Listed Source group 1 - port: 32769 proto: UDP cat: Misc Attack |
2020-02-21 06:49:54 |
| 42.56.92.24 | attackspam | 2020-02-20T16:29:01.2244781495-001 sshd[62553]: Invalid user a from 42.56.92.24 port 42834 2020-02-20T16:29:01.2329581495-001 sshd[62553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.56.92.24 2020-02-20T16:29:01.2244781495-001 sshd[62553]: Invalid user a from 42.56.92.24 port 42834 2020-02-20T16:29:02.8736561495-001 sshd[62553]: Failed password for invalid user a from 42.56.92.24 port 42834 ssh2 2020-02-20T16:33:11.4494551495-001 sshd[62692]: Invalid user jyc from 42.56.92.24 port 33302 2020-02-20T16:33:11.4548311495-001 sshd[62692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.56.92.24 2020-02-20T16:33:11.4494551495-001 sshd[62692]: Invalid user jyc from 42.56.92.24 port 33302 2020-02-20T16:33:13.0847471495-001 sshd[62692]: Failed password for invalid user jyc from 42.56.92.24 port 33302 ssh2 2020-02-20T16:34:53.2958871495-001 sshd[62823]: Invalid user tmpu02 from 42.56.92.24 port 42002 2020-0 ... |
2020-02-21 06:21:58 |
| 37.191.139.45 | attackspam | Port Scan |
2020-02-21 06:30:23 |
| 190.153.63.203 | attackspam | Unauthorized connection attempt detected from IP address 190.153.63.203 to port 26 |
2020-02-21 06:15:39 |
| 189.180.46.130 | attackspam | 20/2/20@17:08:19: FAIL: Alarm-Network address from=189.180.46.130 ... |
2020-02-21 06:38:40 |
| 222.186.30.167 | attackspam | Feb 20 23:47:35 MK-Soft-VM7 sshd[27336]: Failed password for root from 222.186.30.167 port 18085 ssh2 Feb 20 23:47:38 MK-Soft-VM7 sshd[27336]: Failed password for root from 222.186.30.167 port 18085 ssh2 ... |
2020-02-21 06:48:16 |
| 95.217.62.96 | attackbotsspam | Trying ports that it shouldn't be. |
2020-02-21 06:28:41 |
| 221.12.19.202 | attack | Fail2Ban Ban Triggered |
2020-02-21 06:45:49 |
| 222.186.169.194 | attackbotsspam | $f2bV_matches_ltvn |
2020-02-21 06:45:29 |
| 5.39.77.117 | attack | Feb 20 22:46:57 sd-53420 sshd\[8004\]: Invalid user at from 5.39.77.117 Feb 20 22:46:57 sd-53420 sshd\[8004\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.77.117 Feb 20 22:46:59 sd-53420 sshd\[8004\]: Failed password for invalid user at from 5.39.77.117 port 56258 ssh2 Feb 20 22:48:53 sd-53420 sshd\[8202\]: Invalid user rabbitmq from 5.39.77.117 Feb 20 22:48:53 sd-53420 sshd\[8202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.77.117 ... |
2020-02-21 06:11:18 |