City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.217.161.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10720
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.217.161.80. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 04:01:44 CST 2025
;; MSG SIZE rcvd: 106Host 80.161.217.14.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 80.161.217.14.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 198.27.90.106 | attackbotsspam | Sep 9 19:46:40 ny01 sshd[32204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.27.90.106 Sep 9 19:46:42 ny01 sshd[32204]: Failed password for invalid user uftp123 from 198.27.90.106 port 53688 ssh2 Sep 9 19:52:16 ny01 sshd[785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.27.90.106 |
2019-09-10 07:57:28 |
| 49.69.50.120 | attackbots | Sep 9 16:54:13 icinga sshd[5857]: Failed password for root from 49.69.50.120 port 44342 ssh2 Sep 9 16:54:24 icinga sshd[5857]: error: maximum authentication attempts exceeded for root from 49.69.50.120 port 44342 ssh2 [preauth] ... |
2019-09-10 08:28:44 |
| 41.128.245.103 | attack | Sep 9 23:35:24 web8 sshd\[6219\]: Invalid user ftp_user123 from 41.128.245.103 Sep 9 23:35:24 web8 sshd\[6219\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.128.245.103 Sep 9 23:35:25 web8 sshd\[6219\]: Failed password for invalid user ftp_user123 from 41.128.245.103 port 33278 ssh2 Sep 9 23:41:53 web8 sshd\[9631\]: Invalid user 123456 from 41.128.245.103 Sep 9 23:41:53 web8 sshd\[9631\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.128.245.103 |
2019-09-10 08:01:56 |
| 132.247.172.26 | attackbots | 2019-09-10T02:18:13.393656lon01.zurich-datacenter.net sshd\[10166\]: Invalid user 123321 from 132.247.172.26 port 50876 2019-09-10T02:18:13.399282lon01.zurich-datacenter.net sshd\[10166\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.247.172.26 2019-09-10T02:18:15.439755lon01.zurich-datacenter.net sshd\[10166\]: Failed password for invalid user 123321 from 132.247.172.26 port 50876 ssh2 2019-09-10T02:25:16.501481lon01.zurich-datacenter.net sshd\[10347\]: Invalid user 1 from 132.247.172.26 port 56368 2019-09-10T02:25:16.506423lon01.zurich-datacenter.net sshd\[10347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.247.172.26 ... |
2019-09-10 08:27:40 |
| 80.82.78.87 | attack | Blocked for port scanning. Time: Mon Sep 9. 17:59:40 2019 +0200 IP: 80.82.78.87 (NL/Netherlands/-) Sample of block hits: Sep 9 17:55:56 vserv kernel: [17688457.827528] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=80.82.78.87 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=27814 PROTO=TCP SPT=44212 DPT=3393 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 9 17:56:02 vserv kernel: [17688464.355150] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=80.82.78.87 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=55784 PROTO=TCP SPT=44212 DPT=3396 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 9 17:56:18 vserv kernel: [17688480.291224] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=80.82.78.87 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=59198 PROTO=TCP SPT=44212 DPT=3384 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 9 17:56:23 vserv kernel: [17688484.787144] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=80.82.78.87 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=13812 PROTO=TCP SPT=44577 DPT=3400 .... |
2019-09-10 08:25:03 |
| 218.76.87.67 | attack | F2B jail: sshd. Time: 2019-09-10 02:14:16, Reported by: VKReport |
2019-09-10 08:25:31 |
| 81.192.159.130 | attackspam | Sep 10 01:34:30 ncomp sshd[27828]: Invalid user admin from 81.192.159.130 Sep 10 01:34:30 ncomp sshd[27828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.192.159.130 Sep 10 01:34:30 ncomp sshd[27828]: Invalid user admin from 81.192.159.130 Sep 10 01:34:32 ncomp sshd[27828]: Failed password for invalid user admin from 81.192.159.130 port 53408 ssh2 |
2019-09-10 08:09:23 |
| 79.122.224.2 | attackspam | [portscan] Port scan |
2019-09-10 08:20:05 |
| 117.48.208.124 | attackbots | Sep 9 10:37:23 aat-srv002 sshd[16279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.48.208.124 Sep 9 10:37:25 aat-srv002 sshd[16279]: Failed password for invalid user user01 from 117.48.208.124 port 35924 ssh2 Sep 9 10:43:18 aat-srv002 sshd[16510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.48.208.124 Sep 9 10:43:20 aat-srv002 sshd[16510]: Failed password for invalid user testing from 117.48.208.124 port 44972 ssh2 ... |
2019-09-10 07:56:22 |
| 68.183.48.172 | attackspambots | Sep 9 14:18:45 lcprod sshd\[23250\]: Invalid user anonimus from 68.183.48.172 Sep 9 14:18:45 lcprod sshd\[23250\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.48.172 Sep 9 14:18:47 lcprod sshd\[23250\]: Failed password for invalid user anonimus from 68.183.48.172 port 59444 ssh2 Sep 9 14:24:49 lcprod sshd\[23798\]: Invalid user 123 from 68.183.48.172 Sep 9 14:24:49 lcprod sshd\[23798\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.48.172 |
2019-09-10 08:30:31 |
| 81.22.45.202 | attack | 09/09/2019-18:46:51.358446 81.22.45.202 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 85 |
2019-09-10 08:24:11 |
| 112.186.77.106 | attack | Sep 10 00:29:54 nextcloud sshd\[23487\]: Invalid user temp1 from 112.186.77.106 Sep 10 00:29:54 nextcloud sshd\[23487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.186.77.106 Sep 10 00:29:57 nextcloud sshd\[23487\]: Failed password for invalid user temp1 from 112.186.77.106 port 57940 ssh2 ... |
2019-09-10 08:01:39 |
| 31.204.151.55 | attack | *Port Scan* detected from 31.204.151.55 (NL/Netherlands/hosted-by.i3d.net). 4 hits in the last 80 seconds |
2019-09-10 08:06:12 |
| 185.175.93.9 | attack | Port scan on 11 port(s): 33122 33163 33326 33405 33424 33490 33577 33597 33709 33749 33800 |
2019-09-10 08:33:35 |
| 121.165.66.226 | attack | Sep 9 16:54:38 srv206 sshd[11447]: Invalid user uftp from 121.165.66.226 ... |
2019-09-10 08:21:56 |