City: unknown
Region: unknown
Country: Korea (the Republic of)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.53.240.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 543
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.53.240.139. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022800 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 01 01:21:40 CST 2025
;; MSG SIZE rcvd: 106Host 139.240.53.14.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 139.240.53.14.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.253.104.224 | attackspambots | Hits on port : 23 |
2020-09-11 04:54:15 |
| 167.114.114.114 | attackspam | (sshd) Failed SSH login from 167.114.114.114 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 10 15:04:41 idl1-dfw sshd[2052266]: Invalid user ftpuser1 from 167.114.114.114 port 39818 Sep 10 15:04:43 idl1-dfw sshd[2052266]: Failed password for invalid user ftpuser1 from 167.114.114.114 port 39818 ssh2 Sep 10 15:15:51 idl1-dfw sshd[2077458]: Invalid user ctrac from 167.114.114.114 port 42602 Sep 10 15:15:53 idl1-dfw sshd[2077458]: Failed password for invalid user ctrac from 167.114.114.114 port 42602 ssh2 Sep 10 15:19:08 idl1-dfw sshd[2084649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.114.114 user=root |
2020-09-11 04:48:47 |
| 103.151.122.3 | attackbotsspam | (smtpauth) Failed SMTP AUTH login from 103.151.122.3 (-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-09-10 21:29:07 login authenticator failed for (vHKmWEe1if) [103.151.122.3]: 535 Incorrect authentication data (set_id=info) |
2020-09-11 04:38:40 |
| 27.6.188.14 | attack | Tried our host z. |
2020-09-11 04:58:18 |
| 51.68.71.239 | attack | 2020-09-10T22:40:06.139769+02:00 |
2020-09-11 04:51:50 |
| 106.12.26.167 | attack | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): |
2020-09-11 05:21:30 |
| 218.92.0.247 | attackbots | Sep 10 22:40:08 plg sshd[17087]: Failed none for invalid user root from 218.92.0.247 port 49884 ssh2 Sep 10 22:40:09 plg sshd[17087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.247 user=root Sep 10 22:40:10 plg sshd[17087]: Failed password for invalid user root from 218.92.0.247 port 49884 ssh2 Sep 10 22:40:14 plg sshd[17087]: Failed password for invalid user root from 218.92.0.247 port 49884 ssh2 Sep 10 22:40:18 plg sshd[17087]: Failed password for invalid user root from 218.92.0.247 port 49884 ssh2 Sep 10 22:40:22 plg sshd[17087]: Failed password for invalid user root from 218.92.0.247 port 49884 ssh2 Sep 10 22:40:26 plg sshd[17087]: Failed password for invalid user root from 218.92.0.247 port 49884 ssh2 Sep 10 22:40:27 plg sshd[17087]: error: maximum authentication attempts exceeded for invalid user root from 218.92.0.247 port 49884 ssh2 [preauth] ... |
2020-09-11 04:42:53 |
| 186.42.123.195 | attack | Hits on port : 445 |
2020-09-11 04:52:48 |
| 168.70.92.140 | attackbots | SSH Bruteforce Attempt on Honeypot |
2020-09-11 05:17:05 |
| 92.63.197.53 | attack | Fail2Ban Ban Triggered |
2020-09-11 05:15:40 |
| 128.199.159.222 | attackbotsspam | Lines containing failures of 128.199.159.222 Sep 8 03:42:44 penfold sshd[25812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.159.222 user=r.r Sep 8 03:42:46 penfold sshd[25812]: Failed password for r.r from 128.199.159.222 port 56074 ssh2 Sep 8 03:42:46 penfold sshd[25812]: Received disconnect from 128.199.159.222 port 56074:11: Bye Bye [preauth] Sep 8 03:42:46 penfold sshd[25812]: Disconnected from authenticating user r.r 128.199.159.222 port 56074 [preauth] Sep 9 17:06:34 penfold sshd[11037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.159.222 user=r.r Sep 9 17:06:35 penfold sshd[11037]: Failed password for r.r from 128.199.159.222 port 46508 ssh2 Sep 9 17:06:36 penfold sshd[11037]: Received disconnect from 128.199.159.222 port 46508:11: Bye Bye [preauth] Sep 9 17:06:36 penfold sshd[11037]: Disconnected from authenticating user r.r 128.199.159.222 port 4650........ ------------------------------ |
2020-09-11 04:51:01 |
| 45.14.224.171 | attack | Found on Alienvault / proto=17 . srcport=33383 . dstport=33848 . (808) |
2020-09-11 04:39:50 |
| 103.145.13.99 | attack | firewall-block, port(s): 5061/tcp |
2020-09-11 04:53:42 |
| 84.201.163.152 | attack | Tried sshing with brute force. |
2020-09-11 05:23:00 |
| 103.130.226.171 | attack | trying to access non-authorized port |
2020-09-11 05:06:34 |