City: East District
Region: Tainan
Country: Taiwan, China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.116.130.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22541
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;140.116.130.99. IN A
;; AUTHORITY SECTION:
. 179 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023050500 1800 900 604800 86400
;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 05 16:39:54 CST 2023
;; MSG SIZE rcvd: 107Host 99.130.116.140.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 99.130.116.140.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 191.240.71.228 | attackbots | Jul 10 07:35:53 mail.srvfarm.net postfix/smtps/smtpd[179885]: warning: unknown[191.240.71.228]: SASL PLAIN authentication failed: Jul 10 07:35:54 mail.srvfarm.net postfix/smtps/smtpd[179885]: lost connection after AUTH from unknown[191.240.71.228] Jul 10 07:36:56 mail.srvfarm.net postfix/smtpd[179907]: warning: unknown[191.240.71.228]: SASL PLAIN authentication failed: Jul 10 07:36:56 mail.srvfarm.net postfix/smtpd[179907]: lost connection after AUTH from unknown[191.240.71.228] Jul 10 07:42:09 mail.srvfarm.net postfix/smtpd[179474]: warning: unknown[191.240.71.228]: SASL PLAIN authentication failed: |
2020-07-10 19:58:09 |
| 14.226.54.140 | attackspambots | 1594352993 - 07/10/2020 05:49:53 Host: 14.226.54.140/14.226.54.140 Port: 445 TCP Blocked |
2020-07-10 19:06:40 |
| 174.138.20.105 | attackbots | Jul 10 11:32:42 gestao sshd[7843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.105 Jul 10 11:32:44 gestao sshd[7843]: Failed password for invalid user chenglin from 174.138.20.105 port 40208 ssh2 Jul 10 11:36:12 gestao sshd[7924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.105 ... |
2020-07-10 19:02:01 |
| 104.248.45.204 | attack | Jul 10 07:16:12 NPSTNNYC01T sshd[10623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.45.204 Jul 10 07:16:14 NPSTNNYC01T sshd[10623]: Failed password for invalid user mythtv from 104.248.45.204 port 35916 ssh2 Jul 10 07:19:17 NPSTNNYC01T sshd[10921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.45.204 ... |
2020-07-10 19:32:02 |
| 178.128.86.188 | attack | Jul 10 13:25:17 vps639187 sshd\[5990\]: Invalid user admin from 178.128.86.188 port 37928 Jul 10 13:25:17 vps639187 sshd\[5990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.86.188 Jul 10 13:25:19 vps639187 sshd\[5990\]: Failed password for invalid user admin from 178.128.86.188 port 37928 ssh2 ... |
2020-07-10 19:36:47 |
| 212.70.149.66 | attack | Jul 10 13:00:57 statusweb1.srvfarm.net postfix/smtps/smtpd[13511]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 10 13:01:07 statusweb1.srvfarm.net postfix/smtps/smtpd[13511]: lost connection after AUTH from unknown[212.70.149.66] Jul 10 13:03:03 statusweb1.srvfarm.net postfix/smtps/smtpd[13511]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 10 13:03:11 statusweb1.srvfarm.net postfix/smtps/smtpd[13511]: lost connection after AUTH from unknown[212.70.149.66] Jul 10 13:05:05 statusweb1.srvfarm.net postfix/smtps/smtpd[13511]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-07-10 19:57:25 |
| 1.214.245.27 | attackspambots | <6 unauthorized SSH connections |
2020-07-10 19:05:27 |
| 129.204.208.34 | attack | Jul 10 07:47:55 vps1 sshd[9586]: Invalid user luis from 129.204.208.34 port 36784 Jul 10 07:47:58 vps1 sshd[9586]: Failed password for invalid user luis from 129.204.208.34 port 36784 ssh2 ... |
2020-07-10 19:55:07 |
| 119.45.142.15 | attackspam | Jul 10 08:18:51 Ubuntu-1404-trusty-64-minimal sshd\[20149\]: Invalid user nwang from 119.45.142.15 Jul 10 08:18:51 Ubuntu-1404-trusty-64-minimal sshd\[20149\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.142.15 Jul 10 08:18:54 Ubuntu-1404-trusty-64-minimal sshd\[20149\]: Failed password for invalid user nwang from 119.45.142.15 port 33482 ssh2 Jul 10 08:35:08 Ubuntu-1404-trusty-64-minimal sshd\[692\]: Invalid user ziwen from 119.45.142.15 Jul 10 08:35:08 Ubuntu-1404-trusty-64-minimal sshd\[692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.142.15 |
2020-07-10 19:39:12 |
| 132.232.108.149 | attack | Jul 10 13:30:57 lnxded64 sshd[15647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.108.149 Jul 10 13:30:57 lnxded64 sshd[15647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.108.149 |
2020-07-10 19:50:42 |
| 92.220.10.100 | attackspam | 20 attempts against mh-misbehave-ban on ice |
2020-07-10 19:13:10 |
| 95.181.131.153 | attack | Jul 10 08:28:41 ns382633 sshd\[23421\]: Invalid user chenduo from 95.181.131.153 port 37618 Jul 10 08:28:41 ns382633 sshd\[23421\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.181.131.153 Jul 10 08:28:43 ns382633 sshd\[23421\]: Failed password for invalid user chenduo from 95.181.131.153 port 37618 ssh2 Jul 10 08:41:07 ns382633 sshd\[25972\]: Invalid user qhbz from 95.181.131.153 port 58072 Jul 10 08:41:07 ns382633 sshd\[25972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.181.131.153 |
2020-07-10 19:10:00 |
| 36.133.28.169 | attackbots | k+ssh-bruteforce |
2020-07-10 19:22:04 |
| 178.154.200.49 | attack | [Fri Jul 10 10:49:55.306005 2020] [:error] [pid 10596:tid 140046008297216] [client 178.154.200.49:40114] [client 178.154.200.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XwflYwyyfZuVP@0p3es30QAAAv8"] ... |
2020-07-10 19:03:33 |
| 49.234.27.90 | attack | 2020-07-10T06:06:35.145749shield sshd\[7864\]: Invalid user marcelino from 49.234.27.90 port 60682 2020-07-10T06:06:35.151211shield sshd\[7864\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.27.90 2020-07-10T06:06:37.427800shield sshd\[7864\]: Failed password for invalid user marcelino from 49.234.27.90 port 60682 ssh2 2020-07-10T06:10:53.054767shield sshd\[9440\]: Invalid user k-abe from 49.234.27.90 port 51368 2020-07-10T06:10:53.063017shield sshd\[9440\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.27.90 |
2020-07-10 19:15:24 |