City: East District
Region: Tainan
Country: Taiwan, China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.116.134.97
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56178
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;140.116.134.97. IN A
;; AUTHORITY SECTION:
. 135 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023050100 1800 900 604800 86400
;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 01 21:29:30 CST 2023
;; MSG SIZE rcvd: 107Host 97.134.116.140.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 97.134.116.140.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 210.14.69.76 | attack | Oct 13 23:15:15 plex-server sshd[1426332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.14.69.76 Oct 13 23:15:15 plex-server sshd[1426332]: Invalid user tomisaki from 210.14.69.76 port 38344 Oct 13 23:15:17 plex-server sshd[1426332]: Failed password for invalid user tomisaki from 210.14.69.76 port 38344 ssh2 Oct 13 23:18:59 plex-server sshd[1428173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.14.69.76 user=root Oct 13 23:19:01 plex-server sshd[1428173]: Failed password for root from 210.14.69.76 port 39518 ssh2 ... |
2020-10-14 07:31:40 |
| 200.54.242.46 | attack | Oct 13 22:36:12 ip-172-31-61-156 sshd[3540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.54.242.46 user=root Oct 13 22:36:14 ip-172-31-61-156 sshd[3540]: Failed password for root from 200.54.242.46 port 57452 ssh2 Oct 13 22:36:12 ip-172-31-61-156 sshd[3540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.54.242.46 user=root Oct 13 22:36:14 ip-172-31-61-156 sshd[3540]: Failed password for root from 200.54.242.46 port 57452 ssh2 Oct 13 22:40:07 ip-172-31-61-156 sshd[3922]: Invalid user phil from 200.54.242.46 ... |
2020-10-14 07:00:30 |
| 196.31.46.194 | attackbotsspam | E-Mail Spam (RBL) [REJECTED] |
2020-10-14 07:16:04 |
| 212.70.149.83 | attackspambots | 2020-10-14T01:21:46.638543mail1 postfix/smtpd[4846]: warning: unknown[212.70.149.83]: SASL LOGIN authentication failed: authentication failure 2020-10-14T01:22:11.387046mail1 postfix/smtpd[4846]: warning: unknown[212.70.149.83]: SASL LOGIN authentication failed: authentication failure 2020-10-14T01:22:37.112335mail1 postfix/smtpd[4846]: warning: unknown[212.70.149.83]: SASL LOGIN authentication failed: authentication failure ... |
2020-10-14 07:28:06 |
| 125.227.141.115 | attackspambots | Oct 14 01:02:18 nextcloud sshd\[8427\]: Invalid user madison from 125.227.141.115 Oct 14 01:02:18 nextcloud sshd\[8427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.227.141.115 Oct 14 01:02:20 nextcloud sshd\[8427\]: Failed password for invalid user madison from 125.227.141.115 port 53722 ssh2 |
2020-10-14 07:20:50 |
| 179.191.52.90 | attackbots | 20/10/13@16:49:12: FAIL: Alarm-SSH address from=179.191.52.90 ... |
2020-10-14 07:04:22 |
| 35.213.146.70 | attackspam | 35.213.146.70 - - [14/Oct/2020:01:20:01 +0200] "GET /wp-login.php HTTP/1.1" 200 8558 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 35.213.146.70 - - [14/Oct/2020:01:20:04 +0200] "POST /wp-login.php HTTP/1.1" 200 8809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 35.213.146.70 - - [14/Oct/2020:01:20:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-10-14 07:29:08 |
| 106.75.77.230 | attackbots | $f2bV_matches |
2020-10-14 07:32:40 |
| 193.228.91.123 | attackspambots | Oct 14 00:28:21 prod4 sshd\[31568\]: Failed password for root from 193.228.91.123 port 49842 ssh2 Oct 14 00:28:45 prod4 sshd\[31624\]: Failed password for root from 193.228.91.123 port 56788 ssh2 Oct 14 00:29:10 prod4 sshd\[31807\]: Failed password for root from 193.228.91.123 port 35546 ssh2 ... |
2020-10-14 07:13:53 |
| 106.120.75.98 | attackbots | 2020-10-13T23:00:15.490091abusebot-6.cloudsearch.cf sshd[12999]: Invalid user clint from 106.120.75.98 port 34372 2020-10-13T23:00:15.495911abusebot-6.cloudsearch.cf sshd[12999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.120.75.98 2020-10-13T23:00:15.490091abusebot-6.cloudsearch.cf sshd[12999]: Invalid user clint from 106.120.75.98 port 34372 2020-10-13T23:00:17.742469abusebot-6.cloudsearch.cf sshd[12999]: Failed password for invalid user clint from 106.120.75.98 port 34372 ssh2 2020-10-13T23:03:51.817142abusebot-6.cloudsearch.cf sshd[13119]: Invalid user ca from 106.120.75.98 port 36008 2020-10-13T23:03:51.822864abusebot-6.cloudsearch.cf sshd[13119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.120.75.98 2020-10-13T23:03:51.817142abusebot-6.cloudsearch.cf sshd[13119]: Invalid user ca from 106.120.75.98 port 36008 2020-10-13T23:03:53.723108abusebot-6.cloudsearch.cf sshd[13119]: Failed passw ... |
2020-10-14 07:07:09 |
| 39.152.17.192 | attackspam | Oct 14 01:52:02 journals sshd\[64539\]: Invalid user bart from 39.152.17.192 Oct 14 01:52:02 journals sshd\[64539\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.152.17.192 Oct 14 01:52:05 journals sshd\[64539\]: Failed password for invalid user bart from 39.152.17.192 port 59292 ssh2 Oct 14 01:54:30 journals sshd\[64774\]: Invalid user roberto from 39.152.17.192 Oct 14 01:54:30 journals sshd\[64774\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.152.17.192 ... |
2020-10-14 07:08:01 |
| 77.219.9.238 | attack | E-Mail Spam (RBL) [REJECTED] |
2020-10-14 07:12:44 |
| 93.146.237.163 | attackspambots | $f2bV_matches |
2020-10-14 07:10:21 |
| 129.204.82.4 | attackbots | Automatic report - Banned IP Access |
2020-10-14 07:33:32 |
| 49.233.83.218 | attackspambots | (sshd) Failed SSH login from 49.233.83.218 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 13 18:03:12 optimus sshd[27592]: Invalid user baldomero from 49.233.83.218 Oct 13 18:03:12 optimus sshd[27592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.83.218 Oct 13 18:03:14 optimus sshd[27592]: Failed password for invalid user baldomero from 49.233.83.218 port 37230 ssh2 Oct 13 18:21:50 optimus sshd[1385]: Invalid user reno from 49.233.83.218 Oct 13 18:21:50 optimus sshd[1385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.83.218 |
2020-10-14 07:17:33 |