City: Kaohsiung
Region: Kaohsiung
Country: Taiwan, China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.116.74.156
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54025
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;140.116.74.156. IN A
;; AUTHORITY SECTION:
. 580 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023050100 1800 900 604800 86400
;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 01 21:19:30 CST 2023
;; MSG SIZE rcvd: 107Host 156.74.116.140.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 156.74.116.140.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 178.128.76.6 | attack | Oct 27 22:32:09 [host] sshd[30551]: Invalid user aringsta from 178.128.76.6 Oct 27 22:32:09 [host] sshd[30551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.76.6 Oct 27 22:32:10 [host] sshd[30551]: Failed password for invalid user aringsta from 178.128.76.6 port 45886 ssh2 |
2019-10-28 05:41:59 |
| 103.139.45.67 | attackbotsspam | Oct 27 22:07:38 mail postfix/smtpd\[7621\]: warning: unknown\[103.139.45.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 27 22:07:45 mail postfix/smtpd\[7621\]: warning: unknown\[103.139.45.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 27 22:07:56 mail postfix/smtpd\[7621\]: warning: unknown\[103.139.45.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-10-28 05:27:03 |
| 203.142.69.203 | attack | Oct 27 22:22:11 markkoudstaal sshd[18729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.142.69.203 Oct 27 22:22:13 markkoudstaal sshd[18729]: Failed password for invalid user eko from 203.142.69.203 port 53863 ssh2 Oct 27 22:27:02 markkoudstaal sshd[19173]: Failed password for root from 203.142.69.203 port 45010 ssh2 |
2019-10-28 05:28:57 |
| 92.119.160.107 | attack | Oct 27 22:40:42 mc1 kernel: \[3498774.516690\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=49334 PROTO=TCP SPT=46809 DPT=36127 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 27 22:42:14 mc1 kernel: \[3498866.135567\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=39441 PROTO=TCP SPT=46809 DPT=36205 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 27 22:42:48 mc1 kernel: \[3498899.891112\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=23679 PROTO=TCP SPT=46809 DPT=36026 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-28 05:43:38 |
| 129.213.153.229 | attackspambots | Oct 27 10:53:35 hpm sshd\[21086\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.153.229 user=sshd Oct 27 10:53:38 hpm sshd\[21086\]: Failed password for sshd from 129.213.153.229 port 60563 ssh2 Oct 27 10:57:07 hpm sshd\[21382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.153.229 user=root Oct 27 10:57:10 hpm sshd\[21382\]: Failed password for root from 129.213.153.229 port 22851 ssh2 Oct 27 11:00:40 hpm sshd\[21700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.153.229 user=root |
2019-10-28 05:24:51 |
| 181.49.153.74 | attackbotsspam | 2019-10-27T21:02:44.345474abusebot-3.cloudsearch.cf sshd\[19911\]: Invalid user nagios from 181.49.153.74 port 45304 |
2019-10-28 05:20:12 |
| 94.177.250.221 | attackspam | Oct 27 22:30:19 SilenceServices sshd[10107]: Failed password for root from 94.177.250.221 port 42952 ssh2 Oct 27 22:33:49 SilenceServices sshd[13797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.250.221 Oct 27 22:33:51 SilenceServices sshd[13797]: Failed password for invalid user kf from 94.177.250.221 port 51348 ssh2 |
2019-10-28 05:44:56 |
| 94.42.177.8 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/94.42.177.8/ PL - 1H : (151) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : PL NAME ASN : ASN201036 IP : 94.42.177.8 CIDR : 94.42.176.0/22 PREFIX COUNT : 2 UNIQUE IP COUNT : 1280 ATTACKS DETECTED ASN201036 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-27 21:28:13 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-28 05:49:18 |
| 212.83.167.147 | attack | fail2ban honeypot |
2019-10-28 05:28:38 |
| 112.198.194.243 | attackspam | $f2bV_matches |
2019-10-28 05:21:56 |
| 104.219.250.214 | attackbotsspam | SIP/5060 Probe, BF, Hack - |
2019-10-28 05:26:09 |
| 82.196.14.222 | attackspam | Oct 27 17:19:27 plusreed sshd[12862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.196.14.222 user=root Oct 27 17:19:29 plusreed sshd[12862]: Failed password for root from 82.196.14.222 port 47159 ssh2 ... |
2019-10-28 05:21:40 |
| 121.46.29.116 | attack | Oct 27 21:15:32 ip-172-31-1-72 sshd\[1930\]: Invalid user dylan from 121.46.29.116 Oct 27 21:15:32 ip-172-31-1-72 sshd\[1930\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.46.29.116 Oct 27 21:15:34 ip-172-31-1-72 sshd\[1930\]: Failed password for invalid user dylan from 121.46.29.116 port 49972 ssh2 Oct 27 21:19:01 ip-172-31-1-72 sshd\[1947\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.46.29.116 user=root Oct 27 21:19:02 ip-172-31-1-72 sshd\[1947\]: Failed password for root from 121.46.29.116 port 39486 ssh2 |
2019-10-28 05:39:14 |
| 94.191.28.110 | attackspam | Oct 27 21:28:47 pornomens sshd\[23587\]: Invalid user lincoln from 94.191.28.110 port 51690 Oct 27 21:28:47 pornomens sshd\[23587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.28.110 Oct 27 21:28:49 pornomens sshd\[23587\]: Failed password for invalid user lincoln from 94.191.28.110 port 51690 ssh2 ... |
2019-10-28 05:22:37 |
| 42.116.255.216 | attackbotsspam | Oct 27 21:26:56 xeon sshd[4772]: Failed password for invalid user smtpuser from 42.116.255.216 port 41416 ssh2 |
2019-10-28 05:57:51 |