City: unknown
Region: unknown
Country: Hong Kong
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 144.214.10.230
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65377
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;144.214.10.230. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012101 1800 900 604800 86400
;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 06:17:17 CST 2025
;; MSG SIZE rcvd: 107
230.10.214.144.in-addr.arpa domain name pointer lgs.sgs.cityu.edu.hk.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
230.10.214.144.in-addr.arpa name = lgs.sgs.cityu.edu.hk.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.92.0.135 | attackspambots | Aug 24 10:03:06 mail sshd\[16961\]: Failed password for root from 218.92.0.135 port 20586 ssh2\ Aug 24 10:03:09 mail sshd\[16961\]: Failed password for root from 218.92.0.135 port 20586 ssh2\ Aug 24 10:03:12 mail sshd\[16961\]: Failed password for root from 218.92.0.135 port 20586 ssh2\ Aug 24 10:03:15 mail sshd\[16961\]: Failed password for root from 218.92.0.135 port 20586 ssh2\ Aug 24 10:03:18 mail sshd\[16961\]: Failed password for root from 218.92.0.135 port 20586 ssh2\ Aug 24 10:03:20 mail sshd\[16961\]: Failed password for root from 218.92.0.135 port 20586 ssh2\ |
2019-08-24 18:09:00 |
| 94.191.2.228 | attackspambots | Aug 24 02:13:06 ip-172-31-62-245 sshd\[10498\]: Failed password for root from 94.191.2.228 port 27977 ssh2\ Aug 24 02:15:26 ip-172-31-62-245 sshd\[10505\]: Invalid user teo from 94.191.2.228\ Aug 24 02:15:27 ip-172-31-62-245 sshd\[10505\]: Failed password for invalid user teo from 94.191.2.228 port 50175 ssh2\ Aug 24 02:17:49 ip-172-31-62-245 sshd\[10512\]: Invalid user user from 94.191.2.228\ Aug 24 02:17:52 ip-172-31-62-245 sshd\[10512\]: Failed password for invalid user user from 94.191.2.228 port 15872 ssh2\ |
2019-08-24 18:29:21 |
| 54.37.154.113 | attack | Aug 24 12:14:54 SilenceServices sshd[10687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.154.113 Aug 24 12:14:56 SilenceServices sshd[10687]: Failed password for invalid user ali from 54.37.154.113 port 53724 ssh2 Aug 24 12:18:46 SilenceServices sshd[13746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.154.113 |
2019-08-24 18:33:38 |
| 116.98.68.71 | attackbots | Aug2403:11:07server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=116.98.68.71DST=136.243.224.50LEN=52TOS=0x00PREC=0x00TTL=114ID=21112DFPROTO=TCPSPT=50413DPT=8291WINDOW=8192RES=0x00SYNURGP=0Aug2403:11:07server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=116.98.68.71DST=136.243.224.51LEN=52TOS=0x00PREC=0x00TTL=114ID=21114DFPROTO=TCPSPT=50415DPT=8291WINDOW=8192RES=0x00SYNURGP=0Aug2403:11:07server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=116.98.68.71DST=136.243.224.52LEN=52TOS=0x00PREC=0x00TTL=114ID=21128DFPROTO=TCPSPT=50429DPT=8291WINDOW=8192RES=0x00SYNURGP=0Aug2403:11:07server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=116.98.68.71DST=136.243.224.53LEN=52TOS=0x00PREC=0x00TTL=114ID=21131DFPROTO=TCPSPT=50432DPT=8291WINDOW=8192RES=0x00SYNURGP=0Aug2403:11:07server2kernel:Firewall:\*TCP_INBlocked\*IN=eth0OUT=MAC=00:16:3e |
2019-08-24 18:51:40 |
| 123.207.140.248 | attackspambots | Invalid user customer from 123.207.140.248 port 60499 |
2019-08-24 17:48:19 |
| 104.152.52.34 | attack | tcp 0 0 103.6.144.10:10000 104.152.52.34:48127 ESTABLISHED 7830/perl unix 3 [ ] STREAM CONNECTED 15783 1/systemd /run/systemd/journal/stdout has some how infected my server with a python script |
2019-08-24 18:49:51 |
| 122.224.77.186 | attackspam | Aug 23 19:51:59 friendsofhawaii sshd\[902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.224.77.186 user=root Aug 23 19:52:01 friendsofhawaii sshd\[902\]: Failed password for root from 122.224.77.186 port 2153 ssh2 Aug 23 19:55:24 friendsofhawaii sshd\[1179\]: Invalid user admin from 122.224.77.186 Aug 23 19:55:24 friendsofhawaii sshd\[1179\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.224.77.186 Aug 23 19:55:26 friendsofhawaii sshd\[1179\]: Failed password for invalid user admin from 122.224.77.186 port 2154 ssh2 |
2019-08-24 18:32:47 |
| 51.254.222.6 | attackbotsspam | Automated report - ssh fail2ban: Aug 24 10:29:00 authentication failure Aug 24 10:29:01 wrong password, user=uk, port=50623, ssh2 Aug 24 10:32:49 authentication failure |
2019-08-24 17:38:24 |
| 209.141.53.82 | botsattack | http:///phpmyadmin/scripts/setup.php http:///mysql/scripts/setup.php http:///phpmyadmin2/scripts/setup.php Requests 1 every 1.5 hrs or so. |
2019-08-24 18:37:40 |
| 213.32.31.116 | attack | Aug 24 03:53:36 s64-1 sshd[29855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.31.116 Aug 24 03:53:37 s64-1 sshd[29855]: Failed password for invalid user ftpuser from 213.32.31.116 port 38804 ssh2 Aug 24 03:54:57 s64-1 sshd[29858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.31.116 ... |
2019-08-24 18:28:48 |
| 37.49.231.104 | attack | 08/23/2019-21:43:25.359261 37.49.231.104 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-08-24 18:03:45 |
| 177.184.133.41 | attackspambots | Invalid user zw from 177.184.133.41 port 49508 |
2019-08-24 18:20:30 |
| 140.143.227.43 | attackbots | Aug 24 10:38:48 MK-Soft-VM4 sshd\[15373\]: Invalid user 123456 from 140.143.227.43 port 45996 Aug 24 10:38:48 MK-Soft-VM4 sshd\[15373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.227.43 Aug 24 10:38:51 MK-Soft-VM4 sshd\[15373\]: Failed password for invalid user 123456 from 140.143.227.43 port 45996 ssh2 ... |
2019-08-24 18:44:25 |
| 91.121.101.61 | attackspambots | Aug 24 11:55:28 webhost01 sshd[24662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.101.61 Aug 24 11:55:30 webhost01 sshd[24662]: Failed password for invalid user ccradio from 91.121.101.61 port 34358 ssh2 ... |
2019-08-24 18:27:43 |
| 51.83.73.48 | attackspambots | 2019-08-24T08:48:55.550104hub.schaetter.us sshd\[28897\]: Invalid user tez from 51.83.73.48 2019-08-24T08:48:55.580626hub.schaetter.us sshd\[28897\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.ip-51-83-73.eu 2019-08-24T08:48:57.944075hub.schaetter.us sshd\[28897\]: Failed password for invalid user tez from 51.83.73.48 port 41626 ssh2 2019-08-24T08:56:05.193542hub.schaetter.us sshd\[28948\]: Invalid user allu from 51.83.73.48 2019-08-24T08:56:05.230392hub.schaetter.us sshd\[28948\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=48.ip-51-83-73.eu ... |
2019-08-24 18:12:08 |