City: Buk-gu
Region: Gwangju Metropolitan City
Country: South Korea
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 168.131.140.211
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10619
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;168.131.140.211. IN A
;; AUTHORITY SECTION:
. 245 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023051500 1800 900 604800 86400
;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 15 16:41:07 CST 2023
;; MSG SIZE rcvd: 108Host 211.140.131.168.in-addr.arpa not found: 2(SERVFAIL)
server can't find 168.131.140.211.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 140.249.18.118 | attack | Jun 29 09:15:17 NG-HHDC-SVS-001 sshd[31077]: Invalid user ivone from 140.249.18.118 ... |
2020-06-29 07:37:06 |
| 124.128.158.37 | attack | 2020-06-28T16:13:15.8419131495-001 sshd[16360]: Invalid user dia from 124.128.158.37 port 10638 2020-06-28T16:13:17.8280711495-001 sshd[16360]: Failed password for invalid user dia from 124.128.158.37 port 10638 ssh2 2020-06-28T16:16:39.3243131495-001 sshd[16457]: Invalid user sdi from 124.128.158.37 port 10639 2020-06-28T16:16:39.3313791495-001 sshd[16457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.128.158.37 2020-06-28T16:16:39.3243131495-001 sshd[16457]: Invalid user sdi from 124.128.158.37 port 10639 2020-06-28T16:16:41.6534811495-001 sshd[16457]: Failed password for invalid user sdi from 124.128.158.37 port 10639 ssh2 ... |
2020-06-29 07:26:57 |
| 120.194.212.85 | attackspam | 1433/tcp 1433/tcp 1433/tcp... [2020-04-30/06-28]14pkt,1pt.(tcp) |
2020-06-29 07:35:33 |
| 60.250.164.169 | attackbots | Jun 29 00:19:55 server sshd[20199]: Failed password for invalid user mysql from 60.250.164.169 port 56624 ssh2 Jun 29 00:34:26 server sshd[31829]: Failed password for invalid user ntadm from 60.250.164.169 port 52152 ssh2 Jun 29 00:37:46 server sshd[34385]: Failed password for root from 60.250.164.169 port 52004 ssh2 |
2020-06-29 07:10:38 |
| 184.105.247.246 | attackbotsspam | 4899/tcp 50075/tcp 5900/tcp... [2020-04-30/06-26]31pkt,16pt.(tcp),1pt.(udp) |
2020-06-29 07:01:10 |
| 60.167.180.83 | attackspambots | Jun 29 00:08:31 vps sshd[824673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.167.180.83 Jun 29 00:08:33 vps sshd[824673]: Failed password for invalid user lixuan from 60.167.180.83 port 34314 ssh2 Jun 29 00:14:24 vps sshd[858421]: Invalid user oracle from 60.167.180.83 port 52146 Jun 29 00:14:24 vps sshd[858421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.167.180.83 Jun 29 00:14:26 vps sshd[858421]: Failed password for invalid user oracle from 60.167.180.83 port 52146 ssh2 ... |
2020-06-29 07:11:10 |
| 222.67.158.77 | attack | 445/tcp 445/tcp 445/tcp... [2020-06-07/28]4pkt,1pt.(tcp) |
2020-06-29 07:17:46 |
| 170.106.76.171 | attackbots | Unauthorized connection attempt detected from IP address 170.106.76.171 to port 8886 |
2020-06-29 07:06:38 |
| 80.82.77.240 | attack | 981/tcp 953/tcp 903/tcp... [2020-04-28/06-27]765pkt,132pt.(tcp) |
2020-06-29 07:05:59 |
| 222.186.30.167 | attackbots | Jun 29 01:38:16 minden010 sshd[686]: Failed password for root from 222.186.30.167 port 62480 ssh2 Jun 29 01:38:18 minden010 sshd[686]: Failed password for root from 222.186.30.167 port 62480 ssh2 Jun 29 01:38:20 minden010 sshd[686]: Failed password for root from 222.186.30.167 port 62480 ssh2 ... |
2020-06-29 07:38:45 |
| 206.189.44.246 | attackspambots | 2020-06-28T23:26:33.209095shield sshd\[3912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.44.246 user=root 2020-06-28T23:26:35.066869shield sshd\[3912\]: Failed password for root from 206.189.44.246 port 55694 ssh2 2020-06-28T23:27:41.950437shield sshd\[4215\]: Invalid user admin from 206.189.44.246 port 43404 2020-06-28T23:27:41.955759shield sshd\[4215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.44.246 2020-06-28T23:27:44.476860shield sshd\[4215\]: Failed password for invalid user admin from 206.189.44.246 port 43404 ssh2 |
2020-06-29 07:32:18 |
| 13.78.41.29 | attackbotsspam | Jun 28 19:16:59 ws26vmsma01 sshd[112336]: Failed password for root from 13.78.41.29 port 26448 ssh2 ... |
2020-06-29 07:09:05 |
| 185.202.245.136 | attack | Automatic report - Port Scan Attack |
2020-06-29 07:21:08 |
| 133.130.89.217 | attackspam | 21 attempts against mh-ssh on sky |
2020-06-29 07:33:46 |
| 46.105.29.59 | attackbotsspam | Jun 29 00:37:18 dbanaszewski sshd[2026]: Unable to negotiate with 46.105.29.59 port 58380: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Jun 29 00:37:40 dbanaszewski sshd[2028]: Unable to negotiate with 46.105.29.59 port 35472: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Jun 29 00:38:04 dbanaszewski sshd[2032]: Unable to negotiate with 46.105.29.59 port 40796: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] |
2020-06-29 07:24:01 |