City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 170.2.214.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12985
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;170.2.214.138. IN A
;; AUTHORITY SECTION:
. 458 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2021123001 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 31 05:42:22 CST 2021
;; MSG SIZE rcvd: 106Host 138.214.2.170.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 138.214.2.170.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 124.228.217.237 | attackspambots | Port scan on 1 port(s): 21 |
2019-12-20 14:03:31 |
| 49.88.112.63 | attack | Dec 20 05:31:50 localhost sshd\[62470\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.63 user=root Dec 20 05:31:52 localhost sshd\[62470\]: Failed password for root from 49.88.112.63 port 60785 ssh2 Dec 20 05:31:58 localhost sshd\[62470\]: Failed password for root from 49.88.112.63 port 60785 ssh2 Dec 20 05:32:02 localhost sshd\[62470\]: Failed password for root from 49.88.112.63 port 60785 ssh2 Dec 20 05:32:06 localhost sshd\[62470\]: Failed password for root from 49.88.112.63 port 60785 ssh2 ... |
2019-12-20 13:33:01 |
| 103.129.222.135 | attackbots | Dec 20 12:30:36 webhost01 sshd[31327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.129.222.135 Dec 20 12:30:38 webhost01 sshd[31327]: Failed password for invalid user chevarie from 103.129.222.135 port 56252 ssh2 ... |
2019-12-20 13:39:52 |
| 40.92.11.63 | attack | Dec 20 07:55:53 debian-2gb-vpn-nbg1-1 kernel: [1196113.371721] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.11.63 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=37464 DF PROTO=TCP SPT=4193 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0 |
2019-12-20 14:01:06 |
| 113.160.178.148 | attack | Dec 20 04:55:48 *** sshd[32650]: User root from 113.160.178.148 not allowed because not listed in AllowUsers |
2019-12-20 14:00:07 |
| 117.37.226.228 | attackspambots | Fail2Ban - FTP Abuse Attempt |
2019-12-20 13:55:51 |
| 78.232.145.24 | attackbotsspam | Dec 20 05:48:01 ns382633 sshd\[14747\]: Invalid user porsche from 78.232.145.24 port 32928 Dec 20 05:48:01 ns382633 sshd\[14747\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.232.145.24 Dec 20 05:48:03 ns382633 sshd\[14747\]: Failed password for invalid user porsche from 78.232.145.24 port 32928 ssh2 Dec 20 05:56:14 ns382633 sshd\[16283\]: Invalid user facturacion from 78.232.145.24 port 50794 Dec 20 05:56:14 ns382633 sshd\[16283\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.232.145.24 |
2019-12-20 13:36:36 |
| 104.131.96.177 | attackbotsspam | Dec 20 05:56:11 debian-2gb-nbg1-2 kernel: \[470535.210860\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.131.96.177 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=2386 PROTO=TCP SPT=44973 DPT=3603 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-20 13:42:04 |
| 80.211.78.132 | attack | Dec 20 07:04:37 vpn01 sshd[24766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.78.132 Dec 20 07:04:40 vpn01 sshd[24766]: Failed password for invalid user osix from 80.211.78.132 port 58628 ssh2 ... |
2019-12-20 14:09:23 |
| 113.176.13.237 | attack | 1576817740 - 12/20/2019 05:55:40 Host: 113.176.13.237/113.176.13.237 Port: 445 TCP Blocked |
2019-12-20 14:13:12 |
| 185.200.118.77 | attackspambots | Dec 20 06:41:21 debian-2gb-nbg1-2 kernel: \[473245.759831\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.200.118.77 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=54814 DPT=3128 WINDOW=65535 RES=0x00 SYN URGP=0 |
2019-12-20 13:58:12 |
| 51.75.30.238 | attack | Dec 20 06:58:11 meumeu sshd[19673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.30.238 Dec 20 06:58:13 meumeu sshd[19673]: Failed password for invalid user albert. from 51.75.30.238 port 39964 ssh2 Dec 20 07:03:17 meumeu sshd[20391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.30.238 ... |
2019-12-20 14:04:20 |
| 139.211.144.100 | attack | Telnet Server BruteForce Attack |
2019-12-20 14:07:39 |
| 106.12.217.39 | attack | Dec 20 06:21:24 localhost sshd\[17907\]: Invalid user admin from 106.12.217.39 port 54654 Dec 20 06:21:24 localhost sshd\[17907\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.217.39 Dec 20 06:21:26 localhost sshd\[17907\]: Failed password for invalid user admin from 106.12.217.39 port 54654 ssh2 |
2019-12-20 13:49:27 |
| 194.33.45.204 | attackspambots | Website hacking attempt: Improper php file access [php file] |
2019-12-20 13:34:38 |