City: unknown
Region: unknown
Country: Hong Kong
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.239.7.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65163
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;20.239.7.14. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020302 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 10:09:21 CST 2025
;; MSG SIZE rcvd: 104Host 14.7.239.20.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 14.7.239.20.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.12.171.65 | attackbotsspam | 2020-07-30T03:28:50.407995hostname sshd[4256]: Invalid user zgl from 106.12.171.65 port 42996 2020-07-30T03:28:52.441109hostname sshd[4256]: Failed password for invalid user zgl from 106.12.171.65 port 42996 ssh2 2020-07-30T03:32:21.322537hostname sshd[5737]: Invalid user lucasyu from 106.12.171.65 port 45614 ... |
2020-07-30 06:35:00 |
| 190.104.41.167 | attack | Automatic report - Port Scan Attack |
2020-07-30 06:01:09 |
| 69.119.198.154 | attackbots | SSH brute force |
2020-07-30 06:37:49 |
| 188.68.37.192 | attackbotsspam | Automatic report - Brute Force attack using this IP address |
2020-07-30 06:16:32 |
| 112.85.42.188 | attackbots | 07/29/2020-18:27:09.603190 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan |
2020-07-30 06:28:32 |
| 106.54.75.144 | attackspambots | Unauthorized SSH login attempts |
2020-07-30 06:11:49 |
| 195.54.160.21 | attackbotsspam | SmallBizIT.US 3 packets to tcp(6379,6800,8088) |
2020-07-30 06:11:26 |
| 145.236.248.47 | attack | 2020-07-29T23:32:42.151351vps751288.ovh.net sshd\[19749\]: Invalid user xuyuehan from 145.236.248.47 port 52820 2020-07-29T23:32:42.159106vps751288.ovh.net sshd\[19749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91ecf82f.dsl.pool.telekom.hu 2020-07-29T23:32:44.614244vps751288.ovh.net sshd\[19749\]: Failed password for invalid user xuyuehan from 145.236.248.47 port 52820 ssh2 2020-07-29T23:39:16.191411vps751288.ovh.net sshd\[19822\]: Invalid user thchoi from 145.236.248.47 port 37426 2020-07-29T23:39:16.199311vps751288.ovh.net sshd\[19822\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91ecf82f.dsl.pool.telekom.hu |
2020-07-30 06:07:21 |
| 5.180.220.119 | attack | [2020-07-29 17:21:26] NOTICE[1248][C-0000142f] chan_sip.c: Call from '' (5.180.220.119:51022) to extension '999995011972595725668' rejected because extension not found in context 'public'. [2020-07-29 17:21:26] SECURITY[1275] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-29T17:21:26.671-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="999995011972595725668",SessionID="0x7f272007c5b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.180.220.119/51022",ACLName="no_extension_match" [2020-07-29 17:24:48] NOTICE[1248][C-00001433] chan_sip.c: Call from '' (5.180.220.119:61690) to extension '999993011972595725668' rejected because extension not found in context 'public'. [2020-07-29 17:24:48] SECURITY[1275] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-29T17:24:48.036-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="999993011972595725668",SessionID="0x7f272007c5b8",LocalAddress="IPV4/UDP/192.168.244.6/5060", ... |
2020-07-30 06:30:38 |
| 152.200.131.38 | attack | 1596054435 - 07/29/2020 22:27:15 Host: 152.200.131.38/152.200.131.38 Port: 445 TCP Blocked |
2020-07-30 06:04:55 |
| 154.17.5.77 | attackspam | Jul 29 22:26:53 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=154.17.5.77 DST=79.143.186.54 LEN=59 TOS=0x00 PREC=0x00 TTL=54 ID=30143 DF PROTO=UDP SPT=49859 DPT=53 LEN=39 Jul 29 22:26:53 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=154.17.5.77 DST=79.143.186.54 LEN=72 TOS=0x00 PREC=0x00 TTL=54 ID=30145 DF PROTO=UDP SPT=50386 DPT=53 LEN=52 Jul 29 22:26:53 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=154.17.5.77 DST=79.143.186.54 LEN=61 TOS=0x00 PREC=0x00 TTL=54 ID=30144 DF PROTO=UDP SPT=50425 DPT=53 LEN=41 |
2020-07-30 06:25:18 |
| 112.85.42.173 | attack | Jul 30 00:15:18 vpn01 sshd[8135]: Failed password for root from 112.85.42.173 port 25346 ssh2 Jul 30 00:15:22 vpn01 sshd[8135]: Failed password for root from 112.85.42.173 port 25346 ssh2 ... |
2020-07-30 06:17:25 |
| 79.55.111.119 | attackbotsspam | Automatic report - Port Scan Attack |
2020-07-30 06:27:22 |
| 88.4.181.232 | attack | Invalid user limengting from 88.4.181.232 port 40380 |
2020-07-30 06:03:08 |
| 197.60.29.176 | attackbotsspam | Jul 29 22:43:19 ajax sshd[20104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.60.29.176 Jul 29 22:43:21 ajax sshd[20104]: Failed password for invalid user exploration from 197.60.29.176 port 36790 ssh2 |
2020-07-30 06:36:17 |