City: unknown
Region: unknown
Country: unknown
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
bb'
; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> 2001:610:1a08:292:129:125:2:51
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 59525
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;2001:610:1a08:292:129:125:2:51. IN A
;; Query time: 0 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Fri Feb 18 23:46:02 CST 2022
;; MSG SIZE rcvd: 59
'b'1.5.0.0.2.0.0.0.5.2.1.0.9.2.1.0.2.9.2.0.8.0.a.1.0.1.6.0.1.0.0.2.ip6.arpa domain name pointer production.ucms.rug.nl.
'Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
1.5.0.0.2.0.0.0.5.2.1.0.9.2.1.0.2.9.2.0.8.0.a.1.0.1.6.0.1.0.0.2.ip6.arpa name = production.ucms.rug.nl.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.54.124.250 | attackspam | Dec 8 01:18:10 tdfoods sshd\[21318\]: Invalid user test222 from 106.54.124.250 Dec 8 01:18:10 tdfoods sshd\[21318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.124.250 Dec 8 01:18:12 tdfoods sshd\[21318\]: Failed password for invalid user test222 from 106.54.124.250 port 56966 ssh2 Dec 8 01:24:54 tdfoods sshd\[21895\]: Invalid user p@ssword from 106.54.124.250 Dec 8 01:24:54 tdfoods sshd\[21895\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.124.250 |
2019-12-08 19:25:41 |
| 123.58.251.17 | attack | Dec 8 10:50:46 MK-Soft-Root1 sshd[31886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.58.251.17 Dec 8 10:50:48 MK-Soft-Root1 sshd[31886]: Failed password for invalid user chandra from 123.58.251.17 port 51640 ssh2 ... |
2019-12-08 19:44:36 |
| 218.92.0.147 | attackspambots | Dec 8 13:03:37 nextcloud sshd\[12723\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.147 user=root Dec 8 13:03:39 nextcloud sshd\[12723\]: Failed password for root from 218.92.0.147 port 17834 ssh2 Dec 8 13:03:42 nextcloud sshd\[12723\]: Failed password for root from 218.92.0.147 port 17834 ssh2 ... |
2019-12-08 20:04:34 |
| 202.137.155.204 | attackspam | $f2bV_matches |
2019-12-08 20:04:57 |
| 149.129.74.9 | attackspam | Automatic report - XMLRPC Attack |
2019-12-08 19:50:24 |
| 91.121.211.59 | attackspambots | Dec 8 06:53:15 web8 sshd\[28892\]: Invalid user oracle from 91.121.211.59 Dec 8 06:53:15 web8 sshd\[28892\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.211.59 Dec 8 06:53:17 web8 sshd\[28892\]: Failed password for invalid user oracle from 91.121.211.59 port 35952 ssh2 Dec 8 06:58:42 web8 sshd\[31486\]: Invalid user sallehar from 91.121.211.59 Dec 8 06:58:42 web8 sshd\[31486\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.211.59 |
2019-12-08 19:39:31 |
| 129.158.71.3 | attackbotsspam | Dec 8 14:01:51 server sshd\[27197\]: Invalid user guest from 129.158.71.3 Dec 8 14:01:51 server sshd\[27197\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=oc-129-158-71-3.compute.oraclecloud.com Dec 8 14:01:53 server sshd\[27197\]: Failed password for invalid user guest from 129.158.71.3 port 50034 ssh2 Dec 8 14:07:24 server sshd\[28623\]: Invalid user starratt from 129.158.71.3 Dec 8 14:07:24 server sshd\[28623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=oc-129-158-71-3.compute.oraclecloud.com ... |
2019-12-08 19:38:16 |
| 212.30.187.7 | attack | Automatic report - XMLRPC Attack |
2019-12-08 19:47:14 |
| 86.121.129.65 | attack | CloudCIX Reconnaissance Scan Detected, PTR: 86-121-129-65.rdsnet.ro. |
2019-12-08 19:26:06 |
| 185.74.4.189 | attackspam | Dec 8 12:03:47 minden010 sshd[22972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.74.4.189 Dec 8 12:03:50 minden010 sshd[22972]: Failed password for invalid user pvp from 185.74.4.189 port 60030 ssh2 Dec 8 12:10:06 minden010 sshd[28932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.74.4.189 ... |
2019-12-08 19:57:39 |
| 116.101.82.11 | attackbotsspam | $f2bV_matches |
2019-12-08 19:49:38 |
| 222.186.175.169 | attackspambots | Dec 8 12:45:25 nextcloud sshd\[13371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.169 user=root Dec 8 12:45:27 nextcloud sshd\[13371\]: Failed password for root from 222.186.175.169 port 57956 ssh2 Dec 8 12:45:32 nextcloud sshd\[13371\]: Failed password for root from 222.186.175.169 port 57956 ssh2 ... |
2019-12-08 19:46:08 |
| 178.128.26.22 | attackbots | Dec 7 20:30:01 ihdb003 sshd[12486]: Connection from 178.128.26.22 port 56192 on 178.128.173.140 port 22 Dec 7 20:30:01 ihdb003 sshd[12486]: Did not receive identification string from 178.128.26.22 port 56192 Dec 7 20:30:50 ihdb003 sshd[12491]: Connection from 178.128.26.22 port 41146 on 178.128.173.140 port 22 Dec 7 20:30:51 ihdb003 sshd[12491]: User r.r from 178.128.26.22 not allowed because none of user's groups are listed in AllowGroups Dec 7 20:30:51 ihdb003 sshd[12491]: Received disconnect from 178.128.26.22 port 41146:11: Normal Shutdown, Thank you for playing [preauth] Dec 7 20:30:51 ihdb003 sshd[12491]: Disconnected from 178.128.26.22 port 41146 [preauth] Dec 7 20:31:28 ihdb003 sshd[12494]: Connection from 178.128.26.22 port 41152 on 178.128.173.140 port 22 Dec 7 20:31:29 ihdb003 sshd[12494]: User r.r from 178.128.26.22 not allowed because none of user's groups are listed in AllowGroups Dec 7 20:31:29 ihdb003 sshd[12494]: Received disconnect from 178.12........ ------------------------------- |
2019-12-08 19:31:15 |
| 182.163.227.54 | attackbots | CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2019-12-08 19:36:46 |
| 54.37.158.40 | attackbotsspam | 2019-12-08T06:18:17.617450Z 1cb8c450c6c0 New connection: 54.37.158.40:42427 (172.17.0.6:2222) [session: 1cb8c450c6c0] 2019-12-08T06:26:56.655107Z ec4d531096a9 New connection: 54.37.158.40:41382 (172.17.0.6:2222) [session: ec4d531096a9] |
2019-12-08 19:24:31 |