City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 206.212.134.234
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29135
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;206.212.134.234. IN A
;; AUTHORITY SECTION:
. 117 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2021122801 1800 900 604800 86400
;; Query time: 86 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 29 04:41:17 CST 2021
;; MSG SIZE rcvd: 108b'Host 234.134.212.206.in-addr.arpa not found: 2(SERVFAIL)
';; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 234.134.212.206.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 118.168.76.98 | attackspam | Jul 29 20:03:32 localhost kernel: [15689205.562470] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=118.168.76.98 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=27974 PROTO=TCP SPT=8054 DPT=37215 WINDOW=16210 RES=0x00 SYN URGP=0 Jul 29 20:03:32 localhost kernel: [15689205.562477] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=118.168.76.98 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=27974 PROTO=TCP SPT=8054 DPT=37215 SEQ=758669438 ACK=0 WINDOW=16210 RES=0x00 SYN URGP=0 Jul 30 18:35:42 localhost kernel: [15770335.803188] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=118.168.76.98 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=34778 PROTO=TCP SPT=30552 DPT=37215 WINDOW=3887 RES=0x00 SYN URGP=0 Jul 30 18:35:42 localhost kernel: [15770335.803220] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=118.168.76.98 DST=[mungedIP2] LEN=40 TOS=0x00 P |
2019-07-31 11:02:49 |
| 150.129.118.220 | attack | Jul 31 02:48:17 MK-Soft-VM5 sshd\[24931\]: Invalid user mailman from 150.129.118.220 port 11580 Jul 31 02:48:17 MK-Soft-VM5 sshd\[24931\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.129.118.220 Jul 31 02:48:20 MK-Soft-VM5 sshd\[24931\]: Failed password for invalid user mailman from 150.129.118.220 port 11580 ssh2 ... |
2019-07-31 11:27:13 |
| 66.70.130.146 | attackbotsspam | Unauthorized SSH login attempts |
2019-07-31 11:26:07 |
| 45.67.14.153 | attackspambots | 2019-07-31T05:36:29.510817enmeeting.mahidol.ac.th sshd\[32536\]: Invalid user oracle from 45.67.14.153 port 51186 2019-07-31T05:36:29.529304enmeeting.mahidol.ac.th sshd\[32536\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.67.14.153 2019-07-31T05:36:31.442893enmeeting.mahidol.ac.th sshd\[32536\]: Failed password for invalid user oracle from 45.67.14.153 port 51186 ssh2 ... |
2019-07-31 10:42:02 |
| 54.38.192.96 | attack | Jul 30 22:59:28 plusreed sshd[7756]: Invalid user ac@123 from 54.38.192.96 ... |
2019-07-31 11:05:43 |
| 177.44.127.199 | attack | Jul 30 17:35:43 mailman postfix/smtpd[2308]: warning: unknown[177.44.127.199]: SASL PLAIN authentication failed: authentication failure |
2019-07-31 11:01:44 |
| 188.166.233.64 | attack | Jul 31 01:46:52 www1 sshd\[24703\]: Address 188.166.233.64 maps to vanwellis.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Jul 31 01:46:52 www1 sshd\[24703\]: Invalid user stackato from 188.166.233.64Jul 31 01:46:55 www1 sshd\[24703\]: Failed password for invalid user stackato from 188.166.233.64 port 37739 ssh2Jul 31 01:52:05 www1 sshd\[25328\]: Address 188.166.233.64 maps to vanwellis.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Jul 31 01:52:05 www1 sshd\[25328\]: Invalid user tomcat123!@\# from 188.166.233.64Jul 31 01:52:08 www1 sshd\[25328\]: Failed password for invalid user tomcat123!@\# from 188.166.233.64 port 35215 ssh2 ... |
2019-07-31 10:44:57 |
| 88.109.118.105 | attackbotsspam | port scan and connect, tcp 23 (telnet) |
2019-07-31 11:26:28 |
| 46.101.224.184 | attackspambots | Jul 31 01:46:29 mail sshd\[5618\]: Failed password for root from 46.101.224.184 port 42782 ssh2 Jul 31 02:05:38 mail sshd\[6186\]: Invalid user lh from 46.101.224.184 port 57884 Jul 31 02:05:38 mail sshd\[6186\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.224.184 ... |
2019-07-31 11:15:25 |
| 37.187.54.45 | attack | Jul 31 02:24:35 mail sshd\[6566\]: Failed password for invalid user j0k3r from 37.187.54.45 port 45228 ssh2 Jul 31 02:41:41 mail sshd\[6863\]: Invalid user ud from 37.187.54.45 port 56568 ... |
2019-07-31 11:12:37 |
| 185.109.80.234 | attackbots | Jul 31 06:41:30 vibhu-HP-Z238-Microtower-Workstation sshd\[21274\]: Invalid user gj from 185.109.80.234 Jul 31 06:41:30 vibhu-HP-Z238-Microtower-Workstation sshd\[21274\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.109.80.234 Jul 31 06:41:32 vibhu-HP-Z238-Microtower-Workstation sshd\[21274\]: Failed password for invalid user gj from 185.109.80.234 port 49014 ssh2 Jul 31 06:46:00 vibhu-HP-Z238-Microtower-Workstation sshd\[21397\]: Invalid user test1 from 185.109.80.234 Jul 31 06:46:00 vibhu-HP-Z238-Microtower-Workstation sshd\[21397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.109.80.234 ... |
2019-07-31 11:27:47 |
| 42.3.152.109 | attackbotsspam | port scan/probe/communication attempt |
2019-07-31 10:46:35 |
| 92.118.38.50 | attackbots | Jul 31 02:40:54 heicom postfix/smtpd\[22127\]: warning: unknown\[92.118.38.50\]: SASL LOGIN authentication failed: authentication failure Jul 31 02:41:46 heicom postfix/smtpd\[22127\]: warning: unknown\[92.118.38.50\]: SASL LOGIN authentication failed: authentication failure Jul 31 02:42:36 heicom postfix/smtpd\[22127\]: warning: unknown\[92.118.38.50\]: SASL LOGIN authentication failed: authentication failure Jul 31 02:43:27 heicom postfix/smtpd\[22127\]: warning: unknown\[92.118.38.50\]: SASL LOGIN authentication failed: authentication failure Jul 31 02:44:19 heicom postfix/smtpd\[22127\]: warning: unknown\[92.118.38.50\]: SASL LOGIN authentication failed: authentication failure ... |
2019-07-31 10:50:53 |
| 34.77.138.156 | attackspam | port scan/probe/communication attempt |
2019-07-31 10:48:17 |
| 191.223.5.21 | attackspam | Automatic report - Port Scan Attack |
2019-07-31 10:54:17 |