City: unknown
Region: unknown
Country: Switzerland
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.80.96.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55486
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;212.80.96.11. IN A
;; AUTHORITY SECTION:
. 510 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019123000 1800 900 604800 86400
;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 30 19:25:13 CST 2019
;; MSG SIZE rcvd: 116Host 11.96.80.212.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 11.96.80.212.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 211.151.130.24 | attack | Aug 23 10:56:53 ny01 sshd[28343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.151.130.24 Aug 23 10:56:55 ny01 sshd[28343]: Failed password for invalid user florian from 211.151.130.24 port 35772 ssh2 Aug 23 10:59:49 ny01 sshd[28822]: Failed password for root from 211.151.130.24 port 52810 ssh2 |
2020-08-24 04:12:23 |
| 157.230.230.152 | attackbotsspam | (sshd) Failed SSH login from 157.230.230.152 (US/United States/-): 5 in the last 3600 secs |
2020-08-24 04:10:46 |
| 105.43.145.200 | attack | Aug 23 14:16:39 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=105.43.145.200 DST=79.143.186.54 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=17612 DF PROTO=TCP SPT=2736 DPT=8291 WINDOW=8192 RES=0x00 SYN URGP=0 Aug 23 14:16:41 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=105.43.145.200 DST=79.143.186.54 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=18365 DF PROTO=TCP SPT=2736 DPT=8291 WINDOW=8192 RES=0x00 SYN URGP=0 Aug 23 14:16:43 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=105.43.145.200 DST=79.143.186.54 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=18576 DF PROTO=TCP SPT=2645 DPT=8291 WINDOW=8192 RES=0x00 SYN URGP=0 |
2020-08-24 03:58:24 |
| 14.21.36.84 | attack | Banned for a week because repeated abuses, for example SSH, but not only |
2020-08-24 04:12:54 |
| 201.211.163.43 | attackspambots | Unauthorized connection attempt from IP address 201.211.163.43 on Port 445(SMB) |
2020-08-24 04:30:52 |
| 93.51.29.92 | attackbotsspam | 2020-08-22T17:51:43.984288hostname sshd[75295]: Failed password for invalid user se from 93.51.29.92 port 50318 ssh2 ... |
2020-08-24 04:13:47 |
| 188.191.1.69 | attackspambots | Unauthorized connection attempt from IP address 188.191.1.69 on Port 445(SMB) |
2020-08-24 04:30:26 |
| 192.3.255.139 | attackspambots |
|
2020-08-24 04:03:20 |
| 218.29.219.20 | attackbots | Invalid user yunhui from 218.29.219.20 port 41117 |
2020-08-24 04:00:35 |
| 39.45.12.172 | attackbots | 1598184963 - 08/23/2020 14:16:03 Host: 39.45.12.172/39.45.12.172 Port: 445 TCP Blocked |
2020-08-24 04:20:59 |
| 218.92.0.145 | attackspam | Aug 23 12:57:42 propaganda sshd[39507]: Connection from 218.92.0.145 port 12002 on 10.0.0.161 port 22 rdomain "" Aug 23 12:57:42 propaganda sshd[39507]: Unable to negotiate with 218.92.0.145 port 12002: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] |
2020-08-24 03:59:05 |
| 197.211.9.62 | attackspam | $f2bV_matches |
2020-08-24 04:07:27 |
| 103.95.120.137 | attackspambots | Unauthorized connection attempt from IP address 103.95.120.137 on Port 445(SMB) |
2020-08-24 04:28:41 |
| 162.243.129.40 | attackbots | 1598184997 - 08/23/2020 14:16:37 Host: 162.243.129.40/162.243.129.40 Port: 873 TCP Blocked ... |
2020-08-24 04:00:48 |
| 91.121.162.198 | attackbotsspam | Aug 23 21:40:46 mout sshd[12525]: Invalid user ts3user from 91.121.162.198 port 47882 Aug 23 21:40:48 mout sshd[12525]: Failed password for invalid user ts3user from 91.121.162.198 port 47882 ssh2 Aug 23 21:40:48 mout sshd[12525]: Disconnected from invalid user ts3user 91.121.162.198 port 47882 [preauth] |
2020-08-24 03:57:35 |