City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.23.1.70
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20557
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;214.23.1.70. IN A
;; AUTHORITY SECTION:
. 143 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020900 1800 900 604800 86400
;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 09 17:36:24 CST 2022
;; MSG SIZE rcvd: 104b'Host 70.1.23.214.in-addr.arpa. not found: 3(NXDOMAIN)
'server can't find 214.23.1.70.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 2.36.136.146 | attack | This client attempted to login to an administrator account on a Website, or abused from another resource. |
2020-05-01 03:59:14 |
| 92.169.67.98 | attack | Apr 30 19:54:05 pve1 sshd[3121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.169.67.98 Apr 30 19:54:07 pve1 sshd[3121]: Failed password for invalid user guest from 92.169.67.98 port 41298 ssh2 ... |
2020-05-01 04:03:25 |
| 51.254.205.6 | attackspambots | (sshd) Failed SSH login from 51.254.205.6 (FR/France/6.ip-51-254-205.eu): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 30 20:35:23 ubnt-55d23 sshd[9832]: Invalid user admin from 51.254.205.6 port 58196 Apr 30 20:35:25 ubnt-55d23 sshd[9832]: Failed password for invalid user admin from 51.254.205.6 port 58196 ssh2 |
2020-05-01 03:58:35 |
| 195.54.167.16 | attackspam | Apr 30 20:36:54 debian-2gb-nbg1-2 kernel: \[10530730.437436\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=195.54.167.16 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=25299 PROTO=TCP SPT=51433 DPT=23335 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-01 03:37:26 |
| 51.38.130.242 | attack | Apr 30 17:18:43 v22019038103785759 sshd\[28510\]: Invalid user xx from 51.38.130.242 port 38154 Apr 30 17:18:43 v22019038103785759 sshd\[28510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.130.242 Apr 30 17:18:44 v22019038103785759 sshd\[28510\]: Failed password for invalid user xx from 51.38.130.242 port 38154 ssh2 Apr 30 17:26:05 v22019038103785759 sshd\[28923\]: Invalid user hack from 51.38.130.242 port 60928 Apr 30 17:26:05 v22019038103785759 sshd\[28923\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.130.242 ... |
2020-05-01 03:43:57 |
| 134.122.96.20 | attackbotsspam | Apr 30 14:26:52 nbi-636 sshd[11298]: Invalid user cip from 134.122.96.20 port 53900 Apr 30 14:26:52 nbi-636 sshd[11298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.96.20 Apr 30 14:26:54 nbi-636 sshd[11298]: Failed password for invalid user cip from 134.122.96.20 port 53900 ssh2 Apr 30 14:26:55 nbi-636 sshd[11298]: Received disconnect from 134.122.96.20 port 53900:11: Bye Bye [preauth] Apr 30 14:26:55 nbi-636 sshd[11298]: Disconnected from invalid user cip 134.122.96.20 port 53900 [preauth] Apr 30 14:32:49 nbi-636 sshd[13305]: User r.r from 134.122.96.20 not allowed because not listed in AllowUsers Apr 30 14:32:49 nbi-636 sshd[13305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.96.20 user=r.r Apr 30 14:32:51 nbi-636 sshd[13305]: Failed password for invalid user r.r from 134.122.96.20 port 55780 ssh2 Apr 30 14:32:53 nbi-636 sshd[13305]: Received disconnect from 134.1........ ------------------------------- |
2020-05-01 03:47:59 |
| 213.103.131.93 | attackbots | Honeypot attack, port: 5555, PTR: c213-103-131-93.bredband.comhem.se. |
2020-05-01 04:08:31 |
| 190.60.94.189 | attack | Apr 30 15:32:48 meumeu sshd[12233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.60.94.189 Apr 30 15:32:50 meumeu sshd[12233]: Failed password for invalid user publish from 190.60.94.189 port 25835 ssh2 Apr 30 15:37:28 meumeu sshd[12840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.60.94.189 ... |
2020-05-01 03:37:55 |
| 77.42.121.37 | attack | Automatic report - Port Scan Attack |
2020-05-01 04:02:44 |
| 41.218.204.149 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-05-01 03:42:28 |
| 52.199.142.74 | attackspambots | Apr 29 13:12:59 srv1 sshd[16417]: Invalid user wcs from 52.199.142.74 Apr 29 13:12:59 srv1 sshd[16417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-52-199-142-74.ap-northeast-1.compute.amazonaws.com Apr 29 13:13:01 srv1 sshd[16417]: Failed password for invalid user wcs from 52.199.142.74 port 37650 ssh2 Apr 29 13:13:01 srv1 sshd[16418]: Received disconnect from 52.199.142.74: 11: Bye Bye ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=52.199.142.74 |
2020-05-01 03:50:55 |
| 222.255.236.125 | attackbotsspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-05-01 04:06:50 |
| 200.105.158.42 | attackbots | Honeypot attack, port: 445, PTR: static-200-105-158-42.acelerate.net. |
2020-05-01 03:51:36 |
| 200.54.113.58 | attackbots | 2020-04-30T19:18:58.080298sd-86998 sshd[5986]: Invalid user testuser from 200.54.113.58 port 55684 2020-04-30T19:18:58.085210sd-86998 sshd[5986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.54.113.58 2020-04-30T19:18:58.080298sd-86998 sshd[5986]: Invalid user testuser from 200.54.113.58 port 55684 2020-04-30T19:19:00.139937sd-86998 sshd[5986]: Failed password for invalid user testuser from 200.54.113.58 port 55684 ssh2 2020-04-30T19:24:33.983495sd-86998 sshd[6440]: Invalid user fwinter from 200.54.113.58 port 57996 ... |
2020-05-01 03:40:12 |
| 159.203.189.152 | attackspam | prod3 ... |
2020-05-01 03:53:53 |