City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
        ; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.230.241.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48258
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;214.230.241.107.		IN	A
;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 19:18:52 CST 2025
;; MSG SIZE  rcvd: 108
        Host 107.241.230.214.in-addr.arpa not found: 2(SERVFAIL)
        server can't find 214.230.241.107.in-addr.arpa: SERVFAIL
        | IP | Type | Details | Datetime | 
|---|---|---|---|
| 115.231.130.25 | attack | DATE:2020-09-20 03:11:55, IP:115.231.130.25, PORT:ssh SSH brute force auth (docker-dc)  | 
                    2020-09-20 12:10:50 | 
| 125.163.18.124 | attack | Unauthorized connection attempt from IP address 125.163.18.124 on Port 445(SMB)  | 
                    2020-09-20 07:48:10 | 
| 192.241.239.140 | attackspambots | " "  | 
                    2020-09-20 08:12:42 | 
| 168.70.111.189 | attackspambots | Sep 19 19:06:43 ssh2 sshd[37969]: User root from 168.70.111.189 not allowed because not listed in AllowUsers Sep 19 19:06:43 ssh2 sshd[37969]: Failed password for invalid user root from 168.70.111.189 port 54550 ssh2 Sep 19 19:06:43 ssh2 sshd[37969]: Connection closed by invalid user root 168.70.111.189 port 54550 [preauth] ...  | 
                    2020-09-20 08:13:35 | 
| 78.46.227.16 | attackbots | Web DDoS Attacks  | 
                    2020-09-20 07:49:58 | 
| 123.206.33.56 | attackbotsspam | pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.33.56 Invalid user informix from 123.206.33.56 port 46656 Failed password for invalid user informix from 123.206.33.56 port 46656 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.33.56 user=root Failed password for root from 123.206.33.56 port 52028 ssh2  | 
                    2020-09-20 12:09:31 | 
| 82.55.108.154 | attack | Automatic report - Port Scan Attack  | 
                    2020-09-20 07:58:56 | 
| 222.186.175.217 | attackspam | Sep 20 04:04:23 email sshd\[29922\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.217 user=root Sep 20 04:04:25 email sshd\[29922\]: Failed password for root from 222.186.175.217 port 29110 ssh2 Sep 20 04:04:28 email sshd\[29922\]: Failed password for root from 222.186.175.217 port 29110 ssh2 Sep 20 04:04:43 email sshd\[29990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.217 user=root Sep 20 04:04:46 email sshd\[29990\]: Failed password for root from 222.186.175.217 port 39570 ssh2 ...  | 
                    2020-09-20 12:07:18 | 
| 218.249.73.54 | attack | Time: Sat Sep 19 21:59:04 2020 +0200 IP: 218.249.73.54 (CN/China/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 19 21:53:40 3-1 sshd[57637]: Invalid user test05 from 218.249.73.54 port 47068 Sep 19 21:53:42 3-1 sshd[57637]: Failed password for invalid user test05 from 218.249.73.54 port 47068 ssh2 Sep 19 21:56:52 3-1 sshd[57770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.249.73.54 user=root Sep 19 21:56:54 3-1 sshd[57770]: Failed password for root from 218.249.73.54 port 55036 ssh2 Sep 19 21:58:57 3-1 sshd[57854]: Invalid user backupadmin from 218.249.73.54 port 55072  | 
                    2020-09-20 12:04:45 | 
| 121.204.141.232 | attackbotsspam | Brute-force attempt banned  | 
                    2020-09-20 12:06:44 | 
| 41.111.132.94 | attack | Unauthorized connection attempt from IP address 41.111.132.94 on Port 445(SMB)  | 
                    2020-09-20 07:51:32 | 
| 117.144.121.112 | attack | Auto Detect Rule! proto TCP (SYN), 117.144.121.112:53969->gjan.info:23, len 40  | 
                    2020-09-20 08:00:20 | 
| 118.222.106.103 | attackbots | Automatic report - Banned IP Access  | 
                    2020-09-20 08:07:10 | 
| 151.253.154.42 | attackspam | Unauthorized connection attempt from IP address 151.253.154.42 on Port 445(SMB)  | 
                    2020-09-20 07:59:39 | 
| 188.166.251.156 | attackspambots | Time: Sun Sep 20 02:45:20 2020 +0200 IP: 188.166.251.156 (SG/Singapore/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 20 02:27:10 3-1 sshd[39375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.251.156 user=root Sep 20 02:27:11 3-1 sshd[39375]: Failed password for root from 188.166.251.156 port 57254 ssh2 Sep 20 02:41:08 3-1 sshd[42205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.251.156 user=root Sep 20 02:41:10 3-1 sshd[42205]: Failed password for root from 188.166.251.156 port 58402 ssh2 Sep 20 02:45:19 3-1 sshd[42420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.251.156 user=root  | 
                    2020-09-20 12:00:27 |