City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.27.214.177
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48611
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;214.27.214.177. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020900 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 09 23:19:53 CST 2025
;; MSG SIZE rcvd: 107Host 177.214.27.214.in-addr.arpa not found: 2(SERVFAIL)
server can't find 214.27.214.177.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 151.52.77.76 | attackbots | Automatic report - Port Scan Attack |
2020-06-13 21:31:07 |
| 178.128.150.158 | attackbotsspam | 2020-06-13T14:20:33.449737amanda2.illicoweb.com sshd\[13843\]: Invalid user sseedorf from 178.128.150.158 port 55908 2020-06-13T14:20:33.455399amanda2.illicoweb.com sshd\[13843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.150.158 2020-06-13T14:20:35.603102amanda2.illicoweb.com sshd\[13843\]: Failed password for invalid user sseedorf from 178.128.150.158 port 55908 ssh2 2020-06-13T14:27:51.598071amanda2.illicoweb.com sshd\[14112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.150.158 user=root 2020-06-13T14:27:54.207486amanda2.illicoweb.com sshd\[14112\]: Failed password for root from 178.128.150.158 port 44922 ssh2 ... |
2020-06-13 21:24:42 |
| 129.211.55.22 | attack | Jun 13 06:24:00 dignus sshd[11402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22 user=root Jun 13 06:24:02 dignus sshd[11402]: Failed password for root from 129.211.55.22 port 37314 ssh2 Jun 13 06:29:07 dignus sshd[11852]: Invalid user ts3bot1 from 129.211.55.22 port 34474 Jun 13 06:29:07 dignus sshd[11852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.55.22 Jun 13 06:29:09 dignus sshd[11852]: Failed password for invalid user ts3bot1 from 129.211.55.22 port 34474 ssh2 ... |
2020-06-13 21:33:24 |
| 188.254.0.160 | attack | Jun 13 14:37:48 localhost sshd\[26562\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.160 user=root Jun 13 14:37:50 localhost sshd\[26562\]: Failed password for root from 188.254.0.160 port 50804 ssh2 Jun 13 14:41:16 localhost sshd\[26837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.160 user=root Jun 13 14:41:18 localhost sshd\[26837\]: Failed password for root from 188.254.0.160 port 51676 ssh2 Jun 13 14:44:38 localhost sshd\[26866\]: Invalid user dk from 188.254.0.160 Jun 13 14:44:38 localhost sshd\[26866\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.160 ... |
2020-06-13 21:45:15 |
| 183.83.65.186 | attackspam | 20/6/13@08:27:42: FAIL: Alarm-Network address from=183.83.65.186 ... |
2020-06-13 21:29:39 |
| 142.93.240.192 | attackspambots | 2020-06-13T14:44:58.046810struts4.enskede.local sshd\[3254\]: Invalid user chris from 142.93.240.192 port 40704 2020-06-13T14:44:58.058574struts4.enskede.local sshd\[3254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.192 2020-06-13T14:45:01.959705struts4.enskede.local sshd\[3254\]: Failed password for invalid user chris from 142.93.240.192 port 40704 ssh2 2020-06-13T14:48:36.407548struts4.enskede.local sshd\[3266\]: Invalid user cloudera from 142.93.240.192 port 41874 2020-06-13T14:48:36.413676struts4.enskede.local sshd\[3266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.240.192 ... |
2020-06-13 21:42:58 |
| 79.139.56.217 | attackspambots | DATE:2020-06-13 14:27:49, IP:79.139.56.217, PORT:1433 - MSSQL brute force auth on a honeypot server (epe-dc) |
2020-06-13 21:28:33 |
| 134.122.96.20 | attack | Jun 13 08:24:07 mx sshd[20319]: Failed password for root from 134.122.96.20 port 46574 ssh2 Jun 13 08:28:03 mx sshd[22815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.96.20 |
2020-06-13 21:19:41 |
| 37.152.177.25 | attack | fail2ban -- 37.152.177.25 ... |
2020-06-13 21:25:41 |
| 190.85.54.158 | attackspam | Jun 13 14:32:17 srv-ubuntu-dev3 sshd[123366]: Invalid user tecnofrota_teste from 190.85.54.158 Jun 13 14:32:17 srv-ubuntu-dev3 sshd[123366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.85.54.158 Jun 13 14:32:17 srv-ubuntu-dev3 sshd[123366]: Invalid user tecnofrota_teste from 190.85.54.158 Jun 13 14:32:19 srv-ubuntu-dev3 sshd[123366]: Failed password for invalid user tecnofrota_teste from 190.85.54.158 port 53062 ssh2 Jun 13 14:36:15 srv-ubuntu-dev3 sshd[124060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.85.54.158 user=root Jun 13 14:36:17 srv-ubuntu-dev3 sshd[124060]: Failed password for root from 190.85.54.158 port 53340 ssh2 Jun 13 14:40:27 srv-ubuntu-dev3 sshd[124738]: Invalid user templates from 190.85.54.158 Jun 13 14:40:27 srv-ubuntu-dev3 sshd[124738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.85.54.158 Jun 13 14:40:27 srv-ubuntu-dev ... |
2020-06-13 21:25:53 |
| 193.112.252.254 | attackspambots | (sshd) Failed SSH login from 193.112.252.254 (CN/China/-): 5 in the last 3600 secs |
2020-06-13 21:41:56 |
| 93.170.36.5 | attackbots | Jun 13 22:17:59 web1 sshd[4204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.170.36.5 user=root Jun 13 22:18:01 web1 sshd[4204]: Failed password for root from 93.170.36.5 port 45986 ssh2 Jun 13 22:24:25 web1 sshd[5735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.170.36.5 user=root Jun 13 22:24:27 web1 sshd[5735]: Failed password for root from 93.170.36.5 port 60526 ssh2 Jun 13 22:26:08 web1 sshd[6208]: Invalid user debian from 93.170.36.5 port 55278 Jun 13 22:26:08 web1 sshd[6208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.170.36.5 Jun 13 22:26:08 web1 sshd[6208]: Invalid user debian from 93.170.36.5 port 55278 Jun 13 22:26:11 web1 sshd[6208]: Failed password for invalid user debian from 93.170.36.5 port 55278 ssh2 Jun 13 22:27:48 web1 sshd[6583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.170.3 ... |
2020-06-13 21:26:59 |
| 222.186.31.83 | attackbots | Jun 13 15:36:56 vpn01 sshd[19587]: Failed password for root from 222.186.31.83 port 12687 ssh2 ... |
2020-06-13 21:37:58 |
| 206.189.139.179 | attackbots | SSH Honeypot -> SSH Bruteforce / Login |
2020-06-13 21:25:11 |
| 218.249.40.241 | attack | CN_MAINT-CN-DXTNET_<177>1592051292 [1:2010935:3] ET SCAN Suspicious inbound to MSSQL port 1433 [Classification: Potentially Bad Traffic] [Priority: 2]: |
2020-06-13 21:11:19 |