City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.47.35.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25918
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;214.47.35.138. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025030100 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 01 14:47:31 CST 2025
;; MSG SIZE rcvd: 106b'Host 138.35.47.214.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 214.47.35.138.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 192.144.179.249 | attackspam | Mar 24 19:32:16 plex sshd[2807]: Invalid user ny from 192.144.179.249 port 44948 |
2020-03-25 02:36:31 |
| 15.236.60.157 | attackspambots | [Tue Mar 24 08:02:08 2020] - DDoS Attack From IP: 15.236.60.157 Port: 42583 |
2020-03-25 02:21:40 |
| 114.217.68.123 | attackspam | Automatic report - Port Scan Attack |
2020-03-25 02:19:05 |
| 101.36.150.59 | attack | - |
2020-03-25 02:48:46 |
| 123.206.88.24 | attack | (sshd) Failed SSH login from 123.206.88.24 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 24 19:11:50 amsweb01 sshd[32729]: Invalid user hanwang from 123.206.88.24 port 39046 Mar 24 19:11:52 amsweb01 sshd[32729]: Failed password for invalid user hanwang from 123.206.88.24 port 39046 ssh2 Mar 24 19:28:45 amsweb01 sshd[2391]: Invalid user bz from 123.206.88.24 port 53096 Mar 24 19:28:47 amsweb01 sshd[2391]: Failed password for invalid user bz from 123.206.88.24 port 53096 ssh2 Mar 24 19:32:13 amsweb01 sshd[2929]: Invalid user vg from 123.206.88.24 port 53942 |
2020-03-25 02:36:58 |
| 183.56.211.38 | attackbots | B: Abusive ssh attack |
2020-03-25 02:20:32 |
| 138.68.168.137 | attackspambots | 2020-03-24T18:24:04.338629shield sshd\[1720\]: Invalid user testuser from 138.68.168.137 port 41348 2020-03-24T18:24:04.342343shield sshd\[1720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137 2020-03-24T18:24:06.326852shield sshd\[1720\]: Failed password for invalid user testuser from 138.68.168.137 port 41348 ssh2 2020-03-24T18:31:58.513381shield sshd\[3346\]: Invalid user jeanie from 138.68.168.137 port 59402 2020-03-24T18:31:58.516640shield sshd\[3346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137 |
2020-03-25 02:52:35 |
| 106.240.246.194 | attackbotsspam | IP blocked |
2020-03-25 02:24:24 |
| 81.218.130.49 | attackbots | Mar 24 14:22:21 ny01 sshd[31362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.218.130.49 Mar 24 14:22:23 ny01 sshd[31362]: Failed password for invalid user m from 81.218.130.49 port 48924 ssh2 Mar 24 14:32:05 ny01 sshd[3787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.218.130.49 |
2020-03-25 02:45:47 |
| 2.183.212.22 | attackspam | ** MIRAI HOST ** Tue Mar 24 02:57:44 2020 - Child process 365627 handling connection Tue Mar 24 02:57:44 2020 - New connection from: 2.183.212.22:49655 Tue Mar 24 02:57:44 2020 - Sending data to client: [Login: ] Tue Mar 24 02:57:44 2020 - Got data: admin Tue Mar 24 02:57:45 2020 - Sending data to client: [Password: ] Tue Mar 24 02:57:46 2020 - Got data: 1234 Tue Mar 24 02:57:48 2020 - Child 365627 exiting Tue Mar 24 02:57:48 2020 - Child 365628 granting shell Tue Mar 24 02:57:48 2020 - Sending data to client: [Logged in] Tue Mar 24 02:57:48 2020 - Sending data to client: [Welcome to MX990 Embedded Linux] Tue Mar 24 02:57:48 2020 - Sending data to client: [[root@dvrdvs /]# ] Tue Mar 24 02:57:48 2020 - Got data: enable system shell sh Tue Mar 24 02:57:48 2020 - Sending data to client: [Command not found] Tue Mar 24 02:57:48 2020 - Sending data to client: [[root@dvrdvs /]# ] Tue Mar 24 02:57:49 2020 - Got data: cat /proc/mounts; /bin/busybox ZYCFP Tue Mar 24 02:57:49 2020 - Sending data to client: |
2020-03-25 02:28:08 |
| 121.227.102.10 | attack | SSH login attempts brute force. |
2020-03-25 02:11:20 |
| 145.249.107.171 | attack | Mar 24 14:06:26 ns3042688 courier-pop3d: LOGIN FAILED, user=info@sikla-systems.com, ip=\[::ffff:145.249.107.171\] ... |
2020-03-25 02:14:30 |
| 195.69.222.169 | attackspam | (sshd) Failed SSH login from 195.69.222.169 (UA/Ukraine/host169-222.impuls.net.ua): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 24 18:53:25 ubnt-55d23 sshd[18831]: Invalid user hailie from 195.69.222.169 port 35745 Mar 24 18:53:27 ubnt-55d23 sshd[18831]: Failed password for invalid user hailie from 195.69.222.169 port 35745 ssh2 |
2020-03-25 02:16:55 |
| 201.234.66.133 | attackspam | Total attacks: 2 |
2020-03-25 02:50:55 |
| 167.114.55.91 | attackbots | Mar 24 15:33:52 firewall sshd[1896]: Invalid user xupeng from 167.114.55.91 Mar 24 15:33:54 firewall sshd[1896]: Failed password for invalid user xupeng from 167.114.55.91 port 55964 ssh2 Mar 24 15:42:31 firewall sshd[2423]: Invalid user zym from 167.114.55.91 ... |
2020-03-25 02:46:47 |