City: unknown
Region: unknown
Country: China
Internet Service Provider: China Unicom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 221.207.34.217
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55999
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;221.207.34.217. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025121703 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 18 12:00:59 CST 2025
;; MSG SIZE rcvd: 107Host 217.34.207.221.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 217.34.207.221.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.234.46.134 | attack | Sep 24 02:58:14 auw2 sshd\[8524\]: Invalid user 654321 from 49.234.46.134 Sep 24 02:58:14 auw2 sshd\[8524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.46.134 Sep 24 02:58:15 auw2 sshd\[8524\]: Failed password for invalid user 654321 from 49.234.46.134 port 35164 ssh2 Sep 24 03:03:39 auw2 sshd\[8995\]: Invalid user Passw0rd from 49.234.46.134 Sep 24 03:03:39 auw2 sshd\[8995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.46.134 |
2019-09-24 21:19:24 |
| 139.59.25.230 | attackbots | Sep 24 13:16:02 hcbbdb sshd\[27793\]: Invalid user foswiki from 139.59.25.230 Sep 24 13:16:02 hcbbdb sshd\[27793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.25.230 Sep 24 13:16:04 hcbbdb sshd\[27793\]: Failed password for invalid user foswiki from 139.59.25.230 port 43354 ssh2 Sep 24 13:20:10 hcbbdb sshd\[28285\]: Invalid user adidas from 139.59.25.230 Sep 24 13:20:10 hcbbdb sshd\[28285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.25.230 |
2019-09-24 21:32:58 |
| 180.168.141.242 | attack | Sep 24 12:34:42 hosname22 sshd[13356]: Did not receive identification string from 180.168.141.242 port 42956 Sep 24 12:34:43 hosname22 sshd[13357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.141.242 user=r.r Sep 24 12:34:45 hosname22 sshd[13357]: Failed password for r.r from 180.168.141.242 port 42975 ssh2 Sep 24 12:34:45 hosname22 sshd[13357]: error: Received disconnect from 180.168.141.242 port 42975:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Sep 24 12:34:45 hosname22 sshd[13357]: Disconnected from 180.168.141.242 port 42975 [preauth] Sep 24 12:34:47 hosname22 sshd[13359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.141.242 user=r.r Sep 24 12:34:49 hosname22 sshd[13359]: Failed password for r.r from 180.168.141.242 port 43097 ssh2 Sep 24 12:34:49 hosname22 sshd[13359]: error: Received disconnect from 180.168.141.242 port 43097:3: com.jcraft.jsch.JSchEx........ ------------------------------- |
2019-09-24 21:18:05 |
| 197.53.248.6 | attackspambots | DATE:2019-09-24 14:36:52, IP:197.53.248.6, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc-bis) |
2019-09-24 21:24:39 |
| 49.88.112.78 | attack | Sep 24 08:28:44 debian sshd[6157]: Unable to negotiate with 49.88.112.78 port 54163: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Sep 24 09:42:11 debian sshd[11823]: Unable to negotiate with 49.88.112.78 port 27040: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2019-09-24 21:50:25 |
| 118.70.215.62 | attackspam | Sep 24 02:36:59 eddieflores sshd\[31901\]: Invalid user csgoserver from 118.70.215.62 Sep 24 02:36:59 eddieflores sshd\[31901\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.215.62 Sep 24 02:37:01 eddieflores sshd\[31901\]: Failed password for invalid user csgoserver from 118.70.215.62 port 47914 ssh2 Sep 24 02:46:04 eddieflores sshd\[32713\]: Invalid user jmail from 118.70.215.62 Sep 24 02:46:04 eddieflores sshd\[32713\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.215.62 |
2019-09-24 21:35:17 |
| 162.247.74.216 | attackspam | 2019-09-24T12:41:35.620298abusebot.cloudsearch.cf sshd\[4378\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=phoolandevi.tor-exit.calyxinstitute.org user=root |
2019-09-24 21:32:07 |
| 112.253.11.105 | attackspam | Automatic report - Banned IP Access |
2019-09-24 21:41:15 |
| 138.197.93.133 | attackbotsspam | Sep 24 15:27:36 microserver sshd[46470]: Invalid user sacre from 138.197.93.133 port 57202 Sep 24 15:27:36 microserver sshd[46470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.93.133 Sep 24 15:27:38 microserver sshd[46470]: Failed password for invalid user sacre from 138.197.93.133 port 57202 ssh2 Sep 24 15:30:58 microserver sshd[47067]: Invalid user pvp from 138.197.93.133 port 41920 Sep 24 15:30:58 microserver sshd[47067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.93.133 Sep 24 15:41:27 microserver sshd[48459]: Invalid user rszhu from 138.197.93.133 port 52534 Sep 24 15:41:27 microserver sshd[48459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.93.133 Sep 24 15:41:29 microserver sshd[48459]: Failed password for invalid user rszhu from 138.197.93.133 port 52534 ssh2 Sep 24 15:44:59 microserver sshd[48647]: Invalid user temp from 138.197.93.133 port 37250 |
2019-09-24 21:56:50 |
| 62.234.106.199 | attackbots | $f2bV_matches |
2019-09-24 21:57:27 |
| 208.82.90.170 | attackbotsspam | Sep 23 23:43:01 rb06 sshd[2157]: reveeclipse mapping checking getaddrinfo for 208.82.90.170.static.addr.broadnetworks.ca [208.82.90.170] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 23 23:43:02 rb06 sshd[2157]: Failed password for invalid user xi from 208.82.90.170 port 57516 ssh2 Sep 23 23:43:03 rb06 sshd[2157]: Received disconnect from 208.82.90.170: 11: Bye Bye [preauth] Sep 24 00:03:54 rb06 sshd[14952]: reveeclipse mapping checking getaddrinfo for 208.82.90.170.static.addr.broadnetworks.ca [208.82.90.170] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 24 00:03:56 rb06 sshd[14952]: Failed password for invalid user uftp from 208.82.90.170 port 2665 ssh2 Sep 24 00:03:56 rb06 sshd[14952]: Received disconnect from 208.82.90.170: 11: Bye Bye [preauth] Sep 24 00:07:29 rb06 sshd[16558]: reveeclipse mapping checking getaddrinfo for 208.82.90.170.static.addr.broadnetworks.ca [208.82.90.170] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 24 00:07:31 rb06 sshd[16558]: Failed password for invalid ........ ------------------------------- |
2019-09-24 21:31:43 |
| 222.186.42.163 | attackbots | Sep 24 15:23:25 herz-der-gamer sshd[28152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.163 user=root Sep 24 15:23:27 herz-der-gamer sshd[28152]: Failed password for root from 222.186.42.163 port 32532 ssh2 ... |
2019-09-24 21:24:12 |
| 200.116.86.144 | attackbots | Sep 24 20:07:59 itv-usvr-02 sshd[26974]: Invalid user Includu135dx from 200.116.86.144 port 44990 Sep 24 20:07:59 itv-usvr-02 sshd[26974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.116.86.144 Sep 24 20:07:59 itv-usvr-02 sshd[26974]: Invalid user Includu135dx from 200.116.86.144 port 44990 Sep 24 20:08:02 itv-usvr-02 sshd[26974]: Failed password for invalid user Includu135dx from 200.116.86.144 port 44990 ssh2 Sep 24 20:12:56 itv-usvr-02 sshd[27089]: Invalid user ivan from 200.116.86.144 port 57508 |
2019-09-24 21:53:18 |
| 139.59.17.50 | attack | Sep 24 05:49:44 newdogma sshd[4109]: Invalid user oleg from 139.59.17.50 port 50314 Sep 24 05:49:44 newdogma sshd[4109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.17.50 Sep 24 05:49:47 newdogma sshd[4109]: Failed password for invalid user oleg from 139.59.17.50 port 50314 ssh2 Sep 24 05:49:47 newdogma sshd[4109]: Received disconnect from 139.59.17.50 port 50314:11: Bye Bye [preauth] Sep 24 05:49:47 newdogma sshd[4109]: Disconnected from 139.59.17.50 port 50314 [preauth] Sep 24 05:54:26 newdogma sshd[4152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.17.50 user=r.r Sep 24 05:54:28 newdogma sshd[4152]: Failed password for r.r from 139.59.17.50 port 38798 ssh2 Sep 24 05:54:28 newdogma sshd[4152]: Received disconnect from 139.59.17.50 port 38798:11: Bye Bye [preauth] Sep 24 05:54:28 newdogma sshd[4152]: Disconnected from 139.59.17.50 port 38798 [preauth] ........ --------------------------------------------- |
2019-09-24 21:38:13 |
| 211.193.13.111 | attack | Sep 24 03:32:12 hanapaa sshd\[9387\]: Invalid user xvf from 211.193.13.111 Sep 24 03:32:12 hanapaa sshd\[9387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.193.13.111 Sep 24 03:32:14 hanapaa sshd\[9387\]: Failed password for invalid user xvf from 211.193.13.111 port 21833 ssh2 Sep 24 03:36:33 hanapaa sshd\[9745\]: Invalid user admin from 211.193.13.111 Sep 24 03:36:33 hanapaa sshd\[9745\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.193.13.111 |
2019-09-24 21:48:35 |