City: Guangzhou
Region: Guangdong
Country: China
Internet Service Provider: China Unicom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 27.38.19.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22073
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;27.38.19.139. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021301 1800 900 604800 86400
;; Query time: 143 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 08:34:06 CST 2025
;; MSG SIZE rcvd: 105Host 139.19.38.27.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 139.19.38.27.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 220.130.190.13 | attackspambots | Jul 15 03:58:53 itv-usvr-01 sshd[12739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.130.190.13 user=lxd Jul 15 03:58:55 itv-usvr-01 sshd[12739]: Failed password for lxd from 220.130.190.13 port 61957 ssh2 Jul 15 04:04:22 itv-usvr-01 sshd[12953]: Invalid user jackie from 220.130.190.13 Jul 15 04:04:22 itv-usvr-01 sshd[12953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.130.190.13 Jul 15 04:04:22 itv-usvr-01 sshd[12953]: Invalid user jackie from 220.130.190.13 Jul 15 04:04:24 itv-usvr-01 sshd[12953]: Failed password for invalid user jackie from 220.130.190.13 port 61440 ssh2 |
2019-07-15 14:24:56 |
| 114.70.194.82 | attackspam | Jul 15 08:40:57 meumeu sshd[26939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.70.194.82 Jul 15 08:40:59 meumeu sshd[26939]: Failed password for invalid user csserver from 114.70.194.82 port 35774 ssh2 Jul 15 08:46:42 meumeu sshd[28010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.70.194.82 ... |
2019-07-15 14:59:25 |
| 129.150.86.200 | attackbots | Jul 15 12:28:22 areeb-Workstation sshd\[511\]: Invalid user sas from 129.150.86.200 Jul 15 12:28:22 areeb-Workstation sshd\[511\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.150.86.200 Jul 15 12:28:24 areeb-Workstation sshd\[511\]: Failed password for invalid user sas from 129.150.86.200 port 50152 ssh2 ... |
2019-07-15 15:00:36 |
| 103.212.140.135 | attackbotsspam | Jul 15 02:29:33 localhost kernel: [14416366.835441] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=103.212.140.135 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x20 TTL=48 ID=2112 DF PROTO=TCP SPT=58699 DPT=8291 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 15 02:29:33 localhost kernel: [14416366.835472] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=103.212.140.135 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x20 TTL=48 ID=2112 DF PROTO=TCP SPT=58699 DPT=8291 SEQ=1872484757 ACK=0 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (020405AC0103030201010402) Jul 15 02:29:36 localhost kernel: [14416370.044023] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=103.212.140.135 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x20 TTL=48 ID=28960 DF PROTO=TCP SPT=64314 DPT=8291 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 15 02:29:36 localhost kernel: [14416370.044052] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=103.2 |
2019-07-15 14:56:03 |
| 158.69.22.218 | attackspam | Jul 15 08:43:21 eventyay sshd[24062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.22.218 Jul 15 08:43:22 eventyay sshd[24062]: Failed password for invalid user myuser1 from 158.69.22.218 port 33750 ssh2 Jul 15 08:48:05 eventyay sshd[25208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.22.218 ... |
2019-07-15 15:02:23 |
| 114.32.200.188 | attack | Automatic report - Port Scan Attack |
2019-07-15 14:26:55 |
| 171.235.246.103 | attack | Automatic report - Port Scan Attack |
2019-07-15 14:43:14 |
| 89.152.112.18 | attack | /wp-login.php |
2019-07-15 15:08:32 |
| 95.216.116.118 | attackbots | 2019-07-15T06:59:18.468136abusebot-7.cloudsearch.cf sshd\[3391\]: Invalid user knight from 95.216.116.118 port 31576 |
2019-07-15 15:05:04 |
| 27.254.61.112 | attackbots | Jul 15 01:15:48 aat-srv002 sshd[2622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.61.112 Jul 15 01:15:50 aat-srv002 sshd[2622]: Failed password for invalid user support from 27.254.61.112 port 39360 ssh2 Jul 15 01:21:09 aat-srv002 sshd[2731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.61.112 Jul 15 01:21:11 aat-srv002 sshd[2731]: Failed password for invalid user guest from 27.254.61.112 port 34966 ssh2 ... |
2019-07-15 14:32:34 |
| 201.80.108.83 | attack | Jul 15 08:15:30 vps647732 sshd[7464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.83 Jul 15 08:15:33 vps647732 sshd[7464]: Failed password for invalid user r from 201.80.108.83 port 30798 ssh2 ... |
2019-07-15 14:33:54 |
| 45.13.39.126 | attack | smtp port probing |
2019-07-15 14:31:32 |
| 51.83.77.224 | attackspam | Jul 15 08:22:29 SilenceServices sshd[29617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.77.224 Jul 15 08:22:31 SilenceServices sshd[29617]: Failed password for invalid user anton from 51.83.77.224 port 50818 ssh2 Jul 15 08:26:57 SilenceServices sshd[32390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.77.224 |
2019-07-15 14:29:10 |
| 180.179.227.201 | attackspam | 2019-07-15T13:29:49.293605enmeeting.mahidol.ac.th sshd\[8786\]: Invalid user testuser from 180.179.227.201 port 54992 2019-07-15T13:29:49.313078enmeeting.mahidol.ac.th sshd\[8786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.179.227.201 2019-07-15T13:29:51.608587enmeeting.mahidol.ac.th sshd\[8786\]: Failed password for invalid user testuser from 180.179.227.201 port 54992 ssh2 ... |
2019-07-15 14:41:20 |
| 134.209.103.14 | attackspambots | Jul 15 08:29:47 pornomens sshd\[4616\]: Invalid user design from 134.209.103.14 port 58300 Jul 15 08:29:47 pornomens sshd\[4616\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.103.14 Jul 15 08:29:49 pornomens sshd\[4616\]: Failed password for invalid user design from 134.209.103.14 port 58300 ssh2 ... |
2019-07-15 14:44:00 |