City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 39.155.53.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53336
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;39.155.53.107. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025030101 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 02 05:35:11 CST 2025
;; MSG SIZE rcvd: 106Host 107.53.155.39.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 107.53.155.39.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.15.58.168 | attack | SSH Brute-Forcing (server2) |
2020-03-24 05:01:03 |
| 5.188.86.218 | attackbots | 24 attempts against mh-misbehave-ban on oak |
2020-03-24 04:35:03 |
| 192.99.4.145 | attackbotsspam | 2020-03-23T21:16:46.282717 sshd[25418]: Invalid user lsfadmin from 192.99.4.145 port 42542 2020-03-23T21:16:46.296518 sshd[25418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.4.145 2020-03-23T21:16:46.282717 sshd[25418]: Invalid user lsfadmin from 192.99.4.145 port 42542 2020-03-23T21:16:48.371251 sshd[25418]: Failed password for invalid user lsfadmin from 192.99.4.145 port 42542 ssh2 ... |
2020-03-24 04:29:59 |
| 87.250.224.83 | attackspambots | [Mon Mar 23 22:44:29.430470 2020] [:error] [pid 25305:tid 140519759939328] [client 87.250.224.83:37128] [client 87.250.224.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XnjZXUO@yxpJrJpacVIAngAAAtE"] ... |
2020-03-24 04:28:36 |
| 128.199.165.53 | attackspam | Mar 23 09:32:01 vh1 sshd[27340]: reveeclipse mapping checking getaddrinfo for vip.sg4 [128.199.165.53] failed - POSSIBLE BREAK-IN ATTEMPT! Mar 23 09:32:01 vh1 sshd[27340]: Invalid user work from 128.199.165.53 Mar 23 09:32:01 vh1 sshd[27340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.165.53 Mar 23 09:32:03 vh1 sshd[27340]: Failed password for invalid user work from 128.199.165.53 port 64194 ssh2 Mar 23 09:32:03 vh1 sshd[27341]: Received disconnect from 128.199.165.53: 11: Bye Bye Mar 23 09:42:54 vh1 sshd[27773]: reveeclipse mapping checking getaddrinfo for vip.sg4 [128.199.165.53] failed - POSSIBLE BREAK-IN ATTEMPT! Mar 23 09:42:54 vh1 sshd[27773]: Invalid user tss from 128.199.165.53 Mar 23 09:42:54 vh1 sshd[27773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.165.53 Mar 23 09:42:56 vh1 sshd[27773]: Failed password for invalid user tss from 128.199.165.53 port 341........ ------------------------------- |
2020-03-24 05:03:27 |
| 24.20.244.45 | attack | Mar 23 21:32:51 nextcloud sshd\[15801\]: Invalid user qi from 24.20.244.45 Mar 23 21:32:51 nextcloud sshd\[15801\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.20.244.45 Mar 23 21:32:54 nextcloud sshd\[15801\]: Failed password for invalid user qi from 24.20.244.45 port 41702 ssh2 |
2020-03-24 04:43:21 |
| 45.55.88.16 | attack | Mar 23 22:01:07 gw1 sshd[11626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.88.16 Mar 23 22:01:09 gw1 sshd[11626]: Failed password for invalid user ck from 45.55.88.16 port 40086 ssh2 ... |
2020-03-24 04:39:56 |
| 89.25.222.22 | attackbotsspam | (sshd) Failed SSH login from 89.25.222.22 (PL/Poland/host-89.25.222.22.static.3s.pl): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 23 20:57:13 ubnt-55d23 sshd[2177]: Invalid user cap from 89.25.222.22 port 3668 Mar 23 20:57:14 ubnt-55d23 sshd[2177]: Failed password for invalid user cap from 89.25.222.22 port 3668 ssh2 |
2020-03-24 05:04:55 |
| 178.176.58.76 | attackspam | Mar 23 16:38:18 silence02 sshd[4459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.176.58.76 Mar 23 16:38:20 silence02 sshd[4459]: Failed password for invalid user uf from 178.176.58.76 port 55440 ssh2 Mar 23 16:43:58 silence02 sshd[5483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.176.58.76 |
2020-03-24 04:52:30 |
| 181.64.241.219 | attack | Mar 23 16:44:09 prox sshd[11797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.64.241.219 Mar 23 16:44:11 prox sshd[11797]: Failed password for invalid user debian from 181.64.241.219 port 29996 ssh2 |
2020-03-24 04:39:26 |
| 113.161.1.111 | attackbots | Mar 23 21:19:32 v22018086721571380 sshd[25323]: Failed password for invalid user ir from 113.161.1.111 port 46976 ssh2 Mar 23 21:22:56 v22018086721571380 sshd[25991]: Failed password for invalid user cacti from 113.161.1.111 port 45766 ssh2 |
2020-03-24 04:33:00 |
| 60.168.155.77 | attack | $f2bV_matches |
2020-03-24 04:38:10 |
| 85.197.179.36 | attack | trying to access non-authorized port |
2020-03-24 04:35:33 |
| 192.99.212.132 | attack | Mar 23 21:29:40 DAAP sshd[1393]: Invalid user gc from 192.99.212.132 port 34544 Mar 23 21:29:40 DAAP sshd[1393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.212.132 Mar 23 21:29:40 DAAP sshd[1393]: Invalid user gc from 192.99.212.132 port 34544 Mar 23 21:29:42 DAAP sshd[1393]: Failed password for invalid user gc from 192.99.212.132 port 34544 ssh2 Mar 23 21:36:22 DAAP sshd[1606]: Invalid user portocala from 192.99.212.132 port 43692 ... |
2020-03-24 04:50:52 |
| 104.206.128.74 | attack | scan z |
2020-03-24 04:49:56 |