City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.134.126.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23232
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.134.126.100. IN A
;; AUTHORITY SECTION:
. 85 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2021122900 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 29 18:23:22 CST 2021
;; MSG SIZE rcvd: 107Host 100.126.134.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 100.126.134.42.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.180.9 | attackbotsspam | Dec 6 18:57:38 debian sshd[18197]: Unable to negotiate with 222.186.180.9 port 9026: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] Dec 7 07:04:11 debian sshd[23744]: Unable to negotiate with 222.186.180.9 port 49032: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ... |
2019-12-07 20:06:47 |
| 125.17.224.138 | attackbotsspam | Autoban 125.17.224.138 AUTH/CONNECT |
2019-12-07 20:46:24 |
| 51.75.70.30 | attackspam | Dec 7 12:15:15 localhost sshd\[113108\]: Invalid user storf from 51.75.70.30 port 50095 Dec 7 12:15:15 localhost sshd\[113108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.70.30 Dec 7 12:15:17 localhost sshd\[113108\]: Failed password for invalid user storf from 51.75.70.30 port 50095 ssh2 Dec 7 12:23:28 localhost sshd\[113334\]: Invalid user mey from 51.75.70.30 port 54775 Dec 7 12:23:28 localhost sshd\[113334\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.70.30 ... |
2019-12-07 20:32:10 |
| 85.172.107.10 | attackbots | "SSH brute force auth login attempt." |
2019-12-07 20:06:11 |
| 40.73.29.153 | attackspambots | Dec 7 03:29:03 server sshd\[3585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.29.153 user=root Dec 7 03:29:04 server sshd\[3585\]: Failed password for root from 40.73.29.153 port 48214 ssh2 Dec 7 09:43:08 server sshd\[9829\]: Invalid user ssh from 40.73.29.153 Dec 7 09:43:08 server sshd\[9829\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.29.153 Dec 7 09:43:10 server sshd\[9829\]: Failed password for invalid user ssh from 40.73.29.153 port 47914 ssh2 ... |
2019-12-07 20:35:51 |
| 114.67.76.63 | attack | Dec 7 12:47:48 hosting sshd[23396]: Invalid user kalaichelvan from 114.67.76.63 port 60588 ... |
2019-12-07 20:33:54 |
| 54.37.68.191 | attack | Dec 7 09:09:44 amit sshd\[14574\]: Invalid user misa from 54.37.68.191 Dec 7 09:09:44 amit sshd\[14574\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.68.191 Dec 7 09:09:46 amit sshd\[14574\]: Failed password for invalid user misa from 54.37.68.191 port 33898 ssh2 ... |
2019-12-07 20:24:04 |
| 194.135.81.103 | attack | Dec 7 07:31:02 plusreed sshd[12153]: Invalid user newadmin from 194.135.81.103 ... |
2019-12-07 20:46:07 |
| 111.43.223.69 | attackspambots | Honeypot hit. |
2019-12-07 20:07:50 |
| 159.89.207.215 | attack | 159.89.207.215 - - \[07/Dec/2019:07:25:27 +0100\] "POST /wp-login.php HTTP/1.0" 200 3079 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 159.89.207.215 - - \[07/Dec/2019:07:25:30 +0100\] "POST /wp-login.php HTTP/1.0" 200 3037 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 159.89.207.215 - - \[07/Dec/2019:07:25:32 +0100\] "POST /wp-login.php HTTP/1.0" 200 3047 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-12-07 20:37:02 |
| 134.119.219.71 | attackbotsspam | Unauthorized access detected from banned ip |
2019-12-07 20:37:33 |
| 139.59.37.209 | attackbots | SSH brutforce |
2019-12-07 20:33:05 |
| 128.199.145.205 | attack | 2019-12-07T11:03:50.201945abusebot-2.cloudsearch.cf sshd\[15013\]: Invalid user rokny from 128.199.145.205 port 50133 2019-12-07T11:03:50.205695abusebot-2.cloudsearch.cf sshd\[15013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.205 |
2019-12-07 20:35:30 |
| 209.17.96.130 | attack | 209.17.96.130 was recorded 6 times by 6 hosts attempting to connect to the following ports: 82,110,44818,37777,987. Incident counter (4h, 24h, all-time): 6, 6, 1257 |
2019-12-07 20:12:55 |
| 177.125.224.201 | attackspam | Port Scan |
2019-12-07 20:03:13 |