City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 9.72.6.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18170
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;9.72.6.11. IN A
;; AUTHORITY SECTION:
. 183 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023052300 1800 900 604800 86400
;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 24 02:35:20 CST 2023
;; MSG SIZE rcvd: 102Host 11.6.72.9.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 11.6.72.9.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 59.33.32.130 | attackspambots | (ftpd) Failed FTP login from 59.33.32.130 (CN/China/130.32.33.59.broad.zs.gd.dynamic.163data.com.cn): 10 in the last 3600 secs |
2020-08-11 17:30:24 |
| 112.78.11.31 | attackbotsspam | Aug 11 07:58:58 sso sshd[16562]: Failed password for root from 112.78.11.31 port 51818 ssh2 ... |
2020-08-11 17:43:02 |
| 103.107.187.252 | attackspam | Aug 8 01:42:50 Ubuntu-1404-trusty-64-minimal sshd\[20189\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.107.187.252 user=root Aug 8 01:42:53 Ubuntu-1404-trusty-64-minimal sshd\[20189\]: Failed password for root from 103.107.187.252 port 52762 ssh2 Aug 8 01:48:46 Ubuntu-1404-trusty-64-minimal sshd\[22325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.107.187.252 user=root Aug 8 01:48:48 Ubuntu-1404-trusty-64-minimal sshd\[22325\]: Failed password for root from 103.107.187.252 port 46436 ssh2 Aug 8 01:52:26 Ubuntu-1404-trusty-64-minimal sshd\[24615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.107.187.252 user=root |
2020-08-11 17:49:13 |
| 222.186.15.18 | attackbots | Aug 11 06:16:25 dns1 sshd[11453]: Failed password for root from 222.186.15.18 port 21652 ssh2 Aug 11 06:16:28 dns1 sshd[11453]: Failed password for root from 222.186.15.18 port 21652 ssh2 Aug 11 06:16:32 dns1 sshd[11453]: Failed password for root from 222.186.15.18 port 21652 ssh2 |
2020-08-11 17:21:49 |
| 198.211.105.95 | attack | Aug 11 12:36:12 vps768472 sshd\[31780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.105.95 user=root Aug 11 12:36:14 vps768472 sshd\[31780\]: Failed password for root from 198.211.105.95 port 56854 ssh2 Aug 11 12:37:12 vps768472 sshd\[31783\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.105.95 user=root ... |
2020-08-11 17:42:23 |
| 180.76.111.214 | attack | firewall-block, port(s): 22364/tcp |
2020-08-11 17:44:32 |
| 185.158.249.65 | attackspambots | Aug 11 00:33:01 XXX sshd[26857]: Invalid user ubnt from 185.158.249.65 Aug 11 00:33:02 XXX sshd[26857]: Received disconnect from 185.158.249.65: 11: Bye Bye [preauth] Aug 11 00:33:03 XXX sshd[26861]: Invalid user admin from 185.158.249.65 Aug 11 00:33:03 XXX sshd[26861]: Received disconnect from 185.158.249.65: 11: Bye Bye [preauth] Aug 11 00:33:05 XXX sshd[26863]: User r.r from 185.158.249.65 not allowed because none of user's groups are listed in AllowGroups Aug 11 00:33:05 XXX sshd[26863]: Received disconnect from 185.158.249.65: 11: Bye Bye [preauth] Aug 11 00:33:05 XXX sshd[26865]: Invalid user 1234 from 185.158.249.65 Aug 11 00:33:05 XXX sshd[26865]: Received disconnect from 185.158.249.65: 11: Bye Bye [preauth] Aug 11 00:33:07 XXX sshd[26867]: Invalid user usuario from 185.158.249.65 Aug 11 00:33:07 XXX sshd[26867]: Received disconnect from 185.158.249.65: 11: Bye Bye [preauth] Aug 11 00:33:08 XXX sshd[26875]: Invalid user support from 185.158.249.65 Aug 11 00:33........ ------------------------------- |
2020-08-11 17:04:47 |
| 192.241.237.127 | attackbots | port scan and connect, tcp 27017 (mongodb) |
2020-08-11 17:40:40 |
| 192.144.142.62 | attackbots | Aug 11 06:48:32 buvik sshd[23678]: Failed password for root from 192.144.142.62 port 47532 ssh2 Aug 11 06:53:48 buvik sshd[24368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.142.62 user=root Aug 11 06:53:50 buvik sshd[24368]: Failed password for root from 192.144.142.62 port 50966 ssh2 ... |
2020-08-11 17:38:40 |
| 192.243.116.235 | attackbotsspam | Aug 10 14:37:45 host sshd[14555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.243.116.235.16clouds.com user=r.r Aug 10 14:37:48 host sshd[14555]: Failed password for r.r from 192.243.116.235 port 49262 ssh2 Aug 10 14:37:48 host sshd[14555]: Received disconnect from 192.243.116.235: 11: Bye Bye [preauth] Aug 10 14:59:24 host sshd[18128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.243.116.235.16clouds.com user=r.r Aug 10 14:59:26 host sshd[18128]: Failed password for r.r from 192.243.116.235 port 33352 ssh2 Aug 10 14:59:26 host sshd[18128]: Received disconnect from 192.243.116.235: 11: Bye Bye [preauth] Aug 10 15:14:44 host sshd[6132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.243.116.235.16clouds.com user=r.r Aug 10 15:14:46 host sshd[6132]: Failed password for r.r from 192.243.116.235 port 57378 ssh2 Aug 10 15:14:46 host s........ ------------------------------- |
2020-08-11 17:13:25 |
| 159.65.152.201 | attackspam | 2020-08-11T05:49:12.430985n23.at sshd[1687240]: Failed password for root from 159.65.152.201 port 46940 ssh2 2020-08-11T05:51:09.154609n23.at sshd[1689356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.152.201 user=root 2020-08-11T05:51:11.093272n23.at sshd[1689356]: Failed password for root from 159.65.152.201 port 48874 ssh2 ... |
2020-08-11 17:08:17 |
| 219.240.99.110 | attack | Aug 11 08:30:34 piServer sshd[19057]: Failed password for root from 219.240.99.110 port 37368 ssh2 Aug 11 08:33:17 piServer sshd[19348]: Failed password for root from 219.240.99.110 port 48652 ssh2 ... |
2020-08-11 17:17:48 |
| 106.12.208.211 | attack | 2020-08-11T07:50:59.878480shield sshd\[16912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.208.211 user=root 2020-08-11T07:51:00.977770shield sshd\[16912\]: Failed password for root from 106.12.208.211 port 36034 ssh2 2020-08-11T07:55:11.124468shield sshd\[17170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.208.211 user=root 2020-08-11T07:55:13.487888shield sshd\[17170\]: Failed password for root from 106.12.208.211 port 53620 ssh2 2020-08-11T07:59:18.866918shield sshd\[17417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.208.211 user=root |
2020-08-11 17:25:23 |
| 64.227.94.82 | attack | Automatic report - Banned IP Access |
2020-08-11 17:49:32 |
| 45.55.156.19 | attackspam | Brute-force attempt banned |
2020-08-11 17:46:47 |