City: unknown
Region: unknown
Country: Korea Republic of
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.242.48.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18244
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;1.242.48.21. IN A
;; AUTHORITY SECTION:
. 328 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022092401 1800 900 604800 86400
;; Query time: 23 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Sep 25 07:22:00 CST 2022
;; MSG SIZE rcvd: 104Host 21.48.242.1.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 21.48.242.1.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.107.232.162 | attack | 2020-07-16T23:29:09.832001hostname sshd[85203]: Failed password for invalid user wsmp from 202.107.232.162 port 56175 ssh2 ... |
2020-07-18 04:27:45 |
| 176.231.168.165 | attackspambots | Spam mails sent to address hacked/leaked from Nexus Mods in July 2013 |
2020-07-18 04:17:50 |
| 112.85.42.227 | attackspam | Jul 17 16:09:58 NPSTNNYC01T sshd[32170]: Failed password for root from 112.85.42.227 port 19560 ssh2 Jul 17 16:13:46 NPSTNNYC01T sshd[32425]: Failed password for root from 112.85.42.227 port 15676 ssh2 Jul 17 16:13:48 NPSTNNYC01T sshd[32425]: Failed password for root from 112.85.42.227 port 15676 ssh2 ... |
2020-07-18 04:25:04 |
| 124.156.112.181 | attack | 2020-07-17T15:15:03.469345randservbullet-proofcloud-66.localdomain sshd[21284]: Invalid user mne from 124.156.112.181 port 59108 2020-07-17T15:15:03.473884randservbullet-proofcloud-66.localdomain sshd[21284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.112.181 2020-07-17T15:15:03.469345randservbullet-proofcloud-66.localdomain sshd[21284]: Invalid user mne from 124.156.112.181 port 59108 2020-07-17T15:15:05.952895randservbullet-proofcloud-66.localdomain sshd[21284]: Failed password for invalid user mne from 124.156.112.181 port 59108 ssh2 ... |
2020-07-18 04:22:50 |
| 220.134.194.121 | attackbotsspam | Honeypot attack, port: 81, PTR: 220-134-194-121.HINET-IP.hinet.net. |
2020-07-18 04:40:32 |
| 91.134.157.246 | attackbotsspam | Jul 17 16:29:42 NPSTNNYC01T sshd[1464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.157.246 Jul 17 16:29:44 NPSTNNYC01T sshd[1464]: Failed password for invalid user spadmin from 91.134.157.246 port 39560 ssh2 Jul 17 16:34:08 NPSTNNYC01T sshd[1783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.157.246 ... |
2020-07-18 04:47:59 |
| 181.171.36.89 | attackspam | Jul 17 18:51:28 vps647732 sshd[10526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.171.36.89 Jul 17 18:51:31 vps647732 sshd[10526]: Failed password for invalid user chj from 181.171.36.89 port 50106 ssh2 ... |
2020-07-18 04:18:36 |
| 222.186.190.2 | attack | 2020-07-17T20:38:05.586247vps1033 sshd[25466]: Failed password for root from 222.186.190.2 port 2156 ssh2 2020-07-17T20:38:09.268343vps1033 sshd[25466]: Failed password for root from 222.186.190.2 port 2156 ssh2 2020-07-17T20:38:12.498207vps1033 sshd[25466]: Failed password for root from 222.186.190.2 port 2156 ssh2 2020-07-17T20:38:16.131351vps1033 sshd[25466]: Failed password for root from 222.186.190.2 port 2156 ssh2 2020-07-17T20:38:19.678289vps1033 sshd[25466]: Failed password for root from 222.186.190.2 port 2156 ssh2 ... |
2020-07-18 04:39:41 |
| 128.201.84.14 | attackspambots | [Fri Jul 17 19:07:27.187906 2020] [:error] [pid 1963:tid 140071626475264] [client 128.201.84.14:36793] [client 128.201.84.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197:80"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XxGUf9@PYLyinAtYlZhtrgAAAcI"] ... |
2020-07-18 04:33:40 |
| 131.0.31.133 | attackbots | Email rejected due to spam filtering |
2020-07-18 04:41:36 |
| 62.171.153.72 | attackspambots | SSH Brute-Force. Ports scanning. |
2020-07-18 04:30:10 |
| 148.70.125.207 | attack | Jul 17 13:51:26 mockhub sshd[27474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.125.207 Jul 17 13:51:28 mockhub sshd[27474]: Failed password for invalid user user from 148.70.125.207 port 60574 ssh2 ... |
2020-07-18 04:56:35 |
| 190.55.53.49 | attackbotsspam | Jul 17 20:28:50 localhost sshd[62539]: Invalid user ftp1 from 190.55.53.49 port 49996 Jul 17 20:28:50 localhost sshd[62539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.55.53.49 Jul 17 20:28:50 localhost sshd[62539]: Invalid user ftp1 from 190.55.53.49 port 49996 Jul 17 20:28:52 localhost sshd[62539]: Failed password for invalid user ftp1 from 190.55.53.49 port 49996 ssh2 Jul 17 20:34:16 localhost sshd[63078]: Invalid user user from 190.55.53.49 port 36818 ... |
2020-07-18 04:37:15 |
| 60.167.176.219 | attackspam | Jul 17 05:07:29 mockhub sshd[8000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.167.176.219 Jul 17 05:07:31 mockhub sshd[8000]: Failed password for invalid user facturacion from 60.167.176.219 port 33542 ssh2 ... |
2020-07-18 04:29:19 |
| 218.92.0.224 | attackbotsspam | 2020-07-17T22:09:26.440664vps773228.ovh.net sshd[28966]: Failed password for root from 218.92.0.224 port 37927 ssh2 2020-07-17T22:09:29.439703vps773228.ovh.net sshd[28966]: Failed password for root from 218.92.0.224 port 37927 ssh2 2020-07-17T22:09:32.180943vps773228.ovh.net sshd[28966]: Failed password for root from 218.92.0.224 port 37927 ssh2 2020-07-17T22:09:35.833287vps773228.ovh.net sshd[28966]: Failed password for root from 218.92.0.224 port 37927 ssh2 2020-07-17T22:09:38.907130vps773228.ovh.net sshd[28966]: Failed password for root from 218.92.0.224 port 37927 ssh2 ... |
2020-07-18 04:23:09 |