City: unknown
Region: unknown
Country: South Korea
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 101.1.42.37
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56655
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;101.1.42.37. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022031602 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 17 04:10:02 CST 2022
;; MSG SIZE rcvd: 10437.42.1.101.in-addr.arpa domain name pointer rftims.autoever.com.
37.42.1.101.in-addr.arpa domain name pointer hyundai-autoever.com.
37.42.1.101.in-addr.arpa domain name pointer origin-www.hyundai-autoever.com.
37.42.1.101.in-addr.arpa domain name pointer recruit.hyundai-autoever.com.
37.42.1.101.in-addr.arpa domain name pointer ibsc.hmc.co.kr.
37.42.1.101.in-addr.arpa domain name pointer gcsc.hyundai-autoever.com.
37.42.1.101.in-addr.arpa domain name pointer hmpgadm.hyundai-autoever.com.
37.42.1.101.in-addr.arpa domain name pointer portal.autoever.com.
37.42.1.101.in-addr.arpa domain name pointer gcsc.autoever.com.
37.42.1.101.in-addr.arpa domain name pointer mileage.autoever.com.
37.42.1.101.in-addr.arpa domain name pointer thanks.autoever.com.
37.42.1.101.in-addr.arpa domain name pointer apte.autoever.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
37.42.1.101.in-addr.arpa name = hyundai-autoever.com.
37.42.1.101.in-addr.arpa name = origin-www.hyundai-autoever.com.
37.42.1.101.in-addr.arpa name = recruit.hyundai-autoever.com.
37.42.1.101.in-addr.arpa name = ibsc.hmc.co.kr.
37.42.1.101.in-addr.arpa name = gcsc.hyundai-autoever.com.
37.42.1.101.in-addr.arpa name = hmpgadm.hyundai-autoever.com.
37.42.1.101.in-addr.arpa name = portal.autoever.com.
37.42.1.101.in-addr.arpa name = gcsc.autoever.com.
37.42.1.101.in-addr.arpa name = mileage.autoever.com.
37.42.1.101.in-addr.arpa name = thanks.autoever.com.
37.42.1.101.in-addr.arpa name = apte.autoever.com.
37.42.1.101.in-addr.arpa name = rftims.autoever.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 159.203.77.51 | attackbots | Jul 28 01:17:49 *** sshd[9032]: User root from 159.203.77.51 not allowed because not listed in AllowUsers |
2019-07-28 09:22:31 |
| 31.217.214.192 | attack | Jul 28 04:16:57 srv-4 sshd\[17081\]: Invalid user admin from 31.217.214.192 Jul 28 04:16:57 srv-4 sshd\[17081\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.217.214.192 Jul 28 04:16:59 srv-4 sshd\[17081\]: Failed password for invalid user admin from 31.217.214.192 port 48679 ssh2 ... |
2019-07-28 09:44:02 |
| 187.190.235.43 | attackspam | Jul 27 21:12:46 debian sshd\[4859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.190.235.43 user=root Jul 27 21:12:48 debian sshd\[4859\]: Failed password for root from 187.190.235.43 port 29678 ssh2 Jul 27 21:17:42 debian sshd\[4904\]: Invalid user 0 from 187.190.235.43 port 3142 ... |
2019-07-28 09:27:27 |
| 66.193.168.66 | attackspam | Telnet brute force |
2019-07-28 09:16:57 |
| 139.59.78.236 | attack | Jul 27 18:09:23 debian sshd[18801]: Unable to negotiate with 139.59.78.236 port 43296: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Jul 27 21:17:58 debian sshd[26976]: Unable to negotiate with 139.59.78.236 port 60268: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2019-07-28 09:21:36 |
| 34.97.236.218 | attackspambots | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.97.236.218 user=root Failed password for root from 34.97.236.218 port 45774 ssh2 Invalid user com from 34.97.236.218 port 40128 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.97.236.218 Failed password for invalid user com from 34.97.236.218 port 40128 ssh2 |
2019-07-28 09:50:05 |
| 138.59.218.183 | attackspambots | 2019-07-27T09:51:12.157280wiz-ks3 sshd[15943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=dynamic-138-59-218-183.ubaconecttelecom.net.br user=root 2019-07-27T09:51:15.052096wiz-ks3 sshd[15943]: Failed password for root from 138.59.218.183 port 58573 ssh2 2019-07-27T10:03:29.505928wiz-ks3 sshd[15988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=dynamic-138-59-218-183.ubaconecttelecom.net.br user=root 2019-07-27T10:03:32.245027wiz-ks3 sshd[15988]: Failed password for root from 138.59.218.183 port 35470 ssh2 2019-07-27T10:10:31.375887wiz-ks3 sshd[16000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=dynamic-138-59-218-183.ubaconecttelecom.net.br user=root 2019-07-27T10:10:33.382151wiz-ks3 sshd[16000]: Failed password for root from 138.59.218.183 port 33960 ssh2 2019-07-27T10:17:19.887107wiz-ks3 sshd[16009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh |
2019-07-28 09:34:28 |
| 165.255.72.35 | attackbotsspam | Brute forcing RDP port 3389 |
2019-07-28 09:32:56 |
| 80.28.234.134 | attack | " " |
2019-07-28 09:33:56 |
| 158.69.217.248 | attackspambots | Jul 28 01:16:48 thevastnessof sshd[10192]: Failed password for root from 158.69.217.248 port 54010 ssh2 ... |
2019-07-28 09:47:41 |
| 115.68.187.140 | attackspambots | Automatic report - Banned IP Access |
2019-07-28 09:56:17 |
| 134.73.129.220 | attackspam | Jul 28 02:16:35 mail sshd\[32595\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.129.220 user=root Jul 28 02:16:38 mail sshd\[32595\]: Failed password for root from 134.73.129.220 port 54254 ssh2 ... |
2019-07-28 09:52:04 |
| 23.129.64.215 | attack | Jul 28 01:17:52 thevastnessof sshd[10221]: Failed password for root from 23.129.64.215 port 43064 ssh2 ... |
2019-07-28 09:23:30 |
| 185.176.27.18 | attack | 28.07.2019 01:49:30 Connection to port 34400 blocked by firewall |
2019-07-28 10:02:15 |
| 46.182.20.142 | attackbots | Jul 28 01:17:16 unicornsoft sshd\[24871\]: Invalid user pi from 46.182.20.142 Jul 28 01:17:16 unicornsoft sshd\[24871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.182.20.142 Jul 28 01:17:16 unicornsoft sshd\[24873\]: Invalid user pi from 46.182.20.142 Jul 28 01:17:16 unicornsoft sshd\[24873\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.182.20.142 |
2019-07-28 09:35:33 |