City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: Guangdong Mobile Communication Co.Ltd.
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.47.42.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39936
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.47.42.107. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019071400 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 15 02:36:43 CST 2019
;; MSG SIZE rcvd: 117Host 107.42.47.112.in-addr.arpa not found: 2(SERVFAIL)
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
*** Can't find 107.42.47.112.in-addr.arpa.: No answer
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 188.143.91.142 | attackbots | "Fail2Ban detected SSH brute force attempt" |
2019-08-25 23:14:16 |
| 89.248.168.202 | attack | 08/25/2019-11:11:21.185870 89.248.168.202 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 100 |
2019-08-25 23:46:09 |
| 64.25.215.250 | attackbotsspam | Absender hat Spam-Falle ausgel?st |
2019-08-25 23:49:22 |
| 46.105.31.249 | attackspambots | Aug 25 15:42:01 MK-Soft-VM4 sshd\[23527\]: Invalid user worker from 46.105.31.249 port 51840 Aug 25 15:42:01 MK-Soft-VM4 sshd\[23527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.31.249 Aug 25 15:42:03 MK-Soft-VM4 sshd\[23527\]: Failed password for invalid user worker from 46.105.31.249 port 51840 ssh2 ... |
2019-08-26 00:09:24 |
| 191.53.223.61 | attack | failed_logins |
2019-08-25 23:26:35 |
| 92.119.160.103 | attackspam | 08/25/2019-10:22:20.696228 92.119.160.103 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-08-25 23:24:09 |
| 134.209.24.21 | attack | 2019-08-25T14:59:43.066004enmeeting.mahidol.ac.th sshd\[15166\]: User root from 134.209.24.21 not allowed because not listed in AllowUsers 2019-08-25T14:59:43.187056enmeeting.mahidol.ac.th sshd\[15166\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.24.21 user=root 2019-08-25T14:59:44.807011enmeeting.mahidol.ac.th sshd\[15166\]: Failed password for invalid user root from 134.209.24.21 port 43726 ssh2 ... |
2019-08-25 23:25:26 |
| 112.186.77.74 | attack | Splunk® : Brute-Force login attempt on SSH: Aug 25 11:50:26 testbed sshd[6675]: Disconnected from 112.186.77.74 port 45300 [preauth] |
2019-08-26 00:24:16 |
| 92.118.37.95 | attack | Multiport scan : 370 ports scanned 80 87 92 93 95 97 100 102 109 117 125 135 145 150 163 173 177 178 179 188 193 194 211 213 216 226 231 235 236 247 259 265 279 283 285 290 292 303 328 335 345 355 360 365 366 370 371 375 383 388 398 403 426 429 431 434 450 451 452 456 474 484 494 497 504 509 525 542 544 550 565 566 568 570 578 593 595 598 599 602 603 610 614 618 621 628 631 645 646 648 651 661 669 674 678 688 696 701 706 712 716 722 ..... |
2019-08-25 23:25:53 |
| 51.68.230.54 | attackspam | Aug 25 04:12:30 auw2 sshd\[9630\]: Invalid user samba from 51.68.230.54 Aug 25 04:12:30 auw2 sshd\[9630\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.ip-51-68-230.eu Aug 25 04:12:32 auw2 sshd\[9630\]: Failed password for invalid user samba from 51.68.230.54 port 51968 ssh2 Aug 25 04:18:37 auw2 sshd\[10175\]: Invalid user adm from 51.68.230.54 Aug 25 04:18:37 auw2 sshd\[10175\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.ip-51-68-230.eu |
2019-08-25 23:36:41 |
| 187.87.104.62 | attackspambots | Aug 25 16:55:37 DAAP sshd[12836]: Invalid user fi from 187.87.104.62 port 58694 Aug 25 16:55:37 DAAP sshd[12836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.87.104.62 Aug 25 16:55:37 DAAP sshd[12836]: Invalid user fi from 187.87.104.62 port 58694 Aug 25 16:55:39 DAAP sshd[12836]: Failed password for invalid user fi from 187.87.104.62 port 58694 ssh2 ... |
2019-08-26 00:01:50 |
| 80.82.78.104 | attackspam | Excessive Port-Scanning |
2019-08-26 00:22:01 |
| 154.197.27.251 | attackspambots | Brute force RDP, port 3389 |
2019-08-26 00:02:11 |
| 104.211.227.202 | attack | 2019-08-25T14:59:17.243705enmeeting.mahidol.ac.th sshd\[15153\]: Invalid user craig2 from 104.211.227.202 port 19116 2019-08-25T14:59:17.257699enmeeting.mahidol.ac.th sshd\[15153\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.211.227.202 2019-08-25T14:59:19.308954enmeeting.mahidol.ac.th sshd\[15153\]: Failed password for invalid user craig2 from 104.211.227.202 port 19116 ssh2 ... |
2019-08-25 23:51:27 |
| 106.3.133.11 | attackspam | Failed SSH login from 5 in the last 3600 secs |
2019-08-26 00:00:29 |