City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.181.42.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19535
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;116.181.42.92. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012301 1800 900 604800 86400
;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 05:31:51 CST 2025
;; MSG SIZE rcvd: 106Host 92.42.181.116.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 92.42.181.116.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 40.121.90.30 | attack | 2019-09-10 09:59:29,905 fail2ban.actions [19563]: NOTICE [apache-modsecurity] Ban 40.121.90.30 ... |
2019-09-10 16:43:52 |
| 81.22.45.165 | attackspam | Port scan |
2019-09-10 16:34:35 |
| 2.139.176.35 | attackspam | Sep 9 22:29:41 tdfoods sshd\[1602\]: Invalid user 201 from 2.139.176.35 Sep 9 22:29:41 tdfoods sshd\[1602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.red-2-139-176.staticip.rima-tde.net Sep 9 22:29:43 tdfoods sshd\[1602\]: Failed password for invalid user 201 from 2.139.176.35 port 57187 ssh2 Sep 9 22:35:27 tdfoods sshd\[2159\]: Invalid user 153 from 2.139.176.35 Sep 9 22:35:27 tdfoods sshd\[2159\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.red-2-139-176.staticip.rima-tde.net |
2019-09-10 16:45:24 |
| 37.59.6.106 | attack | Sep 10 09:38:49 saschabauer sshd[15361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.6.106 Sep 10 09:38:51 saschabauer sshd[15361]: Failed password for invalid user 123123 from 37.59.6.106 port 35810 ssh2 |
2019-09-10 16:36:27 |
| 45.181.31.252 | attackspambots | Sep 9 17:37:20 wildwolf ssh-honeypotd[26164]: Failed password for admin from 45.181.31.252 port 44921 ssh2 (target: 158.69.100.151:22, password: password) Sep 9 17:37:21 wildwolf ssh-honeypotd[26164]: Failed password for admin from 45.181.31.252 port 44921 ssh2 (target: 158.69.100.151:22, password: 7ujMko0admin) Sep 9 17:37:21 wildwolf ssh-honeypotd[26164]: Failed password for admin from 45.181.31.252 port 44921 ssh2 (target: 158.69.100.151:22, password: admin1234) Sep 9 17:37:21 wildwolf ssh-honeypotd[26164]: Failed password for admin from 45.181.31.252 port 44921 ssh2 (target: 158.69.100.151:22, password: aerohive) Sep 9 17:37:21 wildwolf ssh-honeypotd[26164]: Failed password for admin from 45.181.31.252 port 44921 ssh2 (target: 158.69.100.151:22, password: default) Sep 9 17:37:21 wildwolf ssh-honeypotd[26164]: Failed password for admin from 45.181.31.252 port 44921 ssh2 (target: 158.69.100.151:22, password: admin1234) Sep 9 17:37:21 wildwolf ssh-honeypotd[26164........ ------------------------------ |
2019-09-10 17:16:43 |
| 37.57.138.68 | attackspam | [munged]::443 37.57.138.68 - - [10/Sep/2019:03:15:19 +0200] "POST /[munged]: HTTP/1.1" 200 9078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 37.57.138.68 - - [10/Sep/2019:03:15:20 +0200] "POST /[munged]: HTTP/1.1" 200 9078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 37.57.138.68 - - [10/Sep/2019:03:15:21 +0200] "POST /[munged]: HTTP/1.1" 200 9078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 37.57.138.68 - - [10/Sep/2019:03:15:21 +0200] "POST /[munged]: HTTP/1.1" 200 9078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 37.57.138.68 - - [10/Sep/2019:03:15:22 +0200] "POST /[munged]: HTTP/1.1" 200 9078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 37.57.138.68 - - [10/Sep/2019:03:15:23 +0200] "POST /[munged]: HTTP/1.1" 200 9078 "-" "Mozilla/5.0 (X11; Ubuntu; Li |
2019-09-10 17:08:34 |
| 54.39.50.204 | attackspambots | Sep 9 01:01:50 finn sshd[28770]: Invalid user nagios from 54.39.50.204 port 33466 Sep 9 01:01:50 finn sshd[28770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.50.204 Sep 9 01:01:53 finn sshd[28770]: Failed password for invalid user nagios from 54.39.50.204 port 33466 ssh2 Sep 9 01:01:53 finn sshd[28770]: Received disconnect from 54.39.50.204 port 33466:11: Bye Bye [preauth] Sep 9 01:01:53 finn sshd[28770]: Disconnected from 54.39.50.204 port 33466 [preauth] Sep 9 01:09:13 finn sshd[29776]: Invalid user oracle from 54.39.50.204 port 54488 Sep 9 01:09:13 finn sshd[29776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.50.204 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=54.39.50.204 |
2019-09-10 16:50:33 |
| 146.164.21.68 | attack | Sep 10 04:20:47 vmanager6029 sshd\[11534\]: Invalid user developer from 146.164.21.68 port 57159 Sep 10 04:20:47 vmanager6029 sshd\[11534\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.164.21.68 Sep 10 04:20:49 vmanager6029 sshd\[11534\]: Failed password for invalid user developer from 146.164.21.68 port 57159 ssh2 |
2019-09-10 16:54:25 |
| 106.12.107.225 | attack | Sep 10 05:48:16 mail sshd\[23957\]: Invalid user test from 106.12.107.225 port 38550 Sep 10 05:48:16 mail sshd\[23957\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.107.225 Sep 10 05:48:19 mail sshd\[23957\]: Failed password for invalid user test from 106.12.107.225 port 38550 ssh2 Sep 10 05:56:34 mail sshd\[25118\]: Invalid user test from 106.12.107.225 port 43850 Sep 10 05:56:34 mail sshd\[25118\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.107.225 |
2019-09-10 16:47:35 |
| 80.211.58.184 | attackspambots | Sep 10 10:20:23 eventyay sshd[24143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.58.184 Sep 10 10:20:25 eventyay sshd[24143]: Failed password for invalid user testtest from 80.211.58.184 port 52324 ssh2 Sep 10 10:26:38 eventyay sshd[24249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.58.184 ... |
2019-09-10 16:31:59 |
| 217.182.253.230 | attackspam | Sep 9 22:37:16 tdfoods sshd\[2335\]: Invalid user tom from 217.182.253.230 Sep 9 22:37:16 tdfoods sshd\[2335\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=230.ip-217-182-253.eu Sep 9 22:37:19 tdfoods sshd\[2335\]: Failed password for invalid user tom from 217.182.253.230 port 35732 ssh2 Sep 9 22:42:51 tdfoods sshd\[2933\]: Invalid user ubuntu from 217.182.253.230 Sep 9 22:42:51 tdfoods sshd\[2933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=230.ip-217-182-253.eu |
2019-09-10 16:56:59 |
| 132.232.72.110 | attackbots | Sep 10 00:21:37 lanister sshd[17960]: Invalid user debian from 132.232.72.110 Sep 10 00:21:37 lanister sshd[17960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.72.110 Sep 10 00:21:37 lanister sshd[17960]: Invalid user debian from 132.232.72.110 Sep 10 00:21:39 lanister sshd[17960]: Failed password for invalid user debian from 132.232.72.110 port 34904 ssh2 ... |
2019-09-10 16:40:55 |
| 13.250.14.48 | attackspambots | Sep 10 03:24:12 aat-srv002 sshd[4700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.250.14.48 Sep 10 03:24:15 aat-srv002 sshd[4700]: Failed password for invalid user user1 from 13.250.14.48 port 49026 ssh2 Sep 10 03:30:43 aat-srv002 sshd[4844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.250.14.48 Sep 10 03:30:45 aat-srv002 sshd[4844]: Failed password for invalid user q1w2e3r4t5y6 from 13.250.14.48 port 54564 ssh2 ... |
2019-09-10 16:43:07 |
| 152.32.191.57 | attackspam | Sep 10 09:00:46 vmd17057 sshd\[8056\]: Invalid user user9 from 152.32.191.57 port 42922 Sep 10 09:00:46 vmd17057 sshd\[8056\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.32.191.57 Sep 10 09:00:48 vmd17057 sshd\[8056\]: Failed password for invalid user user9 from 152.32.191.57 port 42922 ssh2 ... |
2019-09-10 17:02:14 |
| 67.205.167.142 | attackspambots | Sep 10 10:33:25 saschabauer sshd[22100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.167.142 Sep 10 10:33:27 saschabauer sshd[22100]: Failed password for invalid user test from 67.205.167.142 port 58022 ssh2 |
2019-09-10 16:46:21 |