City: unknown
Region: unknown
Country: Korea (the Republic of)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.52.97.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54299
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;118.52.97.48. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 23:39:51 CST 2025
;; MSG SIZE rcvd: 105Host 48.97.52.118.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 48.97.52.118.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 174.127.241.94 | attackspambots | 2019-08-29 07:29:02,378 fail2ban.actions \[1817\]: NOTICE \[ssh\] Ban 174.127.241.94 2019-08-29 07:45:18,419 fail2ban.actions \[1817\]: NOTICE \[ssh\] Ban 174.127.241.94 2019-08-29 08:02:02,561 fail2ban.actions \[1817\]: NOTICE \[ssh\] Ban 174.127.241.94 2019-08-29 08:18:37,113 fail2ban.actions \[1817\]: NOTICE \[ssh\] Ban 174.127.241.94 2019-08-29 08:35:08,645 fail2ban.actions \[1817\]: NOTICE \[ssh\] Ban 174.127.241.94 ... |
2019-09-02 16:51:30 |
| 58.87.124.196 | attackbotsspam | Sep 2 04:22:48 MK-Soft-VM6 sshd\[23729\]: Invalid user chu from 58.87.124.196 port 56314 Sep 2 04:22:48 MK-Soft-VM6 sshd\[23729\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.124.196 Sep 2 04:22:50 MK-Soft-VM6 sshd\[23729\]: Failed password for invalid user chu from 58.87.124.196 port 56314 ssh2 ... |
2019-09-02 16:41:44 |
| 81.30.212.14 | attackspambots | Sep 1 22:31:39 web9 sshd\[15725\]: Invalid user knox from 81.30.212.14 Sep 1 22:31:39 web9 sshd\[15725\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.212.14 Sep 1 22:31:42 web9 sshd\[15725\]: Failed password for invalid user knox from 81.30.212.14 port 44504 ssh2 Sep 1 22:35:28 web9 sshd\[16428\]: Invalid user rahul from 81.30.212.14 Sep 1 22:35:28 web9 sshd\[16428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.212.14 |
2019-09-02 16:46:17 |
| 92.50.249.166 | attackspambots | Sep 1 22:16:19 sachi sshd\[5551\]: Invalid user squid from 92.50.249.166 Sep 1 22:16:19 sachi sshd\[5551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.50.249.166 Sep 1 22:16:21 sachi sshd\[5551\]: Failed password for invalid user squid from 92.50.249.166 port 47988 ssh2 Sep 1 22:20:28 sachi sshd\[5937\]: Invalid user kd from 92.50.249.166 Sep 1 22:20:28 sachi sshd\[5937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.50.249.166 |
2019-09-02 16:21:38 |
| 178.46.213.197 | attack | 23/tcp 23/tcp [2019-08-30/09-02]2pkt |
2019-09-02 16:17:59 |
| 129.211.27.96 | attackbots | SSH/22 MH Probe, BF, Hack - |
2019-09-02 16:28:06 |
| 103.66.16.18 | attackbots | "Fail2Ban detected SSH brute force attempt" |
2019-09-02 16:08:57 |
| 218.5.244.218 | attackbots | Sep 2 10:27:51 ns3110291 sshd\[1757\]: Invalid user anonymous from 218.5.244.218 Sep 2 10:27:51 ns3110291 sshd\[1757\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.5.244.218 Sep 2 10:27:54 ns3110291 sshd\[1757\]: Failed password for invalid user anonymous from 218.5.244.218 port 12342 ssh2 Sep 2 10:33:26 ns3110291 sshd\[16369\]: Invalid user mailbox from 218.5.244.218 Sep 2 10:33:26 ns3110291 sshd\[16369\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.5.244.218 ... |
2019-09-02 16:45:29 |
| 111.240.253.177 | attackspam | Sep 1 14:52:19 localhost kernel: [1101755.663090] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=111.240.253.177 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=65370 PROTO=TCP SPT=19711 DPT=37215 WINDOW=9370 RES=0x00 SYN URGP=0 Sep 1 14:52:19 localhost kernel: [1101755.663116] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=111.240.253.177 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=65370 PROTO=TCP SPT=19711 DPT=37215 SEQ=758669438 ACK=0 WINDOW=9370 RES=0x00 SYN URGP=0 Sep 1 23:19:26 localhost kernel: [1132182.156824] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=111.240.253.177 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=43322 PROTO=TCP SPT=19711 DPT=37215 WINDOW=9370 RES=0x00 SYN URGP=0 Sep 1 23:19:26 localhost kernel: [1132182.156851] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=111.240.253.177 DST=[mungedIP2] LEN=40 TOS=0x |
2019-09-02 16:18:14 |
| 121.67.246.139 | attackspambots | Sep 2 08:27:32 tuxlinux sshd[33618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.67.246.139 user=root Sep 2 08:27:34 tuxlinux sshd[33618]: Failed password for root from 121.67.246.139 port 53970 ssh2 Sep 2 08:27:32 tuxlinux sshd[33618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.67.246.139 user=root Sep 2 08:27:34 tuxlinux sshd[33618]: Failed password for root from 121.67.246.139 port 53970 ssh2 Sep 2 08:35:10 tuxlinux sshd[33754]: Invalid user farid from 121.67.246.139 port 42972 ... |
2019-09-02 16:11:51 |
| 112.237.143.137 | attack | 52869/tcp 52869/tcp [2019-08-30/09-01]2pkt |
2019-09-02 16:33:00 |
| 82.142.87.2 | attack | Mail sent to address obtained from MySpace hack |
2019-09-02 16:27:03 |
| 58.249.57.254 | attackbots | Sep 2 04:29:46 xtremcommunity sshd\[8322\]: Invalid user 123456 from 58.249.57.254 port 43114 Sep 2 04:29:46 xtremcommunity sshd\[8322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.249.57.254 Sep 2 04:29:48 xtremcommunity sshd\[8322\]: Failed password for invalid user 123456 from 58.249.57.254 port 43114 ssh2 Sep 2 04:33:22 xtremcommunity sshd\[8452\]: Invalid user 123 from 58.249.57.254 port 43926 Sep 2 04:33:22 xtremcommunity sshd\[8452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.249.57.254 ... |
2019-09-02 16:46:39 |
| 49.235.198.166 | attackbots | Web App Attack |
2019-09-02 16:42:05 |
| 209.97.161.22 | attackspam | Sep 1 21:55:28 lcprod sshd\[16218\]: Invalid user herbert from 209.97.161.22 Sep 1 21:55:28 lcprod sshd\[16218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.161.22 Sep 1 21:55:30 lcprod sshd\[16218\]: Failed password for invalid user herbert from 209.97.161.22 port 45724 ssh2 Sep 1 22:00:15 lcprod sshd\[16676\]: Invalid user sion from 209.97.161.22 Sep 1 22:00:15 lcprod sshd\[16676\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.161.22 |
2019-09-02 16:15:21 |