City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.242.81.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23061
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;120.242.81.42. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 05:58:16 CST 2025
;; MSG SIZE rcvd: 106
Host 42.81.242.120.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 42.81.242.120.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 107.216.45.99 | attackspam | port scan and connect, tcp 443 (https) |
2020-09-18 02:56:23 |
| 77.29.157.92 | attackspam | Unauthorized connection attempt from IP address 77.29.157.92 on Port 445(SMB) |
2020-09-18 03:04:55 |
| 132.148.28.20 | attackbotsspam | GET /wp-login.php HTTP/1.1 |
2020-09-18 03:03:45 |
| 42.3.123.244 | attackbots | Connection to SSH Honeypot - Detected by HoneypotDB |
2020-09-18 03:02:15 |
| 91.126.200.156 | attackbotsspam | Connection to SSH Honeypot - Detected by HoneypotDB |
2020-09-18 03:04:35 |
| 77.120.241.151 | attackspam | Brute-force attempt banned |
2020-09-18 03:08:49 |
| 122.202.32.70 | attack | Sep 17 14:16:41 NPSTNNYC01T sshd[9182]: Failed password for root from 122.202.32.70 port 35174 ssh2 Sep 17 14:20:22 NPSTNNYC01T sshd[9483]: Failed password for root from 122.202.32.70 port 47816 ssh2 ... |
2020-09-18 02:39:35 |
| 222.186.175.148 | attack | Sep 17 20:29:19 marvibiene sshd[31047]: Failed password for root from 222.186.175.148 port 8772 ssh2 Sep 17 20:29:24 marvibiene sshd[31047]: Failed password for root from 222.186.175.148 port 8772 ssh2 |
2020-09-18 02:32:33 |
| 113.111.48.150 | attackbotsspam | Lines containing failures of 113.111.48.150 Sep 15 21:10:45 kmh-vmh-001-fsn03 sshd[1336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.111.48.150 user=r.r Sep 15 21:10:48 kmh-vmh-001-fsn03 sshd[1336]: Failed password for r.r from 113.111.48.150 port 52171 ssh2 Sep 15 21:10:48 kmh-vmh-001-fsn03 sshd[1336]: Received disconnect from 113.111.48.150 port 52171:11: Bye Bye [preauth] Sep 15 21:10:48 kmh-vmh-001-fsn03 sshd[1336]: Disconnected from authenticating user r.r 113.111.48.150 port 52171 [preauth] Sep 15 21:21:41 kmh-vmh-001-fsn03 sshd[26495]: Invalid user ervisor from 113.111.48.150 port 56197 Sep 15 21:21:41 kmh-vmh-001-fsn03 sshd[26495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.111.48.150 Sep 15 21:21:43 kmh-vmh-001-fsn03 sshd[26495]: Failed password for invalid user ervisor from 113.111.48.150 port 56197 ssh2 Sep 15 21:21:43 kmh-vmh-001-fsn03 sshd[26495]: Received dis........ ------------------------------ |
2020-09-18 03:14:01 |
| 115.91.88.211 | attackbots | Connection to SSH Honeypot - Detected by HoneypotDB |
2020-09-18 02:43:49 |
| 51.91.123.235 | attack | 51.91.123.235 - - [17/Sep/2020:10:09:53 -0700] "GET /wp-login.php HTTP/1.1" 301 561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-18 02:46:42 |
| 64.227.125.204 | attackspambots | Invalid user service from 64.227.125.204 port 44020 |
2020-09-18 02:49:43 |
| 46.109.1.54 | attackbotsspam | Unauthorized connection attempt from IP address 46.109.1.54 on Port 445(SMB) |
2020-09-18 02:50:05 |
| 72.48.234.137 | attack | (sshd) Failed SSH login from 72.48.234.137 (US/United States/72-48-234-137.static.grandenetworks.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 17 13:01:55 server sshd[22497]: Invalid user admin from 72.48.234.137 port 42722 Sep 17 13:01:56 server sshd[22497]: Failed password for invalid user admin from 72.48.234.137 port 42722 ssh2 Sep 17 13:01:57 server sshd[22502]: Invalid user admin from 72.48.234.137 port 42778 Sep 17 13:01:59 server sshd[22502]: Failed password for invalid user admin from 72.48.234.137 port 42778 ssh2 Sep 17 13:01:59 server sshd[22519]: Invalid user admin from 72.48.234.137 port 42859 |
2020-09-18 02:58:17 |
| 201.44.241.178 | attackbots | Unauthorized connection attempt from IP address 201.44.241.178 on Port 445(SMB) |
2020-09-18 02:43:16 |