City: unknown
Region: unknown
Country: Korea Republic of
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.162.69.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8216
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;121.162.69.245. IN A
;; AUTHORITY SECTION:
. 409 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 05:58:14 CST 2022
;; MSG SIZE rcvd: 107Host 245.69.162.121.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 245.69.162.121.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 93.174.93.48 | attackspambots | Jun 21 20:51:27 MK-Soft-VM5 sshd\[28512\]: Invalid user services from 93.174.93.48 port 57632 Jun 21 20:51:27 MK-Soft-VM5 sshd\[28512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.174.93.48 Jun 21 20:51:29 MK-Soft-VM5 sshd\[28512\]: Failed password for invalid user services from 93.174.93.48 port 57632 ssh2 ... |
2019-06-22 05:06:26 |
| 89.44.202.182 | attackspam | Request: "GET / HTTP/1.1" |
2019-06-22 04:54:24 |
| 51.77.52.160 | attack | Request: "GET /wp-content/plugins/woocommerce-checkout-manager/readme.txt HTTP/1.1" Request: "GET /wp-content/plugins/types/readme.txt HTTP/1.1" Request: "GET / HTTP/1.1" Request: "GET /wp-content/plugins/wp-gdpr-compliance/readme.txt HTTP/1.1" Request: "GET /wp-content/plugins/kiwi-social-share/readme.txt HTTP/1.1" Request: "GET /wp-content/themes/Newspaper/readme.txt HTTP/1.1" Request: "GET /wp-content/plugins/userpro/changelog.txt HTTP/1.1" Request: "GET / HTTP/1.1" Request: "GET / HTTP/1.1" Request: "GET / HTTP/1.1" |
2019-06-22 05:24:50 |
| 162.243.150.192 | attack | Bad Bot Bad Request: "GET / HTTP/1.1" Agent: "Mozilla/5.0 zgrab/0.x" |
2019-06-22 04:58:35 |
| 37.49.224.204 | attack | Invalid user support from 37.49.224.204 port 55540 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.49.224.204 Failed password for invalid user support from 37.49.224.204 port 55540 ssh2 Invalid user admin from 37.49.224.204 port 55609 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.49.224.204 |
2019-06-22 05:09:42 |
| 66.249.79.109 | attack | port scanning (dstport=80) and posible SQL injections |
2019-06-22 05:26:17 |
| 13.57.221.224 | attackspam | Bad Bot Bad Request: "GET /app HTTP/1.1" Agent: "python-requests/2.6.0 CPython/2.7.6 Linux/3.13.0-74-generic" Bad Bot Bad Request: "GET / HTTP/1.1" Agent: "python-requests/2.6.0 CPython/2.7.6 Linux/3.13.0-74-generic" Bad Bot Bad Request: "GET / HTTP/1.1" Agent: "python-requests/2.6.0 CPython/2.7.6 Linux/3.13.0-74-generic" |
2019-06-22 05:34:17 |
| 138.59.218.127 | attackspam | 2019-06-18T02:19:07.212925kvm.hostname-sakh.net sshd[32411]: Invalid user schweers from 138.59.218.127 port 56886 2019-06-18T02:19:07.218812kvm.hostname-sakh.net sshd[32411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.59.218.127 2019-06-18T02:19:09.309582kvm.hostname-sakh.net sshd[32411]: Failed password for invalid user schweers from 138.59.218.127 port 56886 ssh2 2019-06-18T02:24:14.395111kvm.hostname-sakh.net sshd[32580]: Invalid user sibert from 138.59.218.127 port 44486 2019-06-18T02:24:14.400791kvm.hostname-sakh.net sshd[32580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.59.218.127 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=138.59.218.127 |
2019-06-22 05:02:00 |
| 2.179.210.79 | attack | Request: "GET / HTTP/1.1" |
2019-06-22 04:59:10 |
| 159.65.129.182 | attack | Jun 18 00:12:23 ihdb003 sshd[23895]: Connection from 159.65.129.182 port 57006 on 178.128.173.140 port 22 Jun 18 00:12:23 ihdb003 sshd[23895]: Did not receive identification string from 159.65.129.182 port 57006 Jun 18 00:14:09 ihdb003 sshd[23903]: Connection from 159.65.129.182 port 52126 on 178.128.173.140 port 22 Jun 18 00:14:10 ihdb003 sshd[23903]: User r.r from 159.65.129.182 not allowed because none of user's groups are listed in AllowGroups Jun 18 00:14:10 ihdb003 sshd[23903]: Received disconnect from 159.65.129.182 port 52126:11: Normal Shutdown, Thank you for playing [preauth] Jun 18 00:14:10 ihdb003 sshd[23903]: Disconnected from 159.65.129.182 port 52126 [preauth] Jun 18 00:16:23 ihdb003 sshd[23917]: Connection from 159.65.129.182 port 37438 on 178.128.173.140 port 22 Jun 18 00:16:24 ihdb003 sshd[23917]: User r.r from 159.65.129.182 not allowed because none of user's groups are listed in AllowGroups Jun 18 00:16:24 ihdb003 sshd[23917]: Received disconnect fro........ ------------------------------- |
2019-06-22 05:24:05 |
| 121.230.63.195 | attackspam | 5555/tcp 5555/tcp 5555/tcp [2019-06-21]3pkt |
2019-06-22 04:58:01 |
| 109.201.154.161 | attackspam | Bad Bot Request: "HEAD / HTTP/1.1" Agent: "Mozilla/5.0 (compatible; Uptimebot/1.0; http://www.uptime.com/uptimebot)" |
2019-06-22 05:25:51 |
| 178.151.255.76 | attackspambots | 445/tcp [2019-06-21]1pkt |
2019-06-22 05:23:48 |
| 54.193.66.148 | attackbots | Bad Bot Bad Request: "GET /app HTTP/1.1" Agent: "python-requests/2.6.0 CPython/2.7.6 Linux/3.13.0-74-generic" Bad Bot Bad Request: "GET / HTTP/1.1" Agent: "python-requests/2.6.0 CPython/2.7.6 Linux/3.13.0-74-generic" Bad Bot Bad Request: "GET / HTTP/1.1" Agent: "python-requests/2.6.0 CPython/2.7.6 Linux/3.13.0-74-generic" |
2019-06-22 05:33:08 |
| 103.4.165.230 | attackspambots | Request: "GET / HTTP/1.1" |
2019-06-22 05:04:28 |