City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 162.55.139.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27228
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;162.55.139.93. IN A
;; AUTHORITY SECTION:
. 578 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022060303 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 04 06:39:01 CST 2022
;; MSG SIZE rcvd: 10693.139.55.162.in-addr.arpa domain name pointer komolife.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
93.139.55.162.in-addr.arpa name = komolife.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 200.122.249.203 | attackbots | 2019-10-22T18:21:40.101501scmdmz1 sshd\[21176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.122.249.203 user=root 2019-10-22T18:21:41.743301scmdmz1 sshd\[21176\]: Failed password for root from 200.122.249.203 port 53896 ssh2 2019-10-22T18:25:41.679985scmdmz1 sshd\[21516\]: Invalid user gw from 200.122.249.203 port 44179 ... |
2019-10-23 00:33:49 |
| 188.131.136.36 | attackbotsspam | Oct 22 13:11:00 marvibiene sshd[17171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.136.36 user=root Oct 22 13:11:02 marvibiene sshd[17171]: Failed password for root from 188.131.136.36 port 32994 ssh2 Oct 22 13:32:47 marvibiene sshd[17269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.136.36 user=root Oct 22 13:32:49 marvibiene sshd[17269]: Failed password for root from 188.131.136.36 port 60724 ssh2 ... |
2019-10-23 00:32:29 |
| 137.63.246.39 | attackspam | Oct 22 17:55:20 lnxweb62 sshd[460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.63.246.39 |
2019-10-23 00:26:01 |
| 121.254.26.153 | attackbotsspam | Invalid user kulwinder from 121.254.26.153 port 54326 |
2019-10-23 00:45:38 |
| 175.176.8.51 | attackbotsspam | 2019-10-21 x@x 2019-10-21 09:40:48 unexpected disconnection while reading SMTP command from ([175.176.8.51]) [175.176.8.51]:56679 I=[10.100.18.25]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=175.176.8.51 |
2019-10-23 00:38:17 |
| 49.75.63.188 | attackbots | 49.75.63.188 - - [18/Oct/2019:02:41:22 -0700] "GET /otsmobile/app/mgs/mgw.htm?operationType=com.cars.otsmobile.queryLeftTicket&requestData=%5B%7B%22train_date%22%3A%2220191023%22%2C%22purpose_codes%22%3A%2200%22%2C%22from_station%22%3A%22SHH%22%2C%22to_station%22%3A%22CNW%22%2C%22station_train_code%22%3A%22%22%2C%22start_time_begin%22%3A%220000%22%2C%22start_time_end%22%3A%222400%22%2C%22train_headers%22%3A%22QB%23%22%2C%22train_flag%22%3A%22%22%2C%22seat_type%22%3A%22%22%2C%22seatBack_Type%22%3A%22%22%2C%22ticket_num%22%3A%22%22%2C%22dfpStr%22%3A%22WDiblWx6jPO93KkW6SAC1MoIEORFuzmq6knO8mCWbXPg-dTZ4aEt-EH8KzhB59CaFnUyKLabD8EsSTaJk_n57dBS5qFMRhvKLvgN_KupQShfMXkPx6hiAdib3fO9pZShO3RdjRvjSq3u1OSFjOB18sfYTP24oYaN%22%2C%22baseDTO%22%3A%7B%22check_code%22%3A%229383d8336585707518500dee9e175f65%22%2C%22device_no%22%3A%22Xalk%2FkUU0QEzMEeQ8DRGjmca%22%2C%22mobile_no%22%3A%22%22%2C%22os_type%22%3A%22a%22%2C%22time_str%22%3A%2220191018173325%22%2C%22user_name%22%3A%22%22%2C%22version_no%22%3A%224.2.36%22%7D%7D%5D&ts=157139 |
2019-10-23 00:27:50 |
| 81.22.45.116 | attack | Oct 22 18:30:29 mc1 kernel: \[3048179.077625\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.116 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=63278 PROTO=TCP SPT=56757 DPT=19696 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 18:33:10 mc1 kernel: \[3048340.076727\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.116 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54851 PROTO=TCP SPT=56757 DPT=19990 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 18:36:33 mc1 kernel: \[3048542.841019\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.116 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=62666 PROTO=TCP SPT=56757 DPT=20363 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-23 00:40:15 |
| 54.37.69.74 | attackspambots | Invalid user adeline from 54.37.69.74 port 40416 |
2019-10-23 00:41:27 |
| 185.52.117.92 | attackspambots | 2019-10-21 x@x 2019-10-21 10:21:54 unexpected disconnection while reading SMTP command from ([185.52.117.92]) [185.52.117.92]:44911 I=[10.100.18.21]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=185.52.117.92 |
2019-10-23 00:54:39 |
| 118.70.182.185 | attackbots | Oct 22 15:25:27 SilenceServices sshd[1401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.182.185 Oct 22 15:25:29 SilenceServices sshd[1401]: Failed password for invalid user test from 118.70.182.185 port 38748 ssh2 Oct 22 15:30:25 SilenceServices sshd[2754]: Failed password for root from 118.70.182.185 port 50550 ssh2 |
2019-10-23 00:53:15 |
| 185.42.181.218 | attack | [portscan] Port scan |
2019-10-23 01:00:05 |
| 185.216.140.180 | attackspambots | (Oct 22) LEN=40 TTL=249 ID=42682 TCP DPT=3306 WINDOW=1024 SYN (Oct 22) LEN=40 TTL=249 ID=36892 TCP DPT=3306 WINDOW=1024 SYN (Oct 22) LEN=40 TTL=249 ID=51379 TCP DPT=3306 WINDOW=1024 SYN (Oct 22) LEN=40 TTL=249 ID=42326 TCP DPT=3306 WINDOW=1024 SYN (Oct 22) LEN=40 TTL=249 ID=127 TCP DPT=3306 WINDOW=1024 SYN (Oct 22) LEN=40 TTL=249 ID=58584 TCP DPT=3306 WINDOW=1024 SYN (Oct 22) LEN=40 TTL=249 ID=11750 TCP DPT=3306 WINDOW=1024 SYN (Oct 22) LEN=40 TTL=249 ID=16906 TCP DPT=3306 WINDOW=1024 SYN (Oct 22) LEN=40 TTL=249 ID=25206 TCP DPT=3306 WINDOW=1024 SYN (Oct 22) LEN=40 TTL=249 ID=25359 TCP DPT=3306 WINDOW=1024 SYN (Oct 21) LEN=40 TTL=249 ID=14395 TCP DPT=3306 WINDOW=1024 SYN (Oct 21) LEN=40 TTL=249 ID=52047 TCP DPT=3306 WINDOW=1024 SYN (Oct 21) LEN=40 TTL=249 ID=55981 TCP DPT=3306 WINDOW=1024 SYN (Oct 21) LEN=40 TTL=249 ID=64865 TCP DPT=3306 WINDOW=1024 SYN (Oct 21) LEN=40 TTL=249 ID=7885 TCP DPT=3306 WINDOW=1024 SYN (Oct 21) LEN=40 TTL=249 ID... |
2019-10-23 00:44:15 |
| 150.95.24.185 | attackspambots | SSH invalid-user multiple login try |
2019-10-23 00:50:24 |
| 49.180.52.227 | attackspam | 2019-10-21 x@x 2019-10-21 10:22:47 unexpected disconnection while reading SMTP command from pa49-180-52-227.pa.nsw.optusnet.com.au [49.180.52.227]:21386 I=[10.100.18.22]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.180.52.227 |
2019-10-23 00:36:45 |
| 128.199.133.201 | attack | Oct 22 19:03:56 hosting sshd[25633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.133.201 user=root Oct 22 19:03:58 hosting sshd[25633]: Failed password for root from 128.199.133.201 port 40395 ssh2 ... |
2019-10-23 00:53:01 |