City: unknown
Region: unknown
Country: Italy
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.42.14.41
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60948
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.42.14.41. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019051300 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon May 13 13:30:13 CST 2019
;; MSG SIZE rcvd: 114
41.14.42.2.in-addr.arpa domain name pointer net-2-42-14-41.cust.vodafonedsl.it.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
41.14.42.2.in-addr.arpa name = net-2-42-14-41.cust.vodafonedsl.it.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 113.190.88.3 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 29-10-2019 11:40:25. |
2019-10-29 21:13:35 |
| 115.225.167.108 | attack | port scan and connect, tcp 23 (telnet) |
2019-10-29 21:42:29 |
| 133.130.99.77 | attack | Oct 29 14:32:53 vps666546 sshd\[28493\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.130.99.77 user=root Oct 29 14:32:56 vps666546 sshd\[28493\]: Failed password for root from 133.130.99.77 port 34686 ssh2 Oct 29 14:37:25 vps666546 sshd\[28650\]: Invalid user kiwiirc from 133.130.99.77 port 45912 Oct 29 14:37:25 vps666546 sshd\[28650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.130.99.77 Oct 29 14:37:26 vps666546 sshd\[28650\]: Failed password for invalid user kiwiirc from 133.130.99.77 port 45912 ssh2 ... |
2019-10-29 21:47:31 |
| 220.225.118.170 | attackspam | Oct 29 13:27:55 yesfletchmain sshd\[19533\]: User root from 220.225.118.170 not allowed because not listed in AllowUsers Oct 29 13:27:55 yesfletchmain sshd\[19533\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.225.118.170 user=root Oct 29 13:27:57 yesfletchmain sshd\[19533\]: Failed password for invalid user root from 220.225.118.170 port 45074 ssh2 Oct 29 13:32:35 yesfletchmain sshd\[19709\]: User root from 220.225.118.170 not allowed because not listed in AllowUsers Oct 29 13:32:35 yesfletchmain sshd\[19709\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.225.118.170 user=root ... |
2019-10-29 21:44:38 |
| 188.165.211.99 | attackbotsspam | Oct 29 13:46:27 ns381471 sshd[16511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.211.99 Oct 29 13:46:29 ns381471 sshd[16511]: Failed password for invalid user 123123123 from 188.165.211.99 port 47994 ssh2 |
2019-10-29 21:14:54 |
| 61.218.249.51 | attack | Port Scan |
2019-10-29 21:25:04 |
| 31.184.218.125 | attackspam | Honeypot attack, port: 5555, PTR: PTR record not found |
2019-10-29 21:36:41 |
| 197.89.78.96 | attack | Unauthorised access (Oct 29) SRC=197.89.78.96 LEN=52 TOS=0x10 PREC=0x40 TTL=113 ID=7644 DF TCP DPT=445 WINDOW=8192 SYN |
2019-10-29 21:30:02 |
| 42.112.173.151 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 29-10-2019 11:40:30. |
2019-10-29 21:04:31 |
| 125.239.166.154 | attack | TCP Port Scanning |
2019-10-29 21:35:24 |
| 124.83.125.61 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 29-10-2019 11:40:26. |
2019-10-29 21:10:40 |
| 2.181.72.153 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 29-10-2019 11:40:27. |
2019-10-29 21:12:05 |
| 193.138.218.162 | attackspambots | Oct 29 12:39:42 serwer sshd\[19860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.138.218.162 user=root Oct 29 12:39:45 serwer sshd\[19860\]: Failed password for root from 193.138.218.162 port 32818 ssh2 Oct 29 12:39:48 serwer sshd\[19860\]: Failed password for root from 193.138.218.162 port 32818 ssh2 ... |
2019-10-29 21:48:08 |
| 45.125.149.221 | attackspam | firewall-block, port(s): 60001/tcp |
2019-10-29 21:32:22 |
| 179.222.2.64 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/179.222.2.64/ BR - 1H : (404) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN28573 IP : 179.222.2.64 CIDR : 179.222.0.0/17 PREFIX COUNT : 1254 UNIQUE IP COUNT : 9653760 ATTACKS DETECTED ASN28573 : 1H - 3 3H - 4 6H - 8 12H - 12 24H - 26 DateTime : 2019-10-29 12:40:22 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-29 21:12:45 |