City: Brugherio
Region: Lombardy
Country: Italy
Internet Service Provider: Vodafone
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.42.252.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35450
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;2.42.252.147. IN A
;; AUTHORITY SECTION:
. 575 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024060200 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 02 19:25:55 CST 2024
;; MSG SIZE rcvd: 105147.252.42.2.in-addr.arpa domain name pointer net-2-42-252-147.cust.vodafonedsl.it.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
147.252.42.2.in-addr.arpa name = net-2-42-252-147.cust.vodafonedsl.it.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 82.159.138.57 | attackspam | Nov 19 20:39:05 php1 sshd\[30120\]: Invalid user test from 82.159.138.57 Nov 19 20:39:05 php1 sshd\[30120\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.159.138.57 Nov 19 20:39:07 php1 sshd\[30120\]: Failed password for invalid user test from 82.159.138.57 port 44554 ssh2 Nov 19 20:42:37 php1 sshd\[30401\]: Invalid user travel_phpb1 from 82.159.138.57 Nov 19 20:42:37 php1 sshd\[30401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.159.138.57 |
2019-11-20 15:05:14 |
| 204.13.232.50 | attack | Wordpress login attempts |
2019-11-20 14:25:50 |
| 117.192.90.34 | attackbotsspam | Unauthorised access (Nov 20) SRC=117.192.90.34 LEN=52 PREC=0x20 TTL=110 ID=14233 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-20 14:16:12 |
| 36.155.10.19 | attackbotsspam | 2019-11-20T06:30:31.832182abusebot-5.cloudsearch.cf sshd\[6046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.155.10.19 user=root |
2019-11-20 14:45:25 |
| 185.153.199.125 | attack | Nov 20 07:31:12 host sshd[14922]: Invalid user 0 from 185.153.199.125 port 40443 ... |
2019-11-20 14:55:22 |
| 89.139.97.18 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/89.139.97.18/ IL - 1H : (14) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : IL NAME ASN : ASN1680 IP : 89.139.97.18 CIDR : 89.139.0.0/16 PREFIX COUNT : 146 UNIQUE IP COUNT : 1483776 ATTACKS DETECTED ASN1680 : 1H - 1 3H - 1 6H - 1 12H - 2 24H - 5 DateTime : 2019-11-20 07:40:54 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-20 14:53:31 |
| 222.186.15.246 | attackspambots | scan r |
2019-11-20 14:21:35 |
| 59.153.74.43 | attackbots | (sshd) Failed SSH login from 59.153.74.43 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 20 08:19:20 s1 sshd[7772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.153.74.43 user=mysql Nov 20 08:19:22 s1 sshd[7772]: Failed password for mysql from 59.153.74.43 port 50568 ssh2 Nov 20 08:28:06 s1 sshd[8077]: Invalid user je from 59.153.74.43 port 9520 Nov 20 08:28:07 s1 sshd[8077]: Failed password for invalid user je from 59.153.74.43 port 9520 ssh2 Nov 20 08:32:23 s1 sshd[8211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.153.74.43 user=root |
2019-11-20 14:44:04 |
| 78.188.61.92 | attackbots | Automatic report - Port Scan Attack |
2019-11-20 15:05:33 |
| 222.186.173.238 | attackbotsspam | Nov 20 07:46:46 serwer sshd\[13999\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238 user=root Nov 20 07:46:48 serwer sshd\[13999\]: Failed password for root from 222.186.173.238 port 19854 ssh2 Nov 20 07:46:51 serwer sshd\[13999\]: Failed password for root from 222.186.173.238 port 19854 ssh2 ... |
2019-11-20 15:00:58 |
| 171.228.73.111 | attack | port scan and connect, tcp 1433 (ms-sql-s) |
2019-11-20 14:23:38 |
| 103.248.223.27 | attackbots | Nov 20 07:24:38 sd-53420 sshd\[9752\]: Invalid user holstein from 103.248.223.27 Nov 20 07:24:38 sd-53420 sshd\[9752\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.248.223.27 Nov 20 07:24:41 sd-53420 sshd\[9752\]: Failed password for invalid user holstein from 103.248.223.27 port 47659 ssh2 Nov 20 07:31:19 sd-53420 sshd\[11861\]: Invalid user yean from 103.248.223.27 Nov 20 07:31:19 sd-53420 sshd\[11861\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.248.223.27 ... |
2019-11-20 14:44:57 |
| 45.67.14.163 | attackspam | SSH Bruteforce attack |
2019-11-20 15:07:10 |
| 51.91.20.174 | attack | 2019-11-20T00:45:35.4219091495-001 sshd\[35699\]: Invalid user qq from 51.91.20.174 port 49234 2019-11-20T00:45:35.4251041495-001 sshd\[35699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.20.174 2019-11-20T00:45:36.9172671495-001 sshd\[35699\]: Failed password for invalid user qq from 51.91.20.174 port 49234 ssh2 2019-11-20T00:49:17.1399651495-001 sshd\[35825\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.20.174 user=root 2019-11-20T00:49:19.1082471495-001 sshd\[35825\]: Failed password for root from 51.91.20.174 port 57398 ssh2 2019-11-20T00:53:03.9484171495-001 sshd\[35927\]: Invalid user dunbar from 51.91.20.174 port 37328 2019-11-20T00:53:03.9590401495-001 sshd\[35927\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.20.174 ... |
2019-11-20 14:14:22 |
| 186.137.123.13 | attackspam | 2019-11-20T06:56:15.557182abusebot-5.cloudsearch.cf sshd\[6240\]: Invalid user lucas from 186.137.123.13 port 38476 |
2019-11-20 15:02:18 |