City: unknown
Region: unknown
Country: Italy
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.42.59.182
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57339
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;2.42.59.182. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012801 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 05:07:27 CST 2025
;; MSG SIZE rcvd: 104
182.59.42.2.in-addr.arpa domain name pointer net-2-42-59-182.cust.vodafonedsl.it.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
182.59.42.2.in-addr.arpa name = net-2-42-59-182.cust.vodafonedsl.it.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 123.201.20.30 | attackbots | Automatic report BANNED IP |
2020-09-23 12:31:29 |
| 104.131.84.222 | attack | 2020-09-23T08:27:19.705921paragon sshd[321838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.84.222 2020-09-23T08:27:19.702589paragon sshd[321838]: Invalid user tuser from 104.131.84.222 port 35645 2020-09-23T08:27:21.466365paragon sshd[321838]: Failed password for invalid user tuser from 104.131.84.222 port 35645 ssh2 2020-09-23T08:31:02.322712paragon sshd[321915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.84.222 user=root 2020-09-23T08:31:04.031986paragon sshd[321915]: Failed password for root from 104.131.84.222 port 40342 ssh2 ... |
2020-09-23 12:31:53 |
| 112.170.196.160 | attack | Found on Binary Defense / proto=6 . srcport=42166 . dstport=1433 . (3061) |
2020-09-23 09:04:32 |
| 194.150.235.195 | attack | Sep 23 06:05:00 mail.srvfarm.net postfix/smtpd[4073262]: NOQUEUE: reject: RCPT from unknown[194.150.235.195]: 450 4.7.1 |
2020-09-23 12:21:46 |
| 212.64.5.28 | attackspambots | Time: Wed Sep 23 01:00:47 2020 +0000 IP: 212.64.5.28 (CN/China/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 23 00:31:27 3 sshd[23535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.5.28 user=mysql Sep 23 00:31:29 3 sshd[23535]: Failed password for mysql from 212.64.5.28 port 39848 ssh2 Sep 23 00:56:27 3 sshd[8362]: Invalid user jason from 212.64.5.28 port 46046 Sep 23 00:56:29 3 sshd[8362]: Failed password for invalid user jason from 212.64.5.28 port 46046 ssh2 Sep 23 01:00:43 3 sshd[13056]: Invalid user apagar from 212.64.5.28 port 45230 |
2020-09-23 12:09:25 |
| 211.213.149.239 | attackspambots | Brute-force attempt banned |
2020-09-23 12:04:04 |
| 218.92.0.138 | attackspam | Failed password for root from 218.92.0.138 port 52456 ssh2 Failed password for root from 218.92.0.138 port 52456 ssh2 Failed password for root from 218.92.0.138 port 52456 ssh2 Failed password for root from 218.92.0.138 port 52456 ssh2 |
2020-09-23 12:31:03 |
| 112.85.42.73 | attackbots | Sep 23 11:16:06 webhost01 sshd[715]: Failed password for root from 112.85.42.73 port 16245 ssh2 ... |
2020-09-23 12:25:03 |
| 112.173.239.113 | attack | Listed on zen-spamhaus also abuseat.org / proto=6 . srcport=52560 . dstport=23 . (3093) |
2020-09-23 12:11:55 |
| 223.241.247.214 | attack | 2020-09-23T02:57:14.810372galaxy.wi.uni-potsdam.de sshd[26550]: Invalid user teamspeak from 223.241.247.214 port 35544 2020-09-23T02:57:14.814902galaxy.wi.uni-potsdam.de sshd[26550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.241.247.214 2020-09-23T02:57:14.810372galaxy.wi.uni-potsdam.de sshd[26550]: Invalid user teamspeak from 223.241.247.214 port 35544 2020-09-23T02:57:17.127408galaxy.wi.uni-potsdam.de sshd[26550]: Failed password for invalid user teamspeak from 223.241.247.214 port 35544 ssh2 2020-09-23T03:00:05.440609galaxy.wi.uni-potsdam.de sshd[26858]: Invalid user jenkins from 223.241.247.214 port 44816 2020-09-23T03:00:05.445619galaxy.wi.uni-potsdam.de sshd[26858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.241.247.214 2020-09-23T03:00:05.440609galaxy.wi.uni-potsdam.de sshd[26858]: Invalid user jenkins from 223.241.247.214 port 44816 2020-09-23T03:00:07.567460galaxy.wi.uni-potsdam. ... |
2020-09-23 12:13:18 |
| 15.228.49.89 | attackspam | Web Spam |
2020-09-23 12:05:43 |
| 106.12.84.83 | attackbots | DATE:2020-09-22 21:05:57, IP:106.12.84.83, PORT:ssh SSH brute force auth (docker-dc) |
2020-09-23 12:19:02 |
| 103.207.7.252 | attack | Sep 23 05:50:09 mail.srvfarm.net postfix/smtpd[4071960]: warning: unknown[103.207.7.252]: SASL PLAIN authentication failed: Sep 23 05:50:09 mail.srvfarm.net postfix/smtpd[4071960]: lost connection after AUTH from unknown[103.207.7.252] Sep 23 05:55:55 mail.srvfarm.net postfix/smtpd[4073302]: warning: unknown[103.207.7.252]: SASL PLAIN authentication failed: Sep 23 05:55:55 mail.srvfarm.net postfix/smtpd[4073302]: lost connection after AUTH from unknown[103.207.7.252] Sep 23 05:56:13 mail.srvfarm.net postfix/smtps/smtpd[4070964]: warning: unknown[103.207.7.252]: SASL PLAIN authentication failed: |
2020-09-23 12:26:18 |
| 86.63.68.5 | attack | Sep 22 18:54:52 mail.srvfarm.net postfix/smtpd[3675157]: warning: 86-63-68-5.sta.asta-net.com.pl[86.63.68.5]: SASL PLAIN authentication failed: Sep 22 18:54:52 mail.srvfarm.net postfix/smtpd[3675157]: lost connection after AUTH from 86-63-68-5.sta.asta-net.com.pl[86.63.68.5] Sep 22 18:59:59 mail.srvfarm.net postfix/smtpd[3675789]: warning: 86-63-68-5.sta.asta-net.com.pl[86.63.68.5]: SASL PLAIN authentication failed: Sep 22 18:59:59 mail.srvfarm.net postfix/smtpd[3675789]: lost connection after AUTH from 86-63-68-5.sta.asta-net.com.pl[86.63.68.5] Sep 22 19:03:25 mail.srvfarm.net postfix/smtpd[3675761]: warning: 86-63-68-5.sta.asta-net.com.pl[86.63.68.5]: SASL PLAIN authentication failed: |
2020-09-23 12:26:53 |
| 119.45.48.108 | attackspambots | Sep 22 21:47:00 r.ca sshd[6028]: Failed password for root from 119.45.48.108 port 56314 ssh2 |
2020-09-23 12:06:45 |