City: unknown
Region: unknown
Country: Korea (the Republic of)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 203.225.42.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43072
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;203.225.42.242. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400
;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 14:53:25 CST 2025
;; MSG SIZE rcvd: 107Host 242.42.225.203.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 242.42.225.203.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 1.182.192.211 | attack | /download/file.php?id=171&sid=45c2995bb7350284e0c2c5b3ff651c37 |
2019-10-15 15:04:02 |
| 117.78.33.78 | attack | Automatic report - Port Scan Attack |
2019-10-15 15:07:42 |
| 116.105.226.146 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 15-10-2019 04:50:20. |
2019-10-15 14:59:54 |
| 37.187.159.24 | attack | xmlrpc attack |
2019-10-15 15:17:34 |
| 138.197.189.138 | attackspambots | Oct 14 14:43:59 fv15 sshd[12792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.138 user=r.r Oct 14 14:44:01 fv15 sshd[12792]: Failed password for r.r from 138.197.189.138 port 55344 ssh2 Oct 14 14:44:01 fv15 sshd[12792]: Received disconnect from 138.197.189.138: 11: Bye Bye [preauth] Oct 14 14:49:54 fv15 sshd[4094]: Failed password for invalid user fwong from 138.197.189.138 port 52014 ssh2 Oct 14 14:49:54 fv15 sshd[4094]: Received disconnect from 138.197.189.138: 11: Bye Bye [preauth] Oct 14 14:53:46 fv15 sshd[8443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.189.138 user=r.r Oct 14 14:53:48 fv15 sshd[8443]: Failed password for r.r from 138.197.189.138 port 36594 ssh2 Oct 14 14:53:48 fv15 sshd[8443]: Received disconnect from 138.197.189.138: 11: Bye Bye [preauth] Oct 14 14:57:38 fv15 sshd[11034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=........ ------------------------------- |
2019-10-15 15:03:17 |
| 194.28.172.37 | attackbots | firewall-block, port(s): 445/tcp |
2019-10-15 15:02:39 |
| 52.37.77.98 | attack | 10/15/2019-08:56:13.262699 52.37.77.98 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-10-15 15:08:00 |
| 96.30.84.204 | attack | firewall-block, port(s): 88/tcp |
2019-10-15 15:08:54 |
| 80.103.163.66 | attackbotsspam | Oct 15 08:33:29 rotator sshd\[25481\]: Invalid user tex from 80.103.163.66Oct 15 08:33:32 rotator sshd\[25481\]: Failed password for invalid user tex from 80.103.163.66 port 34242 ssh2Oct 15 08:37:29 rotator sshd\[26257\]: Invalid user nordica from 80.103.163.66Oct 15 08:37:31 rotator sshd\[26257\]: Failed password for invalid user nordica from 80.103.163.66 port 54354 ssh2Oct 15 08:41:47 rotator sshd\[27073\]: Invalid user kuaisuweb from 80.103.163.66Oct 15 08:41:49 rotator sshd\[27073\]: Failed password for invalid user kuaisuweb from 80.103.163.66 port 46237 ssh2 ... |
2019-10-15 15:09:57 |
| 2.59.21.207 | attack | [Aegis] @ 2019-10-15 04:50:08 0100 -> A web attack returned code 200 (success). |
2019-10-15 15:07:21 |
| 112.64.170.166 | attackspambots | Oct 15 07:26:26 meumeu sshd[28482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.170.166 Oct 15 07:26:28 meumeu sshd[28482]: Failed password for invalid user ks from 112.64.170.166 port 60176 ssh2 Oct 15 07:31:21 meumeu sshd[29087]: Failed password for root from 112.64.170.166 port 41266 ssh2 ... |
2019-10-15 14:49:53 |
| 14.251.168.182 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 15-10-2019 04:50:21. |
2019-10-15 14:57:32 |
| 185.234.218.237 | attack | smtp |
2019-10-15 15:15:55 |
| 77.108.78.22 | attackspam | Sending SPAM email |
2019-10-15 15:10:25 |
| 196.52.43.90 | attackbots | " " |
2019-10-15 15:01:43 |