City: unknown
Region: unknown
Country: Korea (the Republic of)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 203.246.254.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40084
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;203.246.254.42. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400
;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 14:50:05 CST 2025
;; MSG SIZE rcvd: 10742.254.246.203.in-addr.arpa domain name pointer u42.gpu208.samsung.co.kr.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
42.254.246.203.in-addr.arpa name = u42.gpu208.samsung.co.kr.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 58.210.128.130 | attackspam | Jul 9 22:21:33 vmd17057 sshd[31445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.210.128.130 Jul 9 22:21:36 vmd17057 sshd[31445]: Failed password for invalid user mykp from 58.210.128.130 port 42487 ssh2 ... |
2020-07-10 04:33:50 |
| 179.56.22.185 | attackbotsspam | SSH fail RA |
2020-07-10 05:02:58 |
| 185.143.72.27 | attackbotsspam | Jul 9 22:46:20 relay postfix/smtpd\[4544\]: warning: unknown\[185.143.72.27\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 22:46:46 relay postfix/smtpd\[4542\]: warning: unknown\[185.143.72.27\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 22:47:14 relay postfix/smtpd\[2794\]: warning: unknown\[185.143.72.27\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 22:47:41 relay postfix/smtpd\[2794\]: warning: unknown\[185.143.72.27\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 22:48:08 relay postfix/smtpd\[4130\]: warning: unknown\[185.143.72.27\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-07-10 04:51:27 |
| 106.54.64.77 | attack | Jul 9 14:29:35 Host-KLAX-C sshd[15506]: Invalid user toor from 106.54.64.77 port 60144 ... |
2020-07-10 04:36:55 |
| 177.138.171.250 | attackbotsspam | Jul 9 22:14:43 server sshd[17989]: Failed password for invalid user wyjeong from 177.138.171.250 port 50288 ssh2 Jul 9 22:18:03 server sshd[21149]: Failed password for invalid user wangmeng from 177.138.171.250 port 42382 ssh2 Jul 9 22:21:25 server sshd[24759]: Failed password for invalid user ignat from 177.138.171.250 port 34474 ssh2 |
2020-07-10 04:43:50 |
| 219.249.62.179 | attack | 2020-07-09T23:17:59.128740lavrinenko.info sshd[27339]: Invalid user wesley2 from 219.249.62.179 port 41078 2020-07-09T23:17:59.135837lavrinenko.info sshd[27339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.249.62.179 2020-07-09T23:17:59.128740lavrinenko.info sshd[27339]: Invalid user wesley2 from 219.249.62.179 port 41078 2020-07-09T23:18:01.140533lavrinenko.info sshd[27339]: Failed password for invalid user wesley2 from 219.249.62.179 port 41078 ssh2 2020-07-09T23:21:36.687676lavrinenko.info sshd[27519]: Invalid user austin from 219.249.62.179 port 37344 ... |
2020-07-10 04:30:46 |
| 195.18.18.45 | attackbotsspam | [H1] Blocked by UFW |
2020-07-10 04:42:20 |
| 14.232.160.213 | attackbots | Jul 9 22:21:06 melroy-server sshd[21813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.232.160.213 Jul 9 22:21:08 melroy-server sshd[21813]: Failed password for invalid user bcampion from 14.232.160.213 port 45876 ssh2 ... |
2020-07-10 05:00:48 |
| 46.38.150.188 | attackbots | 2020-07-09T14:32:33.714200linuxbox-skyline auth[784404]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=hestia rhost=46.38.150.188 ... |
2020-07-10 04:46:47 |
| 222.77.209.214 | attackspambots | SpamScore above: 10.0 |
2020-07-10 04:45:41 |
| 87.229.237.126 | attack | Invalid user bruno from 87.229.237.126 port 38792 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.229.237.126 Invalid user bruno from 87.229.237.126 port 38792 Failed password for invalid user bruno from 87.229.237.126 port 38792 ssh2 Invalid user meijo from 87.229.237.126 port 45684 |
2020-07-10 04:55:03 |
| 61.231.96.85 | attack | SSH fail RA |
2020-07-10 04:55:18 |
| 194.87.138.88 | attack | Jul 9 22:06:25 vm3 sshd[12826]: Did not receive identification string from 194.87.138.88 port 48234 Jul 9 22:06:38 vm3 sshd[12827]: Received disconnect from 194.87.138.88 port 48590:11: Normal Shutdown, Thank you for playing [preauth] Jul 9 22:06:38 vm3 sshd[12827]: Disconnected from 194.87.138.88 port 48590 [preauth] Jul 9 22:06:47 vm3 sshd[12829]: Invalid user oracle from 194.87.138.88 port 52642 Jul 9 22:06:47 vm3 sshd[12829]: Received disconnect from 194.87.138.88 port 52642:11: Normal Shutdown, Thank you for playing [preauth] Jul 9 22:06:47 vm3 sshd[12829]: Disconnected from 194.87.138.88 port 52642 [preauth] Jul 9 22:06:57 vm3 sshd[12831]: Received disconnect from 194.87.138.88 port 56622:11: Normal Shutdown, Thank you for playing [preauth] Jul 9 22:06:57 vm3 sshd[12831]: Disconnected from 194.87.138.88 port 56622 [preauth] Jul 9 22:07:06 vm3 sshd[12833]: Invalid user postgres from 194.87.138.88 port 60616 Jul 9 22:07:06 vm3 sshd[12833]: Received disconn........ ------------------------------- |
2020-07-10 04:42:43 |
| 167.172.156.227 | attackbots | SSH Brute Force |
2020-07-10 04:54:04 |
| 42.101.44.158 | attackbotsspam | "fail2ban match" |
2020-07-10 04:44:19 |