City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 221.172.246.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14921
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;221.172.246.42. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021701 1800 900 604800 86400
;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 03:08:40 CST 2025
;; MSG SIZE rcvd: 107Host 42.246.172.221.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 42.246.172.221.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 206.189.16.203 | attackbots | 206.189.16.203 - - [24/Jul/2019:22:10:43 -0400] "GET /wp-login.php HTTP/1.1" 404 291 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 206.189.16.203 - - [24/Jul/2019:22:10:44 -0400] "POST /wp-login.php HTTP/1.1" 404 291 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 206.189.16.203 - - [24/Jul/2019:22:10:44 -0400] "GET /wp-login.php HTTP/1.1" 404 291 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 206.189.16.203 - - [24/Jul/2019:22:10:45 -0400] "POST /wp-login.php HTTP/1.1" 404 291 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 206.189.16.203 - - [24/Jul/2019:22:10:45 -0400] "GET /wp-login.php HTTP/1.1" 404 291 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-07-25 10:51:07 |
| 122.195.200.36 | attack | Jul 25 09:26:11 webhost01 sshd[26189]: Failed password for root from 122.195.200.36 port 13445 ssh2 ... |
2019-07-25 10:55:47 |
| 191.242.167.204 | attackbots | firewall-block, port(s): 8080/tcp |
2019-07-25 11:14:47 |
| 115.254.63.52 | attackbots | Invalid user applmgr from 115.254.63.52 port 36451 |
2019-07-25 10:47:59 |
| 187.20.21.122 | attackspam | Jul 25 05:04:18 meumeu sshd[20008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.20.21.122 Jul 25 05:04:20 meumeu sshd[20008]: Failed password for invalid user postgres from 187.20.21.122 port 46363 ssh2 Jul 25 05:11:04 meumeu sshd[18442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.20.21.122 ... |
2019-07-25 11:11:28 |
| 213.166.71.110 | attackspam | Port scan on 27 port(s): 44801 44809 45472 46379 47937 48537 48942 49018 49309 49599 50003 50260 50410 51128 51735 51962 52131 53027 53787 54430 56431 56450 56612 57220 59236 59709 59827 |
2019-07-25 10:22:32 |
| 37.187.79.55 | attackspambots | 2019-07-25T02:44:10.949644abusebot-6.cloudsearch.cf sshd\[12564\]: Invalid user ns from 37.187.79.55 port 38646 |
2019-07-25 11:07:30 |
| 203.195.202.153 | attackbots | php WP PHPmyadamin ABUSE blocked for 12h |
2019-07-25 10:11:07 |
| 80.82.65.74 | attack | Jul 25 02:42:10 mail kernel: [4520370.001262] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=80.82.65.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=33040 PROTO=TCP SPT=56927 DPT=24640 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 25 02:42:48 mail kernel: [4520408.679311] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=80.82.65.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=11568 PROTO=TCP SPT=56927 DPT=24108 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 25 02:43:46 mail kernel: [4520466.518614] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=80.82.65.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=60453 PROTO=TCP SPT=56927 DPT=24809 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 25 02:44:50 mail kernel: [4520530.677433] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=80.82.65.74 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=9711 PROTO=TCP SPT=56927 DPT=24491 WINDOW=1024 RES=0x00 SYN URGP= |
2019-07-25 11:13:35 |
| 86.125.227.188 | attackbots | Jul 25 04:46:56 mail sshd\[27639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.125.227.188 Jul 25 04:46:58 mail sshd\[27639\]: Failed password for invalid user flower from 86.125.227.188 port 55316 ssh2 Jul 25 04:51:34 mail sshd\[28283\]: Invalid user steam from 86.125.227.188 port 51522 Jul 25 04:51:34 mail sshd\[28283\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.125.227.188 Jul 25 04:51:36 mail sshd\[28283\]: Failed password for invalid user steam from 86.125.227.188 port 51522 ssh2 |
2019-07-25 11:10:15 |
| 46.148.20.25 | attackbots | SSH-BruteForce |
2019-07-25 10:10:07 |
| 2.139.209.78 | attackbots | 2019-07-25T02:43:06.427430abusebot-7.cloudsearch.cf sshd\[23094\]: Invalid user bishop from 2.139.209.78 port 41032 |
2019-07-25 10:51:53 |
| 80.82.64.116 | attackspambots | Port scan on 3 port(s): 7232 7576 7671 |
2019-07-25 10:30:10 |
| 218.92.0.173 | attackbotsspam | Jul 25 04:11:00 s64-1 sshd[28319]: Failed password for root from 218.92.0.173 port 53790 ssh2 Jul 25 04:11:12 s64-1 sshd[28319]: error: maximum authentication attempts exceeded for root from 218.92.0.173 port 53790 ssh2 [preauth] Jul 25 04:11:17 s64-1 sshd[28321]: Failed password for root from 218.92.0.173 port 64871 ssh2 ... |
2019-07-25 10:21:24 |
| 61.183.195.66 | attackbots | Jul 25 03:43:57 debian sshd\[797\]: Invalid user cacti from 61.183.195.66 port 18411 Jul 25 03:43:57 debian sshd\[797\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.183.195.66 ... |
2019-07-25 10:50:36 |