City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 240.142.13.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4836
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;240.142.13.252. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 17:23:48 CST 2025
;; MSG SIZE rcvd: 107Host 252.13.142.240.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 252.13.142.240.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 121.90.113.239 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/121.90.113.239/ NZ - 1H : (4) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : NZ NAME ASN : ASN17808 IP : 121.90.113.239 CIDR : 121.90.0.0/17 PREFIX COUNT : 3 UNIQUE IP COUNT : 65536 ATTACKS DETECTED ASN17808 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 2 DateTime : 2019-11-10 07:25:40 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-10 19:31:15 |
| 218.92.0.202 | attackbots | Nov 10 11:58:02 MK-Soft-Root1 sshd[23984]: Failed password for root from 218.92.0.202 port 19988 ssh2 Nov 10 11:58:05 MK-Soft-Root1 sshd[23984]: Failed password for root from 218.92.0.202 port 19988 ssh2 ... |
2019-11-10 19:14:54 |
| 193.169.39.254 | attackbots | Nov 10 01:25:46 hanapaa sshd\[8246\]: Invalid user right from 193.169.39.254 Nov 10 01:25:46 hanapaa sshd\[8246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=netup.yugt.ru Nov 10 01:25:47 hanapaa sshd\[8246\]: Failed password for invalid user right from 193.169.39.254 port 34534 ssh2 Nov 10 01:29:44 hanapaa sshd\[8530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=netup.yugt.ru user=root Nov 10 01:29:47 hanapaa sshd\[8530\]: Failed password for root from 193.169.39.254 port 42390 ssh2 |
2019-11-10 19:39:44 |
| 45.141.84.25 | attack | no |
2019-11-10 19:21:14 |
| 82.243.236.16 | attackspambots | Nov 10 10:32:14 **** sshd[31336]: User root from 82.243.236.16 not allowed because not listed in AllowUsers |
2019-11-10 19:36:40 |
| 124.235.206.130 | attack | Nov 10 10:17:49 eventyay sshd[14177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.235.206.130 Nov 10 10:17:51 eventyay sshd[14177]: Failed password for invalid user administrator from 124.235.206.130 port 43561 ssh2 Nov 10 10:23:20 eventyay sshd[14237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.235.206.130 ... |
2019-11-10 19:17:28 |
| 103.89.247.198 | attackbotsspam | Nov 10 07:05:35 mxgate1 postfix/postscreen[30118]: CONNECT from [103.89.247.198]:63661 to [176.31.12.44]:25 Nov 10 07:05:35 mxgate1 postfix/dnsblog[30119]: addr 103.89.247.198 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 10 07:05:35 mxgate1 postfix/dnsblog[30119]: addr 103.89.247.198 listed by domain zen.spamhaus.org as 127.0.0.3 Nov 10 07:05:35 mxgate1 postfix/dnsblog[30120]: addr 103.89.247.198 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 10 07:05:35 mxgate1 postfix/dnsblog[30123]: addr 103.89.247.198 listed by domain bl.spamcop.net as 127.0.0.2 Nov 10 07:05:35 mxgate1 postfix/dnsblog[30122]: addr 103.89.247.198 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 10 07:05:35 mxgate1 postfix/postscreen[30118]: PREGREET 23 after 0.22 from [103.89.247.198]:63661: EHLO [103.89.247.198] Nov 10 07:05:35 mxgate1 postfix/postscreen[30118]: DNSBL rank 5 for [103.89.247.198]:63661 Nov x@x Nov 10 07:05:36 mxgate1 postfix/postscreen[30118]: HANGUP after 1 from [1........ ------------------------------- |
2019-11-10 19:38:37 |
| 186.31.37.203 | attackbots | 2019-11-10T09:05:57.116401abusebot-8.cloudsearch.cf sshd\[17816\]: Invalid user Galaxy123 from 186.31.37.203 port 49008 2019-11-10T09:05:57.120609abusebot-8.cloudsearch.cf sshd\[17816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.31.37.203 |
2019-11-10 19:27:01 |
| 222.186.173.215 | attackspambots | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.215 user=root Failed password for root from 222.186.173.215 port 14902 ssh2 Failed password for root from 222.186.173.215 port 14902 ssh2 Failed password for root from 222.186.173.215 port 14902 ssh2 Failed password for root from 222.186.173.215 port 14902 ssh2 |
2019-11-10 19:46:49 |
| 96.44.187.10 | attackbotsspam | (imapd) Failed IMAP login from 96.44.187.10 (US/United States/96.44.187.10.static.quadranet.com): 1 in the last 3600 secs |
2019-11-10 19:20:50 |
| 201.23.95.74 | attackspam | Nov 10 10:21:08 server sshd\[7103\]: Invalid user user from 201.23.95.74 Nov 10 10:21:08 server sshd\[7103\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.23.95.74.dedicated.neoviatelecom.com.br Nov 10 10:21:10 server sshd\[7103\]: Failed password for invalid user user from 201.23.95.74 port 50648 ssh2 Nov 10 10:28:04 server sshd\[8821\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.23.95.74.dedicated.neoviatelecom.com.br user=root Nov 10 10:28:05 server sshd\[8821\]: Failed password for root from 201.23.95.74 port 44800 ssh2 ... |
2019-11-10 19:12:03 |
| 177.69.213.196 | attackspambots | Nov 10 04:13:13 vayu sshd[303976]: reveeclipse mapping checking getaddrinfo for 177-069-213-196.static.ctbctelecom.com.br [177.69.213.196] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 10 04:13:13 vayu sshd[303976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.69.213.196 user=r.r Nov 10 04:13:15 vayu sshd[303976]: Failed password for r.r from 177.69.213.196 port 24835 ssh2 Nov 10 04:13:15 vayu sshd[303976]: Received disconnect from 177.69.213.196: 11: Bye Bye [preauth] Nov 10 04:31:21 vayu sshd[322108]: reveeclipse mapping checking getaddrinfo for 177-069-213-196.static.ctbctelecom.com.br [177.69.213.196] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 10 04:31:21 vayu sshd[322108]: Invalid user pm from 177.69.213.196 Nov 10 04:31:21 vayu sshd[322108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.69.213.196 Nov 10 04:31:23 vayu sshd[322108]: Failed password for invalid user pm from 177.69......... ------------------------------- |
2019-11-10 19:18:48 |
| 198.108.66.112 | attackbotsspam | Connection by 198.108.66.112 on port: 8888 got caught by honeypot at 11/10/2019 5:25:52 AM |
2019-11-10 19:25:50 |
| 185.68.101.171 | attack | Nov 10 06:53:26 zulu1842 sshd[30176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.68.101.171 user=r.r Nov 10 06:53:28 zulu1842 sshd[30176]: Failed password for r.r from 185.68.101.171 port 44862 ssh2 Nov 10 06:53:29 zulu1842 sshd[30176]: Received disconnect from 185.68.101.171: 11: Bye Bye [preauth] Nov 10 07:15:21 zulu1842 sshd[31750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.68.101.171 user=r.r Nov 10 07:15:22 zulu1842 sshd[31750]: Failed password for r.r from 185.68.101.171 port 34674 ssh2 Nov 10 07:15:22 zulu1842 sshd[31750]: Received disconnect from 185.68.101.171: 11: Bye Bye [preauth] Nov 10 07:19:18 zulu1842 sshd[31967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.68.101.171 user=r.r Nov 10 07:19:21 zulu1842 sshd[31967]: Failed password for r.r from 185.68.101.171 port 46362 ssh2 Nov 10 07:19:21 zulu1842 sshd[31967........ ------------------------------- |
2019-11-10 19:35:20 |
| 186.200.35.43 | attack | Nov 10 10:32:20 site3 sshd\[98802\]: Invalid user intranet from 186.200.35.43 Nov 10 10:32:20 site3 sshd\[98802\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.200.35.43 Nov 10 10:32:22 site3 sshd\[98802\]: Failed password for invalid user intranet from 186.200.35.43 port 57828 ssh2 Nov 10 10:37:06 site3 sshd\[98858\]: Invalid user wachtwoord from 186.200.35.43 Nov 10 10:37:06 site3 sshd\[98858\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.200.35.43 ... |
2019-11-10 19:26:43 |