City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 242.5.44.97
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28970
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;242.5.44.97. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020601 1800 900 604800 86400
;; Query time: 119 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 05:30:10 CST 2025
;; MSG SIZE rcvd: 104Host 97.44.5.242.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 97.44.5.242.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 37.49.230.192 | attackbots | Brute force attempt |
2019-07-03 05:21:16 |
| 45.40.199.88 | attackspam | 2019-07-02 06:44:58 server sshd[44628]: Failed password for invalid user platnosci from 45.40.199.88 port 48954 ssh2 |
2019-07-03 04:53:44 |
| 138.197.171.124 | attackspam | Jul 2 20:45:23 mail sshd\[21375\]: Invalid user tester from 138.197.171.124 Jul 2 20:45:23 mail sshd\[21375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.171.124 Jul 2 20:45:24 mail sshd\[21375\]: Failed password for invalid user tester from 138.197.171.124 port 41343 ssh2 ... |
2019-07-03 04:59:29 |
| 189.18.243.210 | attackbots | Jul 2 10:26:14 plusreed sshd[17075]: Invalid user paula from 189.18.243.210 ... |
2019-07-03 05:07:43 |
| 183.60.254.175 | attackspambots | Message meets Alert condition date=2019-07-01 time=03:35:52 devname=FG200E4Q16901016 devid=FG200E4Q16901016 logid=0101037124 type=event subtype=vpn level=error vd=root logdesc="IPsec phase 1 error" msg="IPsec phase 1 error" action=negotiate remip=183.60.254.175 locip=107.178.11.178 remport=500 locport=500 outintf="wan1" cookies="c612e168ba6fda64/0000000000000000" user="N/A" group="N/A" xauthuser="N/A" xauthgroup="N/A" assignip=N/A vpntunnel="N/A" status=negotiate_error reason="peer SA proposal not match local policy" peer_notif="NOT-APPLICABLE" |
2019-07-03 05:00:35 |
| 13.234.2.106 | attackbots | SSH Brute Force |
2019-07-03 05:03:21 |
| 177.53.237.108 | attackbots | $f2bV_matches |
2019-07-03 04:47:00 |
| 222.208.125.158 | attack | IMAP brute force ... |
2019-07-03 05:22:09 |
| 46.237.216.237 | attackspambots | Jul 2 22:42:27 tux-35-217 sshd\[28514\]: Invalid user git from 46.237.216.237 port 58685 Jul 2 22:42:27 tux-35-217 sshd\[28514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.237.216.237 Jul 2 22:42:29 tux-35-217 sshd\[28514\]: Failed password for invalid user git from 46.237.216.237 port 58685 ssh2 Jul 2 22:44:46 tux-35-217 sshd\[28518\]: Invalid user test from 46.237.216.237 port 43623 Jul 2 22:44:46 tux-35-217 sshd\[28518\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.237.216.237 ... |
2019-07-03 05:06:13 |
| 185.85.207.29 | attackspam | 185.85.207.29 - - [02/Jul/2019:15:39:54 +0200] "GET /wp-login.php HTTP/1.1" 200 4405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 185.85.207.29 - - [02/Jul/2019:15:39:55 +0200] "POST /wp-login.php HTTP/1.1" 200 4405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 185.85.207.29 - - [02/Jul/2019:15:39:55 +0200] "GET /wp-login.php HTTP/1.1" 200 4405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 185.85.207.29 - - [02/Jul/2019:15:39:56 +0200] "POST /wp-login.php HTTP/1.1" 200 4405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 185.85.207.29 - - [02/Jul/2019:15:39:56 +0200] "GET /wp-login.php HTTP/1.1" 200 4405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 185.85.207.29 - - [02/Jul/2019:15:39:56 +0200] "POST /wp-login.php HTTP/1.1" 200 4405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-07-03 05:17:21 |
| 176.222.157.14 | attackspam | 21/tcp 21/tcp 21/tcp [2019-07-02]3pkt |
2019-07-03 04:38:38 |
| 188.68.56.117 | attack | Jan 14 19:00:01 motanud sshd\[18688\]: Invalid user joshua from 188.68.56.117 port 58086 Jan 14 19:00:01 motanud sshd\[18688\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.68.56.117 Jan 14 19:00:03 motanud sshd\[18688\]: Failed password for invalid user joshua from 188.68.56.117 port 58086 ssh2 |
2019-07-03 04:45:12 |
| 106.225.219.156 | attackspambots | 445/tcp [2019-07-02]1pkt |
2019-07-03 05:00:07 |
| 106.12.87.178 | attackbots | detected by Fail2Ban |
2019-07-03 05:20:32 |
| 185.53.88.45 | attack | \[2019-07-02 17:05:34\] SECURITY\[13451\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-02T17:05:34.988-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441217900519",SessionID="0x7f02f861b598",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.45/58507",ACLName="no_extension_match" \[2019-07-02 17:08:03\] SECURITY\[13451\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-02T17:08:03.428-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441217900519",SessionID="0x7f02f861b598",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.45/60812",ACLName="no_extension_match" \[2019-07-02 17:10:28\] SECURITY\[13451\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-02T17:10:28.028-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441217900519",SessionID="0x7f02f861b598",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.45/63534",ACLName="no_e |
2019-07-03 05:24:08 |