City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 242.60.154.70
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11757
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;242.60.154.70. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013001 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 13:03:37 CST 2025
;; MSG SIZE rcvd: 106
Host 70.154.60.242.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 70.154.60.242.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.95.168.210 | attackspam | 2020-05-21T22:04:30.750412vivaldi2.tree2.info sshd[18552]: Invalid user lakshmis from 45.95.168.210 2020-05-21T22:04:30.764601vivaldi2.tree2.info sshd[18552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.210 2020-05-21T22:04:30.750412vivaldi2.tree2.info sshd[18552]: Invalid user lakshmis from 45.95.168.210 2020-05-21T22:04:32.307514vivaldi2.tree2.info sshd[18552]: Failed password for invalid user lakshmis from 45.95.168.210 port 57936 ssh2 2020-05-21T22:06:51.917915vivaldi2.tree2.info sshd[18673]: Invalid user xwz from 45.95.168.210 ... |
2020-05-21 21:09:43 |
| 88.255.176.50 | attack | 20/5/21@08:03:45: FAIL: Alarm-Network address from=88.255.176.50 20/5/21@08:03:45: FAIL: Alarm-Network address from=88.255.176.50 ... |
2020-05-21 20:51:44 |
| 49.49.244.132 | attackspam | Lines containing failures of 49.49.244.132 May 21 13:56:31 MAKserver05 sshd[9300]: Did not receive identification string from 49.49.244.132 port 62422 May 21 13:56:36 MAKserver05 sshd[9303]: Invalid user tech from 49.49.244.132 port 43174 May 21 13:56:37 MAKserver05 sshd[9303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.49.244.132 May 21 13:56:39 MAKserver05 sshd[9303]: Failed password for invalid user tech from 49.49.244.132 port 43174 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.49.244.132 |
2020-05-21 21:09:27 |
| 185.16.92.168 | attackspam | May 21 13:03:48 pi sshd[31937]: Failed password for pi from 185.16.92.168 port 42660 ssh2 May 21 13:03:48 pi sshd[31938]: Failed password for pi from 185.16.92.168 port 42662 ssh2 |
2020-05-21 20:46:41 |
| 132.232.66.227 | attackbotsspam | May 21 14:37:27 abendstille sshd\[16728\]: Invalid user vck from 132.232.66.227 May 21 14:37:27 abendstille sshd\[16728\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.66.227 May 21 14:37:29 abendstille sshd\[16728\]: Failed password for invalid user vck from 132.232.66.227 port 34504 ssh2 May 21 14:42:15 abendstille sshd\[21652\]: Invalid user vzu from 132.232.66.227 May 21 14:42:15 abendstille sshd\[21652\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.66.227 ... |
2020-05-21 21:00:46 |
| 118.180.50.200 | attack | May 21 14:03:33 debian-2gb-nbg1-2 kernel: \[12321434.871687\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=118.180.50.200 DST=195.201.40.59 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=7889 DF PROTO=TCP SPT=59212 DPT=60010 WINDOW=14600 RES=0x00 SYN URGP=0 |
2020-05-21 21:01:06 |
| 192.42.116.24 | attackspam | $f2bV_matches |
2020-05-21 20:52:03 |
| 118.25.18.30 | attack | May 21 08:50:48 ny01 sshd[2269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.18.30 May 21 08:50:49 ny01 sshd[2269]: Failed password for invalid user qdd from 118.25.18.30 port 37330 ssh2 May 21 08:51:54 ny01 sshd[2425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.18.30 |
2020-05-21 21:12:14 |
| 120.53.10.191 | attack | ... |
2020-05-21 21:12:57 |
| 103.14.44.210 | attackspam | [Thu May 21 04:06:29 2020] - Syn Flood From IP: 103.14.44.210 Port: 60047 |
2020-05-21 21:05:12 |
| 198.199.69.72 | attackspam | 198.199.69.72 - - \[21/May/2020:14:03:47 +0200\] "POST /wp-login.php HTTP/1.1" 200 9952 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 198.199.69.72 - - \[21/May/2020:14:03:48 +0200\] "POST /wp-login.php HTTP/1.1" 200 9852 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2020-05-21 20:46:22 |
| 139.59.60.220 | attackbots | May 21 14:46:12 legacy sshd[2102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.60.220 May 21 14:46:14 legacy sshd[2102]: Failed password for invalid user txl from 139.59.60.220 port 41312 ssh2 May 21 14:49:28 legacy sshd[2236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.60.220 ... |
2020-05-21 20:56:02 |
| 122.228.208.113 | attackspam | May 21 11:58:33 artelis kernel: [513656.322095] [UFW BLOCK] IN=eth0 OUT= MAC=c2:45:3b:cb:6e:17:ec:38:73:0c:18:30:08:00 SRC=122.228.208.113 DST=167.99.196.43 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=7176 PROTO=TCP SPT=42250 DPT=9050 WINDOW=1024 RES=0x00 SYN URGP=0 May 21 11:59:18 artelis kernel: [513701.608483] [UFW BLOCK] IN=eth0 OUT= MAC=c2:45:3b:cb:6e:17:ec:38:73:0c:18:30:08:00 SRC=122.228.208.113 DST=167.99.196.43 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=37769 PROTO=TCP SPT=42250 DPT=1080 WINDOW=1024 RES=0x00 SYN URGP=0 May 21 11:59:21 artelis kernel: [513703.959127] [UFW BLOCK] IN=eth0 OUT= MAC=c2:45:3b:cb:6e:17:ec:38:73:0c:18:30:08:00 SRC=122.228.208.113 DST=167.99.196.43 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=62796 PROTO=TCP SPT=42250 DPT=8888 WINDOW=1024 RES=0x00 SYN URGP=0 May 21 11:59:30 artelis kernel: [513713.519868] [UFW BLOCK] IN=eth0 OUT= MAC=c2:45:3b:cb:6e:17:ec:38:73:0c:18:30:08:00 SRC=122.228.208.113 DST=167.99.196.43 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=1008 PROTO=TCP SPT=42 ... |
2020-05-21 20:57:26 |
| 85.132.97.233 | attackbotsspam | SSH bruteforce more then 50 syn to 22 port per 10 seconds. |
2020-05-21 20:49:27 |
| 103.144.148.172 | attackspambots | detected by Fail2Ban |
2020-05-21 21:23:36 |