City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 242.9.104.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50147
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;242.9.104.55. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024122500 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 25 12:41:19 CST 2024
;; MSG SIZE rcvd: 105Host 55.104.9.242.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 55.104.9.242.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 132.148.151.162 | attackbots | Automatic report - XMLRPC Attack |
2019-10-28 06:51:37 |
| 148.72.232.56 | attackbots | xmlrpc attack |
2019-10-28 06:19:01 |
| 212.129.53.177 | attack | Oct 27 23:03:13 localhost sshd\[28658\]: Invalid user katya from 212.129.53.177 port 53888 Oct 27 23:03:13 localhost sshd\[28658\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.53.177 Oct 27 23:03:16 localhost sshd\[28658\]: Failed password for invalid user katya from 212.129.53.177 port 53888 ssh2 |
2019-10-28 06:18:06 |
| 212.64.28.77 | attackspambots | 2019-10-27T16:18:58.384263ns525875 sshd\[19602\]: Invalid user hazen from 212.64.28.77 port 57710 2019-10-27T16:18:58.392667ns525875 sshd\[19602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.28.77 2019-10-27T16:19:00.738588ns525875 sshd\[19602\]: Failed password for invalid user hazen from 212.64.28.77 port 57710 ssh2 2019-10-27T16:26:50.500876ns525875 sshd\[30119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.28.77 user=root ... |
2019-10-28 06:46:14 |
| 180.119.109.62 | attack | Oct 27 08:53:55 noisternig postfix/smtpd[23350]: connect from unknown[180.119.109.62] Oct 27 08:53:56 noisternig postfix/smtpd[23366]: connect from unknown[180.119.109.62] Oct x@x Oct 27 08:53:57 noisternig postfix/smtpd[23350]: lost connection after RCPT from unknown[180.119.109.62] Oct 27 08:53:57 noisternig postfix/smtpd[23350]: disconnect from unknown[180.119.109.62] Oct x@x Oct 27 08:53:58 noisternig postfix/smtpd[23366]: lost connection after RCPT from unknown[180.119.109.62] Oct 27 08:53:58 noisternig postfix/smtpd[23366]: disconnect from unknown[180.119.109.62] Oct 27 09:14:57 noisternig postfix/smtpd[24249]: connect from unknown[180.119.109.62] Oct 27 09:14:57 noisternig postfix/smtpd[24112]: connect from unknown[180.119.109.62] Oct x@x Oct x@x Oct 27 09:14:58 noisternig postfix/smtpd[24112]: lost connection after RCPT from unknown[180.119.109.62] Oct 27 09:14:58 noisternig postfix/smtpd[24112]: disconnect from unknown[180.119.109.62] Oct 27 09:14:58 noisternig ........ ------------------------------ |
2019-10-28 06:53:53 |
| 45.82.153.76 | attack | 2019-10-27 23:24:22 dovecot_login authenticator failed for \(\[45.82.153.76\]\) \[45.82.153.76\]: 535 Incorrect authentication data \(set_id=remo.martinoli@opso.it\) 2019-10-27 23:24:31 dovecot_login authenticator failed for \(\[45.82.153.76\]\) \[45.82.153.76\]: 535 Incorrect authentication data \(set_id=remo.martinoli\) 2019-10-27 23:29:13 dovecot_login authenticator failed for \(\[45.82.153.76\]\) \[45.82.153.76\]: 535 Incorrect authentication data \(set_id=support@nopcommerce.it\) 2019-10-27 23:29:21 dovecot_login authenticator failed for \(\[45.82.153.76\]\) \[45.82.153.76\]: 535 Incorrect authentication data \(set_id=support\) 2019-10-27 23:29:29 dovecot_login authenticator failed for \(\[45.82.153.76\]\) \[45.82.153.76\]: 535 Incorrect authentication data |
2019-10-28 06:30:05 |
| 123.14.5.115 | attackbotsspam | Oct 27 11:30:39 php1 sshd\[7288\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.14.5.115 user=root Oct 27 11:30:41 php1 sshd\[7288\]: Failed password for root from 123.14.5.115 port 44642 ssh2 Oct 27 11:37:20 php1 sshd\[7785\]: Invalid user root1 from 123.14.5.115 Oct 27 11:37:20 php1 sshd\[7785\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.14.5.115 Oct 27 11:37:23 php1 sshd\[7785\]: Failed password for invalid user root1 from 123.14.5.115 port 59188 ssh2 |
2019-10-28 06:34:06 |
| 94.237.73.157 | attack | Lines containing failures of 94.237.73.157 Oct 27 02:05:29 mx-in-02 sshd[10887]: Invalid user admin from 94.237.73.157 port 54782 Oct 27 02:05:29 mx-in-02 sshd[10887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.237.73.157 Oct 27 02:05:31 mx-in-02 sshd[10887]: Failed password for invalid user admin from 94.237.73.157 port 54782 ssh2 Oct 27 02:05:31 mx-in-02 sshd[10887]: Received disconnect from 94.237.73.157 port 54782:11: Bye Bye [preauth] Oct 27 02:05:31 mx-in-02 sshd[10887]: Disconnected from invalid user admin 94.237.73.157 port 54782 [preauth] Oct 27 02:10:47 mx-in-02 sshd[11239]: Invalid user dcc from 94.237.73.157 port 43120 Oct 27 02:10:47 mx-in-02 sshd[11239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.237.73.157 Oct 27 02:10:49 mx-in-02 sshd[11239]: Failed password for invalid user dcc from 94.237.73.157 port 43120 ssh2 Oct 27 02:10:49 mx-in-02 sshd[11239]: Received........ ------------------------------ |
2019-10-28 06:24:15 |
| 189.243.191.251 | attack | " " |
2019-10-28 06:38:07 |
| 118.24.197.243 | attack | Oct 27 12:41:58 kapalua sshd\[21196\]: Invalid user admin from 118.24.197.243 Oct 27 12:41:58 kapalua sshd\[21196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.197.243 Oct 27 12:41:59 kapalua sshd\[21196\]: Failed password for invalid user admin from 118.24.197.243 port 51064 ssh2 Oct 27 12:46:34 kapalua sshd\[21602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.197.243 user=root Oct 27 12:46:36 kapalua sshd\[21602\]: Failed password for root from 118.24.197.243 port 60342 ssh2 |
2019-10-28 06:46:39 |
| 157.230.113.218 | attackbots | $f2bV_matches |
2019-10-28 06:36:12 |
| 50.62.176.116 | attackspam | abcdata-sys.de:80 50.62.176.116 - - \[27/Oct/2019:21:27:36 +0100\] "POST /xmlrpc.php HTTP/1.1" 301 441 "-" "WordPress/5.2.2\; https://thinktobehappy.com" www.goldgier.de 50.62.176.116 \[27/Oct/2019:21:27:36 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4484 "-" "WordPress/5.2.2\; https://thinktobehappy.com" |
2019-10-28 06:19:21 |
| 60.21.243.154 | attack | Unauthorised access (Oct 27) SRC=60.21.243.154 LEN=40 TTL=49 ID=50974 TCP DPT=8080 WINDOW=7407 SYN |
2019-10-28 06:44:10 |
| 185.160.60.146 | attackbotsspam | Unauthorised access (Oct 27) SRC=185.160.60.146 LEN=52 TTL=119 ID=18193 DF TCP DPT=445 WINDOW=8192 SYN |
2019-10-28 06:35:32 |
| 92.118.37.97 | attack | 20191027 1451 UTC - Security Warning Intrusion - Port: 37566 |
2019-10-28 06:22:24 |