City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 242.97.193.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37263
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;242.97.193.6. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021401 1800 900 604800 86400
;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 12:30:29 CST 2025
;; MSG SIZE rcvd: 105Host 6.193.97.242.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 6.193.97.242.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 23.83.230.2 | attackspam | Automatic report - XMLRPC Attack |
2019-10-24 18:03:46 |
| 134.209.16.36 | attackspam | Oct 24 04:30:07 odroid64 sshd\[23463\]: User root from 134.209.16.36 not allowed because not listed in AllowUsers Oct 24 04:30:07 odroid64 sshd\[23463\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.16.36 user=root Oct 24 04:30:07 odroid64 sshd\[23463\]: User root from 134.209.16.36 not allowed because not listed in AllowUsers Oct 24 04:30:07 odroid64 sshd\[23463\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.16.36 user=root Oct 24 04:30:08 odroid64 sshd\[23463\]: Failed password for invalid user root from 134.209.16.36 port 43420 ssh2 ... |
2019-10-24 17:54:07 |
| 185.7.116.100 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/185.7.116.100/ KH - 1H : (2) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : KH NAME ASN : ASN5563 IP : 185.7.116.100 CIDR : 185.7.116.0/24 PREFIX COUNT : 34 UNIQUE IP COUNT : 67328 ATTACKS DETECTED ASN5563 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-24 05:47:40 INFO : Server 403 - Looking for resource vulnerabilities Detected and Blocked by ADMIN - data recovery |
2019-10-24 17:49:57 |
| 222.186.169.192 | attackspambots | 2019-10-24T11:49:15.397387lon01.zurich-datacenter.net sshd\[2542\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.192 user=root 2019-10-24T11:49:17.484410lon01.zurich-datacenter.net sshd\[2542\]: Failed password for root from 222.186.169.192 port 37902 ssh2 2019-10-24T11:49:20.654041lon01.zurich-datacenter.net sshd\[2542\]: Failed password for root from 222.186.169.192 port 37902 ssh2 2019-10-24T11:49:24.229750lon01.zurich-datacenter.net sshd\[2542\]: Failed password for root from 222.186.169.192 port 37902 ssh2 2019-10-24T11:49:27.684583lon01.zurich-datacenter.net sshd\[2542\]: Failed password for root from 222.186.169.192 port 37902 ssh2 ... |
2019-10-24 17:51:27 |
| 51.79.99.106 | attack | WordPress wp-login brute force :: 51.79.99.106 0.124 BYPASS [24/Oct/2019:19:58:13 1100] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-10-24 17:55:58 |
| 106.12.28.232 | attackspam | Oct 23 12:10:52 giraffe sshd[29436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.28.232 user=r.r Oct 23 12:10:54 giraffe sshd[29436]: Failed password for r.r from 106.12.28.232 port 37552 ssh2 Oct 23 12:10:54 giraffe sshd[29436]: Received disconnect from 106.12.28.232 port 37552:11: Bye Bye [preauth] Oct 23 12:10:54 giraffe sshd[29436]: Disconnected from 106.12.28.232 port 37552 [preauth] Oct 23 12:35:55 giraffe sshd[30228]: Invalid user razvan from 106.12.28.232 Oct 23 12:35:55 giraffe sshd[30228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.28.232 Oct 23 12:35:57 giraffe sshd[30228]: Failed password for invalid user razvan from 106.12.28.232 port 56082 ssh2 Oct 23 12:35:57 giraffe sshd[30228]: Received disconnect from 106.12.28.232 port 56082:11: Bye Bye [preauth] Oct 23 12:35:57 giraffe sshd[30228]: Disconnected from 106.12.28.232 port 56082 [preauth] Oct 23 12:40:1........ ------------------------------- |
2019-10-24 17:41:28 |
| 18.194.196.202 | attackbots | WordPress wp-login brute force :: 18.194.196.202 0.136 BYPASS [24/Oct/2019:18:37:35 1100] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3979 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36" |
2019-10-24 17:31:41 |
| 208.109.53.185 | attack | 208.109.53.185 - - \[24/Oct/2019:07:46:39 +0000\] "POST /wp-login.php HTTP/1.1" 200 4358 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 208.109.53.185 - - \[24/Oct/2019:07:46:40 +0000\] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2019-10-24 17:36:47 |
| 91.121.110.97 | attackspam | Oct 24 06:29:41 firewall sshd[31329]: Failed password for root from 91.121.110.97 port 57846 ssh2 Oct 24 06:33:03 firewall sshd[31432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.110.97 user=root Oct 24 06:33:05 firewall sshd[31432]: Failed password for root from 91.121.110.97 port 37746 ssh2 ... |
2019-10-24 18:06:21 |
| 92.222.79.138 | attackbotsspam | Oct 20 18:50:57 eola sshd[11306]: Invalid user lo from 92.222.79.138 port 54000 Oct 20 18:50:57 eola sshd[11306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.79.138 Oct 20 18:51:00 eola sshd[11306]: Failed password for invalid user lo from 92.222.79.138 port 54000 ssh2 Oct 20 18:51:00 eola sshd[11306]: Received disconnect from 92.222.79.138 port 54000:11: Bye Bye [preauth] Oct 20 18:51:00 eola sshd[11306]: Disconnected from 92.222.79.138 port 54000 [preauth] Oct 20 19:03:20 eola sshd[11480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.79.138 user=r.r Oct 20 19:03:22 eola sshd[11480]: Failed password for r.r from 92.222.79.138 port 56998 ssh2 Oct 20 19:03:22 eola sshd[11480]: Received disconnect from 92.222.79.138 port 56998:11: Bye Bye [preauth] Oct 20 19:03:22 eola sshd[11480]: Disconnected from 92.222.79.138 port 56998 [preauth] Oct 20 19:06:56 eola sshd[11541]: pam........ ------------------------------- |
2019-10-24 17:52:16 |
| 128.199.148.231 | attack | NOTENFALTER.DE 128.199.148.231 \[24/Oct/2019:07:06:52 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4335 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/60.0.3112.113 Safari/537.36" notenfalter.de 128.199.148.231 \[24/Oct/2019:07:06:52 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4335 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/60.0.3112.113 Safari/537.36" |
2019-10-24 17:31:27 |
| 67.229.204.43 | attackbotsspam | Automatic report - XMLRPC Attack |
2019-10-24 18:04:24 |
| 176.221.19.151 | attack | Oct 24 05:47:41 v22019058497090703 sshd[32690]: Failed password for r.r from 176.221.19.151 port 43466 ssh2 Oct 24 05:47:50 v22019058497090703 sshd[32690]: Failed password for r.r from 176.221.19.151 port 43466 ssh2 Oct 24 05:47:52 v22019058497090703 sshd[32690]: Failed password for r.r from 176.221.19.151 port 43466 ssh2 Oct 24 05:47:52 v22019058497090703 sshd[32690]: error: maximum authentication attempts exceeded for r.r from 176.221.19.151 port 43466 ssh2 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=176.221.19.151 |
2019-10-24 17:42:50 |
| 221.0.232.118 | attack | Oct 24 07:50:55 heicom postfix/smtpd\[13311\]: warning: unknown\[221.0.232.118\]: SASL LOGIN authentication failed: authentication failure Oct 24 07:50:58 heicom postfix/smtpd\[13311\]: warning: unknown\[221.0.232.118\]: SASL LOGIN authentication failed: authentication failure Oct 24 07:51:01 heicom postfix/smtpd\[13311\]: warning: unknown\[221.0.232.118\]: SASL LOGIN authentication failed: authentication failure Oct 24 07:51:06 heicom postfix/smtpd\[13311\]: warning: unknown\[221.0.232.118\]: SASL LOGIN authentication failed: authentication failure Oct 24 07:51:12 heicom postfix/smtpd\[13311\]: warning: unknown\[221.0.232.118\]: SASL LOGIN authentication failed: authentication failure ... |
2019-10-24 17:59:17 |
| 185.238.248.34 | attackbotsspam | Failed password for invalid user deploy321 from 185.238.248.34 port 40660 ssh2 Invalid user 12346 from 185.238.248.34 port 52642 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.238.248.34 Failed password for invalid user 12346 from 185.238.248.34 port 52642 ssh2 Invalid user 123qwe31 from 185.238.248.34 port 36390 |
2019-10-24 18:05:47 |