City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 245.63.41.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61859
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;245.63.41.242. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020301 1800 900 604800 86400
;; Query time: 45 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 04:35:49 CST 2025
;; MSG SIZE rcvd: 106Host 242.41.63.245.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 242.41.63.245.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 58.250.192.32 | attackbotsspam | Jul 29 13:06:34 XXX sshd[2461]: User r.r from 58.250.192.32 not allowed because none of user's groups are listed in AllowGroups Jul 29 13:06:34 XXX sshd[2461]: Received disconnect from 58.250.192.32: 11: Bye Bye [preauth] Jul 29 13:06:35 XXX sshd[2462]: User r.r from 58.250.192.32 not allowed because none of user's groups are listed in AllowGroups Jul 29 13:06:35 XXX sshd[2462]: Received disconnect from 58.250.192.32: 11: Bye Bye [preauth] Jul 29 13:06:37 XXX sshd[2465]: Invalid user teonsean from 58.250.192.32 Jul 29 13:06:38 XXX sshd[2465]: Received disconnect from 58.250.192.32: 11: Bye Bye [preauth] Jul 29 13:06:38 XXX sshd[2467]: Invalid user teonsean from 58.250.192.32 Jul 29 13:06:38 XXX sshd[2467]: Received disconnect from 58.250.192.32: 11: Bye Bye [preauth] Jul 29 13:06:41 XXX sshd[2483]: Invalid user moodog from 58.250.192.32 Jul 29 13:06:41 XXX sshd[2483]: Received disconnect from 58.250.192.32: 11: Bye Bye [preauth] Jul 29 13:06:41 XXX sshd[2485]: Invalid u........ ------------------------------- |
2019-08-01 05:37:38 |
| 78.233.169.91 | attackspambots | 78.233.169.91 - - [31/Jul/2019:14:46:20 -0400] "GET /?page=/etc/passwd&action=view&manufacturerID=6&productID=8208-DB&linkID=13302 HTTP/1.1" 200 16390 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0" ... |
2019-08-01 05:54:32 |
| 185.175.93.105 | attackspam | 31.07.2019 21:20:08 Connection to port 40800 blocked by firewall |
2019-08-01 05:44:21 |
| 54.38.182.156 | attackbots | Jul 31 17:37:18 TORMINT sshd\[27140\]: Invalid user lear from 54.38.182.156 Jul 31 17:37:18 TORMINT sshd\[27140\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.182.156 Jul 31 17:37:20 TORMINT sshd\[27140\]: Failed password for invalid user lear from 54.38.182.156 port 35916 ssh2 ... |
2019-08-01 05:50:11 |
| 104.18.116.17 | attack | 14red.com casino spam - casino with very bad reputation Received: from HE1EUR01HT170.eop-EUR01.prod.protection.outlook.com (2603:10a6:802:1::35) by VI1PR0501MB2301.eurprd05.prod.outlook.com with HTTPS via VI1PR0902CA0046.EURPRD09.PROD.OUTLOOK.COM; Wed, 31 Jul 2019 16:52:30 +0000 Received: from HE1EUR01FT007.eop-EUR01.prod.protection.outlook.com (10.152.0.51) by HE1EUR01HT170.eop-EUR01.prod.protection.outlook.com (10.152.1.164) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2136.14; Wed, 31 Jul 2019 16:52:30 +0000 Authentication-Results: spf=none (sender IP is 169.159.171.139) smtp.mailfrom=luxido.cz; hotmail.co.uk; dkim=none (message not signed) header.d=none;hotmail.co.uk; dmarc=none action=none header.from=luxido.cz; Received-SPF: None (protection.outlook.com: luxido.cz does not designate permitted sender hosts) Received: from static-public-169.159.171.igen.co.za (169.159.171.139) |
2019-08-01 05:33:34 |
| 190.128.159.118 | attack | Jul 10 16:41:30 dallas01 sshd[8733]: Failed password for invalid user paola from 190.128.159.118 port 37256 ssh2 Jul 10 16:43:31 dallas01 sshd[9003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.159.118 Jul 10 16:43:33 dallas01 sshd[9003]: Failed password for invalid user test from 190.128.159.118 port 53714 ssh2 |
2019-08-01 05:25:26 |
| 47.91.40.136 | attackbots | $f2bV_matches |
2019-08-01 05:56:32 |
| 186.21.102.173 | attackspam | ¯\_(ツ)_/¯ |
2019-08-01 05:18:46 |
| 101.231.201.50 | attackbotsspam | Jul 31 20:47:19 ubuntu-2gb-nbg1-dc3-1 sshd[13825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.231.201.50 Jul 31 20:47:21 ubuntu-2gb-nbg1-dc3-1 sshd[13825]: Failed password for invalid user helpdesk from 101.231.201.50 port 11758 ssh2 ... |
2019-08-01 05:17:02 |
| 181.48.14.50 | attack | Jul 31 17:18:13 xtremcommunity sshd\[11612\]: Invalid user system from 181.48.14.50 port 56688 Jul 31 17:18:13 xtremcommunity sshd\[11612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.14.50 Jul 31 17:18:15 xtremcommunity sshd\[11612\]: Failed password for invalid user system from 181.48.14.50 port 56688 ssh2 Jul 31 17:25:55 xtremcommunity sshd\[27105\]: Invalid user renata from 181.48.14.50 port 53296 Jul 31 17:25:55 xtremcommunity sshd\[27105\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.14.50 ... |
2019-08-01 05:41:14 |
| 190.116.49.2 | attackbotsspam | Jun 26 23:32:21 dallas01 sshd[28176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.116.49.2 Jun 26 23:32:23 dallas01 sshd[28176]: Failed password for invalid user cvsroot from 190.116.49.2 port 36060 ssh2 Jun 26 23:34:03 dallas01 sshd[28358]: Failed password for uucp from 190.116.49.2 port 51502 ssh2 |
2019-08-01 05:48:14 |
| 58.210.238.114 | attackbotsspam | Jul 29 00:04:12 xb3 sshd[24211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.210.238.114 user=r.r Jul 29 00:04:14 xb3 sshd[24211]: Failed password for r.r from 58.210.238.114 port 36960 ssh2 Jul 29 00:04:14 xb3 sshd[24211]: Received disconnect from 58.210.238.114: 11: Bye Bye [preauth] Jul 29 00:17:10 xb3 sshd[24493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.210.238.114 user=r.r Jul 29 00:17:13 xb3 sshd[24493]: Failed password for r.r from 58.210.238.114 port 47674 ssh2 Jul 29 00:17:13 xb3 sshd[24493]: Received disconnect from 58.210.238.114: 11: Bye Bye [preauth] Jul 29 00:19:26 xb3 sshd[29120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.210.238.114 user=r.r Jul 29 00:19:28 xb3 sshd[29120]: Failed password for r.r from 58.210.238.114 port 39940 ssh2 Jul 29 00:19:28 xb3 sshd[29120]: Received disconnect from 58.210.238.114: 1........ ------------------------------- |
2019-08-01 05:57:34 |
| 216.245.192.242 | attackbotsspam | k+ssh-bruteforce |
2019-08-01 05:56:54 |
| 1.217.98.44 | attackbots | Jul 31 21:42:16 ks10 sshd[10025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.217.98.44 Jul 31 21:42:19 ks10 sshd[10025]: Failed password for invalid user pava from 1.217.98.44 port 33410 ssh2 ... |
2019-08-01 05:27:50 |
| 189.91.5.228 | attackbots | SMTP-sasl brute force ... |
2019-08-01 05:46:09 |