City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 39.139.81.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23045
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;39.139.81.42. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 21:53:03 CST 2025
;; MSG SIZE rcvd: 105
Host 42.81.139.39.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 42.81.139.39.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 111.229.216.155 | attackspam | sshd jail - ssh hack attempt |
2020-03-17 08:46:52 |
| 173.214.194.3 | attackbotsspam | (From expiry@harkinschiropracticcenter.com) ATTN: harkinschiropracticcenter.com / Chiropractor in Plymouth, MN 55447 :: Harkins Chiropractic Center, LLC :: Dr Michael Harkins SERVICE This notice EXPIRES ON: Mar 16, 2020. We tried to contact you but were unable to reach you. Please Visit: https://bit.ly/3aZR7iV ASAP. For information and to make a discretionary payment for harkinschiropracticcenter.com services. 03162020193806. |
2020-03-17 08:41:02 |
| 129.204.154.62 | attackbots | Mar 17 00:55:11 hell sshd[6192]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.154.62 Mar 17 00:55:14 hell sshd[6192]: Failed password for invalid user upload from 129.204.154.62 port 40692 ssh2 ... |
2020-03-17 08:21:30 |
| 185.142.236.35 | attackbots | 1584404480 - 03/17/2020 01:21:20 Host: 185.142.236.35/185.142.236.35 Port: 7 UDP Blocked ... |
2020-03-17 08:53:44 |
| 129.226.160.122 | attackbotsspam | Mar 17 01:17:36 hosting180 sshd[18998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.160.122 user=root Mar 17 01:17:38 hosting180 sshd[18998]: Failed password for root from 129.226.160.122 port 47230 ssh2 ... |
2020-03-17 08:58:20 |
| 41.79.197.150 | attackspambots | Automatic report - XMLRPC Attack |
2020-03-17 09:02:10 |
| 118.126.105.120 | attackspam | [MK-VM5] Blocked by UFW |
2020-03-17 08:30:18 |
| 201.149.20.162 | attackbotsspam | 2020-03-16T23:34:23.647465abusebot-3.cloudsearch.cf sshd[2279]: Invalid user gnats from 201.149.20.162 port 10160 2020-03-16T23:34:23.655376abusebot-3.cloudsearch.cf sshd[2279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.149.20.162 2020-03-16T23:34:23.647465abusebot-3.cloudsearch.cf sshd[2279]: Invalid user gnats from 201.149.20.162 port 10160 2020-03-16T23:34:25.315836abusebot-3.cloudsearch.cf sshd[2279]: Failed password for invalid user gnats from 201.149.20.162 port 10160 ssh2 2020-03-16T23:38:35.637519abusebot-3.cloudsearch.cf sshd[2494]: Invalid user chenlu from 201.149.20.162 port 21154 2020-03-16T23:38:35.645313abusebot-3.cloudsearch.cf sshd[2494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.149.20.162 2020-03-16T23:38:35.637519abusebot-3.cloudsearch.cf sshd[2494]: Invalid user chenlu from 201.149.20.162 port 21154 2020-03-16T23:38:37.900909abusebot-3.cloudsearch.cf sshd[2494]: Faile ... |
2020-03-17 08:27:07 |
| 163.172.189.32 | attack | Automatic report - XMLRPC Attack |
2020-03-17 08:27:50 |
| 185.143.221.46 | attackbotsspam | Port scan: Attack repeated for 24 hours |
2020-03-17 08:55:41 |
| 212.47.229.4 | attackbotsspam | xmlrpc attack |
2020-03-17 08:40:40 |
| 81.182.244.149 | attackspambots | Chat Spam |
2020-03-17 08:31:14 |
| 45.227.253.186 | attackspam | 1 attempts against mh-modsecurity-ban on comet |
2020-03-17 08:52:14 |
| 69.94.158.86 | attackspam | Mar 17 00:39:05 web01 postfix/smtpd[19162]: connect from obtain.swingthelamp.com[69.94.158.86] Mar 17 00:39:05 web01 policyd-spf[20223]: None; identhostnamey=helo; client-ip=69.94.158.86; helo=obtain.hamhonar.com; envelope-from=x@x Mar 17 00:39:05 web01 policyd-spf[20223]: Pass; identhostnamey=mailfrom; client-ip=69.94.158.86; helo=obtain.hamhonar.com; envelope-from=x@x Mar x@x Mar 17 00:39:06 web01 postfix/smtpd[19162]: disconnect from obtain.swingthelamp.com[69.94.158.86] Mar 17 00:40:17 web01 postfix/smtpd[20221]: connect from obtain.swingthelamp.com[69.94.158.86] Mar 17 00:40:18 web01 policyd-spf[20225]: None; identhostnamey=helo; client-ip=69.94.158.86; helo=obtain.hamhonar.com; envelope-from=x@x Mar 17 00:40:18 web01 policyd-spf[20225]: Pass; identhostnamey=mailfrom; client-ip=69.94.158.86; helo=obtain.hamhonar.com; envelope-from=x@x Mar x@x Mar 17 00:40:18 web01 postfix/smtpd[20221]: disconnect from obtain.swingthelamp.com[69.94.158.86] Mar 17 00:41:56 web01 post........ ------------------------------- |
2020-03-17 08:44:15 |
| 63.82.49.50 | attackspam | SpamScore above: 10.0 |
2020-03-17 09:00:48 |