City: unknown
Region: unknown
Country: Korea (the Republic of)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 39.7.42.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33798
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;39.7.42.128. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020300 1800 900 604800 86400
;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 03 20:21:08 CST 2025
;; MSG SIZE rcvd: 104Host 128.42.7.39.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 128.42.7.39.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.147.198.154 | attack | Aug 1 01:31:19 abendstille sshd\[22509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.147.198.154 user=root Aug 1 01:31:22 abendstille sshd\[22509\]: Failed password for root from 202.147.198.154 port 37251 ssh2 Aug 1 01:35:47 abendstille sshd\[27166\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.147.198.154 user=root Aug 1 01:35:49 abendstille sshd\[27166\]: Failed password for root from 202.147.198.154 port 42455 ssh2 Aug 1 01:40:19 abendstille sshd\[31835\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.147.198.154 user=root ... |
2020-08-01 07:50:15 |
| 113.125.98.206 | attackspam | $f2bV_matches |
2020-08-01 08:15:26 |
| 78.46.210.25 | attackbotsspam | Jul 31 22:22:49 node1 sshd[3228]: Received disconnect from 78.46.210.25: 11: Normal Shutdown, Thank you for playing [preauth] Jul 31 22:23:07 node1 sshd[3286]: Received disconnect from 78.46.210.25: 11: Normal Shutdown, Thank you for playing [preauth] Jul 31 22:23:24 node1 sshd[3295]: Received disconnect from 78.46.210.25: 11: Normal Shutdown, Thank you for playing [preauth] Jul 31 22:23:40 node1 sshd[3305]: Received disconnect from 78.46.210.25: 11: Normal Shutdown, Thank you for playing [preauth] Jul 31 22:23:57 node1 sshd[3363]: Received disconnect from 78.46.210.25: 11: Normal Shutdown, Thank you for playing [preauth] Jul 31 22:24:12 node1 sshd[3416]: Received disconnect from 78.46.210.25: 11: Normal Shutdown, Thank you for playing [preauth] Jul 31 22:24:28 node1 sshd[3423]: Received disconnect from 78.46.210.25: 11: Normal Shutdown, Thank you for playing [preauth] Jul 31 22:24:43 node1 sshd[3432]: Received disconnect from 78.46.210.25: 11: Normal Shutdown, Thank yo........ ------------------------------- |
2020-08-01 08:14:01 |
| 106.54.255.11 | attack | " " |
2020-08-01 08:08:50 |
| 60.98.242.158 | attack | jannisjulius.de 60.98.242.158 [31/Jul/2020:22:30:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4269 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" jannisjulius.de 60.98.242.158 [31/Jul/2020:22:30:21 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4269 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" |
2020-08-01 07:47:48 |
| 122.168.190.192 | attack | firewall-block, port(s): 445/tcp |
2020-08-01 07:58:39 |
| 78.85.216.163 | attackspam | Brute forcing RDP port 3389 |
2020-08-01 08:17:12 |
| 202.168.64.99 | attack | Invalid user backups from 202.168.64.99 port 54492 |
2020-08-01 08:12:45 |
| 141.98.9.137 | attackbots | 2020-08-01T02:13:52.531028centos sshd[31220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.137 2020-08-01T02:13:52.525026centos sshd[31220]: Invalid user support from 141.98.9.137 port 51956 2020-08-01T02:13:54.231995centos sshd[31220]: Failed password for invalid user support from 141.98.9.137 port 51956 ssh2 ... |
2020-08-01 08:15:43 |
| 218.93.21.118 | attackspambots | Attempted Brute Force (dovecot) |
2020-08-01 08:00:03 |
| 72.42.170.60 | attackspam | 2020-08-01T01:03:13.688064ks3355764 sshd[28178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.42.170.60 user=root 2020-08-01T01:03:15.779969ks3355764 sshd[28178]: Failed password for root from 72.42.170.60 port 46984 ssh2 ... |
2020-08-01 07:55:47 |
| 195.206.105.217 | attackspam | srv02 SSH BruteForce Attacks 22 .. |
2020-08-01 07:48:05 |
| 106.51.73.204 | attack | 2020-07-31T21:12:46.957991shield sshd\[11706\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.73.204 user=root 2020-07-31T21:12:48.615820shield sshd\[11706\]: Failed password for root from 106.51.73.204 port 37091 ssh2 2020-07-31T21:15:56.234465shield sshd\[12426\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.73.204 user=root 2020-07-31T21:15:57.639558shield sshd\[12426\]: Failed password for root from 106.51.73.204 port 13158 ssh2 2020-07-31T21:22:15.169619shield sshd\[14218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.73.204 user=root |
2020-08-01 07:50:01 |
| 114.237.109.30 | attack | Spammer |
2020-08-01 08:13:33 |
| 202.125.138.234 | attackbotsspam | Auto Detect Rule! proto TCP (SYN), 202.125.138.234:53087->gjan.info:1433, len 40 |
2020-08-01 07:45:38 |