City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.162.210.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25525
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;41.162.210.242. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 19:33:52 CST 2025
;; MSG SIZE rcvd: 107Host 242.210.162.41.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 242.210.162.41.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 111.229.157.211 | attackspambots | Sep 4 12:37:03 vpn01 sshd[6446]: Failed password for root from 111.229.157.211 port 38424 ssh2 ... |
2020-09-04 19:23:31 |
| 119.29.121.229 | attackbots | Invalid user db from 119.29.121.229 port 33504 |
2020-09-04 19:23:06 |
| 189.186.123.3 | attackspambots | Honeypot attack, port: 445, PTR: dsl-189-186-123-3-dyn.prod-infinitum.com.mx. |
2020-09-04 18:58:57 |
| 121.204.120.214 | attack | Sep 3 21:21:54 m3 sshd[22254]: Failed password for r.r from 121.204.120.214 port 54144 ssh2 Sep 3 21:35:50 m3 sshd[23812]: Invalid user sispac from 121.204.120.214 Sep 3 21:35:53 m3 sshd[23812]: Failed password for invalid user sispac from 121.204.120.214 port 52848 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=121.204.120.214 |
2020-09-04 19:07:06 |
| 42.118.242.189 | attackspam | Time: Fri Sep 4 07:01:04 2020 -0400 IP: 42.118.242.189 (VN/Vietnam/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 4 06:54:47 pv-11-ams1 sshd[18957]: Invalid user student from 42.118.242.189 port 60934 Sep 4 06:54:50 pv-11-ams1 sshd[18957]: Failed password for invalid user student from 42.118.242.189 port 60934 ssh2 Sep 4 06:58:28 pv-11-ams1 sshd[19186]: Invalid user website from 42.118.242.189 port 51436 Sep 4 06:58:30 pv-11-ams1 sshd[19186]: Failed password for invalid user website from 42.118.242.189 port 51436 ssh2 Sep 4 07:00:59 pv-11-ams1 sshd[19358]: Invalid user lixiang from 42.118.242.189 port 60026 |
2020-09-04 19:14:22 |
| 103.136.9.253 | attackbotsspam | 103.136.9.253 - - \[04/Sep/2020:07:49:32 +0200\] "POST /wp-login.php HTTP/1.0" 200 8748 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 103.136.9.253 - - \[04/Sep/2020:07:49:34 +0200\] "POST /wp-login.php HTTP/1.0" 200 8576 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 103.136.9.253 - - \[04/Sep/2020:07:49:37 +0200\] "POST /wp-login.php HTTP/1.0" 200 8574 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-09-04 18:59:48 |
| 124.205.119.183 | attackspam | 2020-09-04T11:11:24.003850shield sshd\[19191\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.205.119.183 user=root 2020-09-04T11:11:25.958627shield sshd\[19191\]: Failed password for root from 124.205.119.183 port 23553 ssh2 2020-09-04T11:15:31.015872shield sshd\[19902\]: Invalid user andres from 124.205.119.183 port 31677 2020-09-04T11:15:31.038754shield sshd\[19902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.205.119.183 2020-09-04T11:15:33.370891shield sshd\[19902\]: Failed password for invalid user andres from 124.205.119.183 port 31677 ssh2 |
2020-09-04 19:20:14 |
| 111.225.153.179 | attack | spam (f2b h2) |
2020-09-04 19:21:15 |
| 117.107.168.98 | attackspam | Unauthorized connection attempt from IP address 117.107.168.98 on Port 445(SMB) |
2020-09-04 19:27:47 |
| 49.234.96.210 | attack | Sep 3 20:46:28 markkoudstaal sshd[27184]: Failed password for root from 49.234.96.210 port 47160 ssh2 Sep 3 20:51:52 markkoudstaal sshd[28627]: Failed password for root from 49.234.96.210 port 50690 ssh2 Sep 3 20:57:20 markkoudstaal sshd[30173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.96.210 ... |
2020-09-04 19:00:03 |
| 151.177.108.50 | attackbots | sshd: Failed password for invalid user .... from 151.177.108.50 port 56068 ssh2 |
2020-09-04 19:10:25 |
| 92.222.77.150 | attackspambots | SSH BruteForce Attack |
2020-09-04 19:26:34 |
| 188.122.82.146 | attackspambots | 0,59-04/14 [bc01/m05] PostRequest-Spammer scoring: Durban01 |
2020-09-04 19:30:32 |
| 181.114.70.201 | attackbots | Lines containing failures of 181.114.70.201 Sep 3 18:39:46 omfg postfix/smtpd[15260]: connect from host-181-114-70-201.supernet.com.bo[181.114.70.201] Sep x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=181.114.70.201 |
2020-09-04 19:05:21 |
| 113.140.80.174 | attackspam | Sep 4 09:08:42 h2646465 sshd[24146]: Invalid user market from 113.140.80.174 Sep 4 09:08:42 h2646465 sshd[24146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.140.80.174 Sep 4 09:08:42 h2646465 sshd[24146]: Invalid user market from 113.140.80.174 Sep 4 09:08:44 h2646465 sshd[24146]: Failed password for invalid user market from 113.140.80.174 port 6350 ssh2 Sep 4 09:11:34 h2646465 sshd[24818]: Invalid user hbr from 113.140.80.174 Sep 4 09:11:34 h2646465 sshd[24818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.140.80.174 Sep 4 09:11:34 h2646465 sshd[24818]: Invalid user hbr from 113.140.80.174 Sep 4 09:11:36 h2646465 sshd[24818]: Failed password for invalid user hbr from 113.140.80.174 port 21669 ssh2 Sep 4 09:12:30 h2646465 sshd[24876]: Invalid user testuser from 113.140.80.174 ... |
2020-09-04 19:11:37 |