City: unknown
Region: unknown
Country: Korea (the Republic of)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.12.242.198
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16994
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.12.242.198. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012300 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 17:01:22 CST 2025
;; MSG SIZE rcvd: 106
Host 198.242.12.42.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 198.242.12.42.in-addr.arpa: NXDOMAIN
IP | Type | Details | Datetime |
---|---|---|---|
14.226.32.9 | attackbotsspam | Honeypot attack, port: 445, PTR: static.vnpt.vn. |
2020-03-05 18:48:00 |
113.176.89.116 | attackspam | Mar 5 08:46:15 Ubuntu-1404-trusty-64-minimal sshd\[16892\]: Invalid user rizon from 113.176.89.116 Mar 5 08:46:15 Ubuntu-1404-trusty-64-minimal sshd\[16892\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.176.89.116 Mar 5 08:46:17 Ubuntu-1404-trusty-64-minimal sshd\[16892\]: Failed password for invalid user rizon from 113.176.89.116 port 35850 ssh2 Mar 5 09:15:19 Ubuntu-1404-trusty-64-minimal sshd\[11305\]: Invalid user asterisk from 113.176.89.116 Mar 5 09:15:19 Ubuntu-1404-trusty-64-minimal sshd\[11305\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.176.89.116 |
2020-03-05 18:49:06 |
93.174.93.195 | attackbots | Scanning for open ports and vulnerable services: 1095,1152,1153,1157,1159,1280,1281,1283,1289,1409,1536,1537,1538,1539,1540 |
2020-03-05 18:18:45 |
14.29.148.201 | attackspam | Mar 5 05:47:55 [snip] sshd[15054]: Invalid user tharani from 14.29.148.201 port 33830 Mar 5 05:47:55 [snip] sshd[15054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.148.201 Mar 5 05:47:56 [snip] sshd[15054]: Failed password for invalid user tharani from 14.29.148.201 port 33830 ssh2[...] |
2020-03-05 18:26:56 |
143.255.69.201 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2020-03-05 18:40:14 |
185.173.35.5 | attack | 67/tcp 5916/tcp 20249/tcp... [2020-01-04/03-03]51pkt,41pt.(tcp),4pt.(udp),1tp.(icmp) |
2020-03-05 18:27:10 |
138.68.82.194 | attackbotsspam | Mar 5 00:09:12 wbs sshd\[19253\]: Invalid user metin2 from 138.68.82.194 Mar 5 00:09:12 wbs sshd\[19253\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194 Mar 5 00:09:14 wbs sshd\[19253\]: Failed password for invalid user metin2 from 138.68.82.194 port 44704 ssh2 Mar 5 00:17:41 wbs sshd\[20048\]: Invalid user azureuser from 138.68.82.194 Mar 5 00:17:42 wbs sshd\[20048\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194 |
2020-03-05 18:38:27 |
220.132.9.234 | attackbots | Honeypot attack, port: 445, PTR: 220-132-9-234.HINET-IP.hinet.net. |
2020-03-05 18:14:30 |
71.6.146.185 | attackspam | Scanning for open ports and vulnerable services: 389,1604,5432,6969,13579,20256 |
2020-03-05 18:27:56 |
113.21.72.211 | attackspam | Unauthorized connection attempt from IP address 113.21.72.211 on Port 445(SMB) |
2020-03-05 18:33:51 |
193.32.163.44 | attackbotsspam | 03/05/2020-02:10:06.758853 193.32.163.44 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-03-05 18:17:32 |
163.172.137.10 | attackspam | Mar 4 23:53:53 eddieflores sshd\[16986\]: Invalid user sunqiu from 163.172.137.10 Mar 4 23:53:53 eddieflores sshd\[16986\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.137.10 Mar 4 23:53:55 eddieflores sshd\[16986\]: Failed password for invalid user sunqiu from 163.172.137.10 port 60082 ssh2 Mar 5 00:02:37 eddieflores sshd\[17852\]: Invalid user renxiaoguang from 163.172.137.10 Mar 5 00:02:37 eddieflores sshd\[17852\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.137.10 |
2020-03-05 18:26:28 |
49.206.198.33 | attackbotsspam | Unauthorized connection attempt from IP address 49.206.198.33 on Port 445(SMB) |
2020-03-05 18:36:40 |
69.197.139.254 | spam | MARRE de ces ORDURES et autres FILS de PUTE genre SOUS MERDES capables de POLLUER STUPIDEMENT pour ne pas dire CONNEMENT la Planète par des POURRIELS INUTILES sur des listes VOLÉES on ne sait où et SANS notre accord, en TOTALE INFRACTION avec les Législations Européennes comme Française sur la RGPD, donc à condamner à 750 € par pourriel émis, tout ça pour du PHISHING par une FAUSSE COPIE... BounceEmail@namedu.astalido.org.uk=>69.197.139.254 https://en.asytech.cn/check-ip/69.197.139.254 astalido.org.uk=>register.com astalido.org.uk=>69.197.139.250 69.197.128.0 - 69.197.191.255=>wholesaleinternet.net https://www.mywot.com/scorecard/astalido.org.uk https://www.mywot.com/scorecard/wholesaleinternet.net https://en.asytech.cn/check-ip/69.197.139.250 alichobein.co.uk=>register.com alichobein.co.uk=>87.236.196.214 87.236.196.214=>coolhousing.net https://www.mywot.com/scorecard/alichobein.co.uk https://www.mywot.com/scorecard/coolhousing.net https://en.asytech.cn/check-ip/87.236.196.214 Message-Id:<2100295267.gezxtj.82159@topspeech.net> topspeech.net=>enom.com=>whoisprivacyprotect.com topspeech.net=>64.27.55.250 64.27.55.250=>wehostwebsites.com https://www.mywot.com/scorecard/topspeech.net https://www.mywot.com/scorecard/enom.com https://www.mywot.com/scorecard/whoisprivacyprotect.com https://www.mywot.com/scorecard/wehostwebsites.com https://en.asytech.cn/check-ip/64.27.55.250 |
2020-03-05 18:14:22 |
192.241.169.184 | attack | $f2bV_matches |
2020-03-05 18:14:13 |