City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.128.0.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30143
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.128.0.52. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022700 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 27 18:38:19 CST 2025
;; MSG SIZE rcvd: 104Host 52.0.128.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 52.0.128.42.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 181.49.219.114 | attack | Oct 15 06:22:49 SilenceServices sshd[27574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.219.114 Oct 15 06:22:51 SilenceServices sshd[27574]: Failed password for invalid user xs from 181.49.219.114 port 40199 ssh2 Oct 15 06:26:41 SilenceServices sshd[28621]: Failed password for root from 181.49.219.114 port 57994 ssh2 |
2019-10-15 19:36:52 |
| 218.219.246.124 | attackbots | Automatic report - Banned IP Access |
2019-10-15 19:20:16 |
| 180.104.86.248 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/180.104.86.248/ CN - 1H : (267) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4134 IP : 180.104.86.248 CIDR : 180.104.0.0/15 PREFIX COUNT : 5430 UNIQUE IP COUNT : 106919680 WYKRYTE ATAKI Z ASN4134 : 1H - 10 3H - 27 6H - 39 12H - 66 24H - 97 DateTime : 2019-10-15 04:42:41 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-15 19:43:35 |
| 45.55.187.39 | attack | Oct 15 09:35:07 vps01 sshd[7933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.187.39 Oct 15 09:35:09 vps01 sshd[7933]: Failed password for invalid user prakash from 45.55.187.39 port 32892 ssh2 |
2019-10-15 19:39:41 |
| 134.175.36.138 | attackbots | Oct 15 05:44:40 localhost sshd\[106198\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.36.138 user=root Oct 15 05:44:42 localhost sshd\[106198\]: Failed password for root from 134.175.36.138 port 37304 ssh2 Oct 15 05:49:33 localhost sshd\[106349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.36.138 user=root Oct 15 05:49:35 localhost sshd\[106349\]: Failed password for root from 134.175.36.138 port 47474 ssh2 Oct 15 05:54:24 localhost sshd\[106491\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.36.138 user=root ... |
2019-10-15 19:14:41 |
| 109.75.40.148 | attack | Fail2Ban Ban Triggered |
2019-10-15 19:36:16 |
| 117.102.68.188 | attackspam | Oct 15 06:59:01 plusreed sshd[25799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.102.68.188 user=root Oct 15 06:59:03 plusreed sshd[25799]: Failed password for root from 117.102.68.188 port 36876 ssh2 ... |
2019-10-15 19:14:01 |
| 112.85.42.238 | attackbots | Oct 15 13:09:47 ncomp sshd[18469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.238 user=root Oct 15 13:09:49 ncomp sshd[18469]: Failed password for root from 112.85.42.238 port 17854 ssh2 Oct 15 13:11:38 ncomp sshd[18542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.238 user=root Oct 15 13:11:40 ncomp sshd[18542]: Failed password for root from 112.85.42.238 port 41057 ssh2 |
2019-10-15 19:23:53 |
| 121.143.171.119 | attackspambots | Oct 14 19:55:40 hanapaa sshd\[17349\]: Invalid user montana from 121.143.171.119 Oct 14 19:55:40 hanapaa sshd\[17349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.143.171.119 Oct 14 19:55:42 hanapaa sshd\[17349\]: Failed password for invalid user montana from 121.143.171.119 port 46468 ssh2 Oct 14 20:00:35 hanapaa sshd\[17753\]: Invalid user takuji from 121.143.171.119 Oct 14 20:00:35 hanapaa sshd\[17753\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.143.171.119 |
2019-10-15 19:34:14 |
| 192.169.244.82 | attackbotsspam | WordPress XMLRPC scan :: 192.169.244.82 0.100 BYPASS [15/Oct/2019:14:43:46 1100] www.[censored_1] "GET /xmlrpc.php?rsd HTTP/1.1" 200 760 "https://www.[censored_1]/knowledge-base/configmgr-sccm/firefox-set-default-home-page-for-all-users/" "Mozilla/5.0 (Windows NT 5.1; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0" |
2019-10-15 19:34:46 |
| 54.37.129.235 | attack | Oct 15 01:21:46 eddieflores sshd\[28087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3134207.ip-54-37-129.eu user=root Oct 15 01:21:48 eddieflores sshd\[28087\]: Failed password for root from 54.37.129.235 port 45510 ssh2 Oct 15 01:25:14 eddieflores sshd\[28377\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3134207.ip-54-37-129.eu user=root Oct 15 01:25:16 eddieflores sshd\[28377\]: Failed password for root from 54.37.129.235 port 56516 ssh2 Oct 15 01:28:47 eddieflores sshd\[28643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3134207.ip-54-37-129.eu user=root |
2019-10-15 19:38:20 |
| 78.129.224.209 | attackspam | [munged]::443 78.129.224.209 - - [15/Oct/2019:05:44:09 +0200] "POST /[munged]: HTTP/1.1" 200 6719 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-10-15 19:15:02 |
| 219.90.115.200 | attackbotsspam | Automatic report - Banned IP Access |
2019-10-15 19:40:20 |
| 62.173.149.58 | attackspam | Oct 15 02:50:02 Tower sshd[8440]: Connection from 62.173.149.58 port 53410 on 192.168.10.220 port 22 Oct 15 02:50:05 Tower sshd[8440]: Failed password for root from 62.173.149.58 port 53410 ssh2 Oct 15 02:50:06 Tower sshd[8440]: Received disconnect from 62.173.149.58 port 53410:11: Bye Bye [preauth] Oct 15 02:50:06 Tower sshd[8440]: Disconnected from authenticating user root 62.173.149.58 port 53410 [preauth] |
2019-10-15 19:16:47 |
| 201.28.96.5 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/201.28.96.5/ BR - 1H : (179) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN10429 IP : 201.28.96.5 CIDR : 201.28.64.0/18 PREFIX COUNT : 145 UNIQUE IP COUNT : 1862400 WYKRYTE ATAKI Z ASN10429 : 1H - 1 3H - 1 6H - 2 12H - 3 24H - 5 DateTime : 2019-10-15 05:43:36 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-15 19:21:58 |