City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.140.21.103
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8973
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.140.21.103. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 12:53:18 CST 2025
;; MSG SIZE rcvd: 106Host 103.21.140.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 103.21.140.42.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 2001:41d0:a:29ce:: | attackbots | 2001:41d0:a:29ce:: - - [08/Jul/2020:08:30:21 +0100] "POST /wp-login.php HTTP/1.1" 200 2390 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2001:41d0:a:29ce:: - - [08/Jul/2020:08:30:22 +0100] "POST /wp-login.php HTTP/1.1" 200 2438 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2001:41d0:a:29ce:: - - [08/Jul/2020:08:30:22 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-07-08 16:08:13 |
| 194.26.29.32 | attackspam | [MK-VM2] Blocked by UFW |
2020-07-08 16:14:37 |
| 185.25.206.242 | attackbots | Jul 8 13:39:29 itv-usvr-02 sshd[12425]: Invalid user bb from 185.25.206.242 port 51170 Jul 8 13:39:29 itv-usvr-02 sshd[12425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.25.206.242 Jul 8 13:39:29 itv-usvr-02 sshd[12425]: Invalid user bb from 185.25.206.242 port 51170 Jul 8 13:39:32 itv-usvr-02 sshd[12425]: Failed password for invalid user bb from 185.25.206.242 port 51170 ssh2 Jul 8 13:45:53 itv-usvr-02 sshd[12683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.25.206.242 user=mail Jul 8 13:45:54 itv-usvr-02 sshd[12683]: Failed password for mail from 185.25.206.242 port 57360 ssh2 |
2020-07-08 15:51:49 |
| 49.233.180.151 | attack | SSH login attempts. |
2020-07-08 15:52:15 |
| 212.64.27.53 | attack | Automatic report - Banned IP Access |
2020-07-08 16:04:14 |
| 162.223.89.142 | attackbots | invalid user admin from 162.223.89.142 port 54590 ssh2 |
2020-07-08 16:13:29 |
| 49.88.112.115 | attack | Jul 8 10:07:01 vps sshd[886435]: Failed password for root from 49.88.112.115 port 21572 ssh2 Jul 8 10:07:05 vps sshd[886435]: Failed password for root from 49.88.112.115 port 21572 ssh2 Jul 8 10:11:54 vps sshd[912988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.115 user=root Jul 8 10:11:55 vps sshd[912988]: Failed password for root from 49.88.112.115 port 63876 ssh2 Jul 8 10:11:58 vps sshd[912988]: Failed password for root from 49.88.112.115 port 63876 ssh2 ... |
2020-07-08 16:12:09 |
| 186.121.202.2 | attackspambots | Multiple SSH authentication failures from 186.121.202.2 |
2020-07-08 16:09:16 |
| 185.164.138.21 | attackspambots | Auto Fail2Ban report, multiple SSH login attempts. |
2020-07-08 16:23:32 |
| 185.143.72.16 | attackspambots | 2020-07-08 05:39:21 dovecot_login authenticator failed for \(User\) \[185.143.72.16\]: 535 Incorrect authentication data \(set_id=\346\211\225\343\201\204\346\210\273\343\201\227@no-server.de\) 2020-07-08 05:39:31 dovecot_login authenticator failed for \(User\) \[185.143.72.16\]: 535 Incorrect authentication data \(set_id=\346\211\225\343\201\204\346\210\273\343\201\227@no-server.de\) 2020-07-08 05:39:36 dovecot_login authenticator failed for \(User\) \[185.143.72.16\]: 535 Incorrect authentication data \(set_id=\346\211\225\343\201\204\346\210\273\343\201\227@no-server.de\) 2020-07-08 05:39:48 dovecot_login authenticator failed for \(User\) \[185.143.72.16\]: 535 Incorrect authentication data \(set_id=\346\211\225\343\201\204\346\210\273\343\201\227@no-server.de\) 2020-07-08 05:40:18 dovecot_login authenticator failed for \(User\) \[185.143.72.16\]: 535 Incorrect authentication data \(set_id=\346\227\205\350\241\214@no-server.de\) 2020-07-08 05:40:28 dovecot_login authenticator failed ... |
2020-07-08 15:59:53 |
| 111.229.78.120 | attack | k+ssh-bruteforce |
2020-07-08 16:20:17 |
| 165.227.46.89 | attackspam | Jul 8 05:47:07 serwer sshd\[2881\]: Invalid user cnc from 165.227.46.89 port 32770 Jul 8 05:47:07 serwer sshd\[2881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.46.89 Jul 8 05:47:09 serwer sshd\[2881\]: Failed password for invalid user cnc from 165.227.46.89 port 32770 ssh2 ... |
2020-07-08 15:53:03 |
| 35.245.181.160 | attackspambots | (sshd) Failed SSH login from 35.245.181.160 (US/United States/160.181.245.35.bc.googleusercontent.com): 5 in the last 3600 secs |
2020-07-08 16:08:36 |
| 222.186.180.8 | attackbots | Jul 8 09:37:54 zooi sshd[29719]: Failed password for root from 222.186.180.8 port 52050 ssh2 Jul 8 09:37:57 zooi sshd[29719]: Failed password for root from 222.186.180.8 port 52050 ssh2 ... |
2020-07-08 15:51:15 |
| 110.77.138.123 | attack | Jul 8 03:43:33 *** sshd[11979]: Did not receive identification string from 110.77.138.123 |
2020-07-08 16:15:45 |