City: unknown
Region: unknown
Country: Japan
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.144.137.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54148
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.144.137.212. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013000 1800 900 604800 86400
;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 18:59:20 CST 2025
;; MSG SIZE rcvd: 107
212.137.144.42.in-addr.arpa domain name pointer 42-144-137-212.rev.home.ne.jp.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
212.137.144.42.in-addr.arpa name = 42-144-137-212.rev.home.ne.jp.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 128.199.170.33 | attackbotsspam | (sshd) Failed SSH login from 128.199.170.33 (SG/Singapore/-): 5 in the last 3600 secs |
2020-06-29 05:17:21 |
| 142.93.126.181 | attackbots | xmlrpc attack |
2020-06-29 05:35:27 |
| 52.249.217.244 | attackbots | Jun 28 16:38:43 mail sshd\[38707\]: Invalid user zte from 52.249.217.244 Jun 28 16:38:43 mail sshd\[38707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.249.217.244 ... |
2020-06-29 05:01:42 |
| 141.98.81.42 | attack | Jun 28 20:42:19 *** sshd[23549]: User root from 141.98.81.42 not allowed because not listed in AllowUsers |
2020-06-29 05:30:03 |
| 51.77.137.230 | attack | Jun 28 22:38:20 vpn01 sshd[1475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.137.230 Jun 28 22:38:23 vpn01 sshd[1475]: Failed password for invalid user rachel from 51.77.137.230 port 52294 ssh2 ... |
2020-06-29 05:32:37 |
| 103.126.6.40 | attackbotsspam | Jun 27 16:47:59 mail sshd[28166]: Failed password for invalid user user from 103.126.6.40 port 43108 ssh2 ... |
2020-06-29 05:19:01 |
| 188.4.103.100 | attackbots | Jun 28 22:38:19 debian-2gb-nbg1-2 kernel: \[15635345.929911\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=188.4.103.100 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=26201 DF PROTO=TCP SPT=41756 DPT=8080 WINDOW=14600 RES=0x00 SYN URGP=0 |
2020-06-29 05:33:37 |
| 37.59.61.13 | attack | Jun 28 21:20:56 game-panel sshd[12315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.61.13 Jun 28 21:20:58 game-panel sshd[12315]: Failed password for invalid user ts3server from 37.59.61.13 port 47994 ssh2 Jun 28 21:26:19 game-panel sshd[12589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.61.13 |
2020-06-29 05:29:11 |
| 103.120.175.97 | attackbots | Jun 28 22:51:25 buvik sshd[644]: Failed password for invalid user test1 from 103.120.175.97 port 60894 ssh2 Jun 28 22:54:42 buvik sshd[1077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.120.175.97 user=root Jun 28 22:54:44 buvik sshd[1077]: Failed password for root from 103.120.175.97 port 60198 ssh2 ... |
2020-06-29 05:11:20 |
| 202.186.131.85 | attackspam | xmlrpc attack |
2020-06-29 05:14:40 |
| 181.114.195.158 | attackbotsspam | (smtpauth) Failed SMTP AUTH login from 181.114.195.158 (AR/Argentina/host-195-158.adc.net.ar): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-29 01:08:35 plain authenticator failed for ([181.114.195.158]) [181.114.195.158]: 535 Incorrect authentication data (set_id=info@azim-group.com) |
2020-06-29 05:03:15 |
| 222.186.175.148 | attackbotsspam | Jun 28 16:39:35 debian sshd[22371]: Unable to negotiate with 222.186.175.148 port 51912: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] Jun 28 17:01:07 debian sshd[24493]: Unable to negotiate with 222.186.175.148 port 59296: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ... |
2020-06-29 05:06:44 |
| 125.165.63.161 | attackspam | Invalid user admin from 125.165.63.161 port 57133 |
2020-06-29 05:09:53 |
| 207.154.206.212 | attackspam | $f2bV_matches |
2020-06-29 05:24:36 |
| 52.230.222.68 | attackbots | Microsoft Azure Government - Des Moines, Iowa datacenter. |
2020-06-29 04:59:06 |