City: unknown
Region: unknown
Country: Hong Kong
Internet Service Provider: Hong Kong Telecommunications (HKT) Limited
Hostname: unknown
Organization: unknown
Usage Type: unknown
| Type | Details | Datetime |
|---|---|---|
| attackspam | Unauthorized connection attempt detected from IP address 42.2.47.140 to port 5555 [J] |
2020-01-19 07:05:46 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.2.47.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59779
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.2.47.140. IN A
;; AUTHORITY SECTION:
. 442 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020011800 1800 900 604800 86400
;; Query time: 119 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 19 07:05:44 CST 2020
;; MSG SIZE rcvd: 115
140.47.2.42.in-addr.arpa domain name pointer 42-2-47-140.static.netvigator.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
140.47.2.42.in-addr.arpa name = 42-2-47-140.static.netvigator.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.59.77.237 | attack | $f2bV_matches |
2019-09-25 18:36:30 |
| 85.204.246.178 | attackbotsspam | 2019-09-25T10:23:39.586354abusebot-6.cloudsearch.cf sshd\[12607\]: Invalid user bk from 85.204.246.178 port 35474 |
2019-09-25 18:25:23 |
| 188.166.226.209 | attack | Sep 24 18:00:54 wbs sshd\[22811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.226.209 user=www-data Sep 24 18:00:57 wbs sshd\[22811\]: Failed password for www-data from 188.166.226.209 port 35419 ssh2 Sep 24 18:05:12 wbs sshd\[23147\]: Invalid user wp-user from 188.166.226.209 Sep 24 18:05:12 wbs sshd\[23147\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.226.209 Sep 24 18:05:15 wbs sshd\[23147\]: Failed password for invalid user wp-user from 188.166.226.209 port 55560 ssh2 |
2019-09-25 18:18:08 |
| 183.181.97.86 | attack | Scanning and Vuln Attempts |
2019-09-25 18:14:02 |
| 98.4.160.39 | attack | $f2bV_matches |
2019-09-25 18:11:45 |
| 190.111.115.90 | attackbots | SSH Brute Force, server-1 sshd[10748]: Failed password for invalid user dusty from 190.111.115.90 port 56407 ssh2 |
2019-09-25 18:25:49 |
| 164.77.188.109 | attackbots | Sep 25 00:06:55 aiointranet sshd\[18735\]: Invalid user usuario from 164.77.188.109 Sep 25 00:06:55 aiointranet sshd\[18735\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.77.188.109 Sep 25 00:06:58 aiointranet sshd\[18735\]: Failed password for invalid user usuario from 164.77.188.109 port 56620 ssh2 Sep 25 00:12:06 aiointranet sshd\[19233\]: Invalid user kirsten from 164.77.188.109 Sep 25 00:12:06 aiointranet sshd\[19233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.77.188.109 |
2019-09-25 18:17:01 |
| 163.172.16.25 | attackspam | Sep 22 17:48:17 econome sshd[2778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163-172-16-25.rev.poneytelecom.eu user=r.r Sep 22 17:48:19 econome sshd[2778]: Failed password for r.r from 163.172.16.25 port 59940 ssh2 Sep 22 17:48:19 econome sshd[2778]: Received disconnect from 163.172.16.25: 11: Normal Shutdown, Thank you for playing [preauth] Sep 22 17:48:22 econome sshd[2782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163-172-16-25.rev.poneytelecom.eu user=r.r Sep 22 17:48:23 econome sshd[2784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163-172-16-25.rev.poneytelecom.eu user=r.r Sep 22 17:48:24 econome sshd[2782]: Failed password for r.r from 163.172.16.25 port 42644 ssh2 Sep 22 17:48:24 econome sshd[2782]: Received disconnect from 163.172.16.25: 11: Normal Shutdown, Thank you for playing [preauth] Sep 22 17:48:25 econome sshd[278........ ------------------------------- |
2019-09-25 18:39:08 |
| 106.52.174.139 | attack | $f2bV_matches |
2019-09-25 18:06:52 |
| 27.13.7.34 | attackspam | Unauthorised access (Sep 25) SRC=27.13.7.34 LEN=40 TTL=48 ID=44098 TCP DPT=8080 WINDOW=37503 SYN Unauthorised access (Sep 24) SRC=27.13.7.34 LEN=40 TTL=47 ID=61509 TCP DPT=8080 WINDOW=37503 SYN Unauthorised access (Sep 24) SRC=27.13.7.34 LEN=40 TTL=47 ID=55804 TCP DPT=8080 WINDOW=37503 SYN Unauthorised access (Sep 22) SRC=27.13.7.34 LEN=40 TTL=48 ID=51634 TCP DPT=8080 WINDOW=37503 SYN |
2019-09-25 18:35:58 |
| 49.149.4.178 | attackspambots | 19/9/24@23:47:56: FAIL: Alarm-Intrusion address from=49.149.4.178 ... |
2019-09-25 18:33:10 |
| 180.127.77.94 | attackbots | Sep 25 05:48:15 server postfix/smtpd[32696]: NOQUEUE: reject: RCPT from unknown[180.127.77.94]: 554 5.7.1 Service unavailable; Client host [180.127.77.94] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/180.127.77.94 / https://www.spamhaus.org/sbl/query/SBLCSS; from= |
2019-09-25 18:18:46 |
| 179.188.38.23 | attackbots | Scanning and Vuln Attempts |
2019-09-25 18:40:24 |
| 180.163.236.10 | attackspambots | www.lust-auf-land.com 180.163.236.10 \[25/Sep/2019:06:04:27 +0200\] "POST /wp-login.php HTTP/1.1" 200 5531 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.lust-auf-land.com 180.163.236.10 \[25/Sep/2019:06:04:30 +0200\] "POST /wp-login.php HTTP/1.1" 200 5787 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-09-25 18:34:29 |
| 220.161.211.37 | attackbots | Chat Spam |
2019-09-25 18:39:54 |