City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.216.128.47
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33214
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.216.128.47. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021901 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 04:41:24 CST 2025
;; MSG SIZE rcvd: 106Host 47.128.216.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 47.128.216.42.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 212.156.69.30 | attack | Nov 13 16:51:30 h2177944 kernel: \[6535813.651971\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=212.156.69.30 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=3458 PROTO=TCP SPT=26461 DPT=5555 WINDOW=32933 RES=0x00 SYN URGP=0 Nov 13 16:52:09 h2177944 kernel: \[6535852.672603\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=212.156.69.30 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=3458 PROTO=TCP SPT=26461 DPT=5555 WINDOW=32933 RES=0x00 SYN URGP=0 Nov 13 16:52:44 h2177944 kernel: \[6535887.234493\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=212.156.69.30 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=3458 PROTO=TCP SPT=26461 DPT=5555 WINDOW=32933 RES=0x00 SYN URGP=0 Nov 13 16:52:45 h2177944 kernel: \[6535888.317586\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=212.156.69.30 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=3458 PROTO=TCP SPT=26461 DPT=5555 WINDOW=32933 RES=0x00 SYN URGP=0 Nov 13 16:56:52 h2177944 kernel: \[6536135.993020\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=212.156.69.30 DST=85.214.117.9 LEN |
2019-11-14 00:46:31 |
| 195.112.99.88 | attackbots | firewall-block, port(s): 9001/tcp |
2019-11-14 00:16:46 |
| 115.49.41.93 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-11-14 00:20:35 |
| 92.222.75.80 | attack | Nov 13 21:16:10 gw1 sshd[22246]: Failed password for mysql from 92.222.75.80 port 50592 ssh2 ... |
2019-11-14 00:39:09 |
| 150.109.116.241 | attackspambots | $f2bV_matches_ltvn |
2019-11-14 00:36:31 |
| 180.68.177.15 | attack | Nov 13 17:34:02 SilenceServices sshd[12530]: Failed password for mysql from 180.68.177.15 port 44698 ssh2 Nov 13 17:40:20 SilenceServices sshd[16794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.68.177.15 Nov 13 17:40:22 SilenceServices sshd[16794]: Failed password for invalid user gustafson from 180.68.177.15 port 51270 ssh2 |
2019-11-14 00:43:47 |
| 114.115.162.201 | attackspambots | firewall-block, port(s): 1433/tcp |
2019-11-14 00:23:59 |
| 189.155.112.175 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/189.155.112.175/ MX - 1H : (27) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : MX NAME ASN : ASN8151 IP : 189.155.112.175 CIDR : 189.155.112.0/21 PREFIX COUNT : 6397 UNIQUE IP COUNT : 13800704 ATTACKS DETECTED ASN8151 : 1H - 2 3H - 4 6H - 4 12H - 13 24H - 19 DateTime : 2019-11-13 15:50:22 INFO : Server 403 - Looking for resource vulnerabilities Detected and Blocked by ADMIN - data recovery |
2019-11-14 00:19:22 |
| 151.80.98.17 | attack | Nov 13 15:42:02 vserver sshd\[10380\]: Invalid user gregerson from 151.80.98.17Nov 13 15:42:04 vserver sshd\[10380\]: Failed password for invalid user gregerson from 151.80.98.17 port 56268 ssh2Nov 13 15:49:59 vserver sshd\[10434\]: Invalid user erp from 151.80.98.17Nov 13 15:50:01 vserver sshd\[10434\]: Failed password for invalid user erp from 151.80.98.17 port 55440 ssh2 ... |
2019-11-14 00:44:08 |
| 222.186.180.147 | attack | Nov 13 13:14:55 firewall sshd[29945]: Failed password for root from 222.186.180.147 port 46258 ssh2 Nov 13 13:15:08 firewall sshd[29945]: error: maximum authentication attempts exceeded for root from 222.186.180.147 port 46258 ssh2 [preauth] Nov 13 13:15:08 firewall sshd[29945]: Disconnecting: Too many authentication failures [preauth] ... |
2019-11-14 00:18:34 |
| 115.49.250.216 | attackbots | MultiHost/MultiPort Probe, Scan, Hack - |
2019-11-14 00:23:28 |
| 223.16.210.94 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/223.16.210.94/ HK - 1H : (13) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : HK NAME ASN : ASN18116 IP : 223.16.210.94 CIDR : 223.16.192.0/18 PREFIX COUNT : 26 UNIQUE IP COUNT : 195840 ATTACKS DETECTED ASN18116 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-13 16:47:30 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-14 00:53:10 |
| 176.107.130.183 | attackbots | 176.107.130.183 was recorded 5 times by 5 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 26, 226 |
2019-11-14 00:48:37 |
| 104.248.93.179 | attackbotsspam | 104.248.93.179 - - [13/Nov/2019:17:20:35 +0100] "POST /wp-login.php HTTP/1.1" 200 3871 "http://idea.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" 104.248.93.179 - - [13/Nov/2019:17:20:35 +0100] "POST /wp-login.php HTTP/1.1" 200 3871 "http://idea.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" 104.248.93.179 - - [13/Nov/2019:17:20:35 +0100] "POST /wp-login.php HTTP/1.1" 200 3871 "http://idea.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" 104.248.93.179 - - [13/Nov/2019:17:20:35 +0100] "POST /wp-login.php HTTP/1.1" 200 3871 "http://idea.univ-lyon3.fr/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" 104.248.93.179 - - [13/Nov/2019:17:20:35 |
2019-11-14 00:26:26 |
| 115.49.192.70 | attackbotsspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-11-14 00:38:07 |