City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.220.9.175
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12379
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.220.9.175. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021401 1800 900 604800 86400
;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 12:54:45 CST 2025
;; MSG SIZE rcvd: 105Host 175.9.220.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 175.9.220.42.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.86.80.2 | attack | Nov 29 16:53:11 mail kernel: [62538.656150] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=106.86.80.2 DST=91.205.173.180 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=19843 DF PROTO=TCP SPT=30334 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 Nov 29 16:53:14 mail kernel: [62541.746645] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=106.86.80.2 DST=91.205.173.180 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=22236 DF PROTO=TCP SPT=30334 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 Nov 29 16:53:20 mail kernel: [62547.846170] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=106.86.80.2 DST=91.205.173.180 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=26016 DF PROTO=TCP SPT=30334 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 |
2019-11-30 01:31:32 |
| 115.159.88.192 | attack | Nov 29 07:00:41 hpm sshd\[29590\]: Invalid user bkubes from 115.159.88.192 Nov 29 07:00:41 hpm sshd\[29590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.88.192 Nov 29 07:00:43 hpm sshd\[29590\]: Failed password for invalid user bkubes from 115.159.88.192 port 32980 ssh2 Nov 29 07:04:33 hpm sshd\[29927\]: Invalid user chinaIDC333 from 115.159.88.192 Nov 29 07:04:33 hpm sshd\[29927\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.88.192 |
2019-11-30 02:08:53 |
| 119.29.16.76 | attack | Invalid user norma from 119.29.16.76 port 53397 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.16.76 Failed password for invalid user norma from 119.29.16.76 port 53397 ssh2 Invalid user chatoian from 119.29.16.76 port 4881 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.16.76 |
2019-11-30 01:27:16 |
| 159.89.91.214 | attackspam | Automatic report - Banned IP Access |
2019-11-30 01:48:52 |
| 116.239.107.113 | attackspambots | Nov 29 10:01:48 eola postfix/smtpd[17797]: connect from unknown[116.239.107.113] Nov 29 10:01:50 eola postfix/smtpd[17797]: lost connection after AUTH from unknown[116.239.107.113] Nov 29 10:01:50 eola postfix/smtpd[17797]: disconnect from unknown[116.239.107.113] ehlo=1 auth=0/1 commands=1/2 Nov 29 10:01:50 eola postfix/smtpd[17797]: connect from unknown[116.239.107.113] Nov 29 10:01:51 eola postfix/smtpd[17797]: lost connection after AUTH from unknown[116.239.107.113] Nov 29 10:01:51 eola postfix/smtpd[17797]: disconnect from unknown[116.239.107.113] ehlo=1 auth=0/1 commands=1/2 Nov 29 10:01:51 eola postfix/smtpd[17797]: connect from unknown[116.239.107.113] Nov 29 10:01:53 eola postfix/smtpd[17797]: lost connection after AUTH from unknown[116.239.107.113] Nov 29 10:01:53 eola postfix/smtpd[17797]: disconnect from unknown[116.239.107.113] ehlo=1 auth=0/1 commands=1/2 Nov 29 10:01:56 eola postfix/smtpd[17797]: connect from unknown[116.239.107.113] Nov 29 10:01:57 eola ........ ------------------------------- |
2019-11-30 01:32:34 |
| 118.24.210.86 | attackspam | Nov 29 17:13:16 v22018086721571380 sshd[21075]: Failed password for invalid user test from 118.24.210.86 port 59392 ssh2 Nov 29 17:17:52 v22018086721571380 sshd[22165]: Failed password for invalid user squid from 118.24.210.86 port 47327 ssh2 |
2019-11-30 01:53:31 |
| 159.65.30.66 | attackbots | Automatic report - Banned IP Access |
2019-11-30 01:39:17 |
| 139.59.41.154 | attack | 2019-11-29T15:59:28.726474abusebot-2.cloudsearch.cf sshd\[8516\]: Invalid user tanny from 139.59.41.154 port 35434 |
2019-11-30 01:48:02 |
| 221.217.59.118 | attack | firewall-block, port(s): 1433/tcp |
2019-11-30 02:10:10 |
| 106.124.131.70 | attackbots | fail2ban |
2019-11-30 01:26:07 |
| 217.182.73.36 | attack | Forged login request. |
2019-11-30 01:52:36 |
| 189.76.205.246 | attackspambots | Lines containing failures of 189.76.205.246 Nov 29 16:01:25 shared01 sshd[21355]: Invalid user redpokal from 189.76.205.246 port 32800 Nov 29 16:01:25 shared01 sshd[21355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.76.205.246 Nov 29 16:01:28 shared01 sshd[21355]: Failed password for invalid user redpokal from 189.76.205.246 port 32800 ssh2 Nov 29 16:01:29 shared01 sshd[21355]: Connection closed by invalid user redpokal 189.76.205.246 port 32800 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=189.76.205.246 |
2019-11-30 01:45:18 |
| 78.192.6.4 | attack | Nov 29 15:33:38 vzmaster sshd[26896]: Address 78.192.6.4 maps to crz75-1-78-192-6-4.fbxo.proxad.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Nov 29 15:33:38 vzmaster sshd[26896]: Invalid user diluvial from 78.192.6.4 Nov 29 15:33:38 vzmaster sshd[26896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.192.6.4 Nov 29 15:33:40 vzmaster sshd[26896]: Failed password for invalid user diluvial from 78.192.6.4 port 42812 ssh2 Nov 29 15:53:07 vzmaster sshd[14549]: Address 78.192.6.4 maps to crz75-1-78-192-6-4.fbxo.proxad.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Nov 29 15:53:07 vzmaster sshd[14549]: Invalid user ke from 78.192.6.4 Nov 29 15:53:07 vzmaster sshd[14549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.192.6.4 Nov 29 15:53:10 vzmaster sshd[14549]: Failed password for invalid user ke from 78.192.6.4 port 60914 ssh2 ........ ------------------------------- |
2019-11-30 02:08:14 |
| 89.108.155.50 | attackbotsspam | port scan/probe/communication attempt |
2019-11-30 02:07:16 |
| 94.191.81.131 | attack | Nov 29 12:12:04 TORMINT sshd\[20683\]: Invalid user marlene from 94.191.81.131 Nov 29 12:12:04 TORMINT sshd\[20683\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.81.131 Nov 29 12:12:05 TORMINT sshd\[20683\]: Failed password for invalid user marlene from 94.191.81.131 port 41454 ssh2 ... |
2019-11-30 01:27:41 |