City: unknown
Region: unknown
Country: Korea (the Republic of)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.25.38.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18910
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.25.38.93. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 20:26:36 CST 2025
;; MSG SIZE rcvd: 104Host 93.38.25.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 93.38.25.42.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 80.73.89.111 | attack | Unauthorised access (Jan 20) SRC=80.73.89.111 LEN=52 PREC=0x20 TTL=116 ID=26476 DF TCP DPT=445 WINDOW=8192 SYN |
2020-01-20 22:33:48 |
| 103.192.61.19 | attackbotsspam | Jan 20 08:06:49 Tower sshd[14566]: Connection from 103.192.61.19 port 51828 on 192.168.10.220 port 22 rdomain "" Jan 20 08:06:51 Tower sshd[14566]: Invalid user client from 103.192.61.19 port 51828 Jan 20 08:06:51 Tower sshd[14566]: error: Could not get shadow information for NOUSER Jan 20 08:06:51 Tower sshd[14566]: Failed password for invalid user client from 103.192.61.19 port 51828 ssh2 Jan 20 08:06:51 Tower sshd[14566]: Received disconnect from 103.192.61.19 port 51828:11: Bye Bye [preauth] Jan 20 08:06:51 Tower sshd[14566]: Disconnected from invalid user client 103.192.61.19 port 51828 [preauth] |
2020-01-20 22:19:01 |
| 123.160.246.55 | attackbots | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.160.246.55 Failed password for invalid user testuser from 123.160.246.55 port 37316 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.160.246.55 user=root Failed password for root from 123.160.246.55 port 36010 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.160.246.55 user=root |
2020-01-20 22:33:19 |
| 5.70.7.63 | attackbotsspam | Jan 20 03:59:33 web1 sshd\[24662\]: Invalid user gast from 5.70.7.63 Jan 20 03:59:33 web1 sshd\[24662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.70.7.63 Jan 20 03:59:35 web1 sshd\[24662\]: Failed password for invalid user gast from 5.70.7.63 port 43058 ssh2 Jan 20 04:07:04 web1 sshd\[25282\]: Invalid user update from 5.70.7.63 Jan 20 04:07:04 web1 sshd\[25282\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.70.7.63 |
2020-01-20 22:11:00 |
| 174.253.83.103 | attackspambots | WEB_SERVER 403 Forbidden |
2020-01-20 22:10:40 |
| 37.49.227.109 | attackbots | Unauthorized connection attempt detected from IP address 37.49.227.109 to port 81 [J] |
2020-01-20 22:43:23 |
| 2.110.230.109 | attackbotsspam | Jan 20 13:07:00 work-partkepr sshd\[18145\]: Invalid user nd from 2.110.230.109 port 54938 Jan 20 13:07:00 work-partkepr sshd\[18145\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.110.230.109 ... |
2020-01-20 22:19:31 |
| 59.188.30.116 | attackspam | 59.188.30.116 - - [20/Jan/2020:14:33:07 +0100] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 59.188.30.116 - - [20/Jan/2020:14:33:13 +0100] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 59.188.30.116 - - [20/Jan/2020:14:33:14 +0100] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 59.188.30.116 - - [20/Jan/2020:14:33:15 +0100] "POST /wp-login.php HTTP/1.1" 200 1710 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 59.188.30.116 - - [20/Jan/2020:14:33:16 +0100] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 59.188.30.116 - - [20/Jan/2020:14:33:22 +0100] "POST /wp-login.php HTTP/1.1" 200 1710 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-01-20 22:19:16 |
| 222.186.42.4 | attack | Jan 20 15:14:47 herz-der-gamer sshd[23216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.4 user=root Jan 20 15:14:50 herz-der-gamer sshd[23216]: Failed password for root from 222.186.42.4 port 49292 ssh2 ... |
2020-01-20 22:20:55 |
| 195.3.147.47 | attackspam | Jan 20 06:07:17 home sshd[27427]: Invalid user 0 from 195.3.147.47 port 33698 ... |
2020-01-20 22:05:47 |
| 129.211.4.202 | attack | Jan 20 07:17:00 askasleikir sshd[212925]: Failed password for root from 129.211.4.202 port 43354 ssh2 |
2020-01-20 22:38:23 |
| 54.38.241.162 | attackspam | Jan 20 15:16:22 localhost sshd\[18367\]: Invalid user james from 54.38.241.162 Jan 20 15:16:22 localhost sshd\[18367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.241.162 Jan 20 15:16:24 localhost sshd\[18367\]: Failed password for invalid user james from 54.38.241.162 port 38708 ssh2 Jan 20 15:21:22 localhost sshd\[18633\]: Invalid user rosanna from 54.38.241.162 Jan 20 15:21:22 localhost sshd\[18633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.241.162 ... |
2020-01-20 22:29:00 |
| 213.212.255.140 | attack | Unauthorized connection attempt detected from IP address 213.212.255.140 to port 2220 [J] |
2020-01-20 22:32:44 |
| 185.156.177.58 | attack | RDP Brute-Force |
2020-01-20 22:28:20 |
| 93.188.204.42 | attack | Jan 20 12:34:56 mailrelay sshd[31049]: Invalid user fieke from 93.188.204.42 port 60131 Jan 20 12:34:56 mailrelay sshd[31049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.188.204.42 Jan 20 12:34:59 mailrelay sshd[31049]: Failed password for invalid user fieke from 93.188.204.42 port 60131 ssh2 Jan 20 12:34:59 mailrelay sshd[31049]: Received disconnect from 93.188.204.42 port 60131:11: Bye Bye [preauth] Jan 20 12:34:59 mailrelay sshd[31049]: Disconnected from 93.188.204.42 port 60131 [preauth] Jan 20 13:10:40 mailrelay sshd[31369]: Connection closed by 93.188.204.42 port 48792 [preauth] Jan 20 13:21:26 mailrelay sshd[31444]: Connection closed by 93.188.204.42 port 45828 [preauth] Jan 20 13:32:08 mailrelay sshd[31527]: Connection closed by 93.188.204.42 port 42575 [preauth] Jan 20 13:43:08 mailrelay sshd[31604]: Invalid user oper01 from 93.188.204.42 port 38997 Jan 20 13:43:08 mailrelay sshd[31604]: pam_unix(sshd:auth): authe........ ------------------------------- |
2020-01-20 22:36:14 |