City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.254.27.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40399
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.254.27.242. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012800 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 28 19:41:16 CST 2025
;; MSG SIZE rcvd: 106
Host 242.27.254.42.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 242.27.254.42.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 77.40.3.120 | attack | Nov 30 06:15:05 heicom postfix/smtpd\[15512\]: warning: unknown\[77.40.3.120\]: SASL LOGIN authentication failed: authentication failure Nov 30 06:28:26 heicom postfix/smtpd\[15705\]: warning: unknown\[77.40.3.120\]: SASL LOGIN authentication failed: authentication failure Nov 30 06:43:53 heicom postfix/smtpd\[16060\]: warning: unknown\[77.40.3.120\]: SASL LOGIN authentication failed: authentication failure Nov 30 06:44:08 heicom postfix/smtpd\[16060\]: warning: unknown\[77.40.3.120\]: SASL LOGIN authentication failed: authentication failure Nov 30 06:55:43 heicom postfix/smtpd\[16224\]: warning: unknown\[77.40.3.120\]: SASL LOGIN authentication failed: authentication failure ... |
2019-11-30 15:14:06 |
| 109.67.25.81 | attack | Triggered: repeated knocking on closed ports. |
2019-11-30 15:11:25 |
| 218.92.0.193 | attackspambots | Nov 30 07:50:29 MK-Soft-VM6 sshd[12523]: Failed password for root from 218.92.0.193 port 55791 ssh2 Nov 30 07:50:33 MK-Soft-VM6 sshd[12523]: Failed password for root from 218.92.0.193 port 55791 ssh2 ... |
2019-11-30 14:52:18 |
| 218.92.0.134 | attack | 2019-11-30T07:58:37.074961ns386461 sshd\[25162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.134 user=root 2019-11-30T07:58:39.623522ns386461 sshd\[25162\]: Failed password for root from 218.92.0.134 port 16560 ssh2 2019-11-30T07:58:42.497600ns386461 sshd\[25162\]: Failed password for root from 218.92.0.134 port 16560 ssh2 2019-11-30T07:58:45.774533ns386461 sshd\[25162\]: Failed password for root from 218.92.0.134 port 16560 ssh2 2019-11-30T07:58:48.937276ns386461 sshd\[25162\]: Failed password for root from 218.92.0.134 port 16560 ssh2 ... |
2019-11-30 15:01:20 |
| 112.28.77.215 | attackbotsspam | (Nov 30) LEN=40 TOS=0x04 TTL=49 ID=45397 TCP DPT=8080 WINDOW=41083 SYN (Nov 29) LEN=40 TOS=0x04 TTL=50 ID=21977 TCP DPT=8080 WINDOW=45675 SYN (Nov 29) LEN=40 TOS=0x04 TTL=50 ID=57715 TCP DPT=8080 WINDOW=45675 SYN (Nov 28) LEN=40 TOS=0x04 TTL=49 ID=11792 TCP DPT=8080 WINDOW=41083 SYN (Nov 28) LEN=40 TOS=0x04 TTL=50 ID=65508 TCP DPT=8080 WINDOW=45675 SYN (Nov 27) LEN=40 TOS=0x04 TTL=49 ID=15630 TCP DPT=8080 WINDOW=41083 SYN (Nov 27) LEN=40 TOS=0x04 TTL=50 ID=22600 TCP DPT=8080 WINDOW=45675 SYN (Nov 26) LEN=40 TOS=0x04 TTL=50 ID=45579 TCP DPT=8080 WINDOW=45675 SYN (Nov 26) LEN=40 TOS=0x04 TTL=49 ID=54989 TCP DPT=8080 WINDOW=41083 SYN (Nov 26) LEN=40 TOS=0x04 TTL=50 ID=12120 TCP DPT=8080 WINDOW=45675 SYN (Nov 25) LEN=40 TOS=0x04 TTL=49 ID=40819 TCP DPT=8080 WINDOW=41083 SYN |
2019-11-30 15:10:09 |
| 218.92.0.212 | attackbotsspam | Nov 30 08:09:55 sd-53420 sshd\[13290\]: User root from 218.92.0.212 not allowed because none of user's groups are listed in AllowGroups Nov 30 08:09:55 sd-53420 sshd\[13290\]: Failed none for invalid user root from 218.92.0.212 port 52489 ssh2 Nov 30 08:09:55 sd-53420 sshd\[13290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.212 user=root Nov 30 08:09:58 sd-53420 sshd\[13290\]: Failed password for invalid user root from 218.92.0.212 port 52489 ssh2 Nov 30 08:10:01 sd-53420 sshd\[13290\]: Failed password for invalid user root from 218.92.0.212 port 52489 ssh2 ... |
2019-11-30 15:18:46 |
| 93.153.55.220 | attackbots | SSHScan |
2019-11-30 15:13:33 |
| 222.186.173.142 | attack | Nov 30 02:00:24 TORMINT sshd\[23302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.142 user=root Nov 30 02:00:26 TORMINT sshd\[23302\]: Failed password for root from 222.186.173.142 port 41840 ssh2 Nov 30 02:00:44 TORMINT sshd\[23304\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.142 user=root ... |
2019-11-30 15:18:25 |
| 113.173.188.35 | attack | SpamReport |
2019-11-30 15:09:19 |
| 77.55.219.235 | attack | Nov 30 07:30:59 localhost sshd\[14665\]: Invalid user admin from 77.55.219.235 port 47382 Nov 30 07:30:59 localhost sshd\[14665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.55.219.235 Nov 30 07:31:01 localhost sshd\[14665\]: Failed password for invalid user admin from 77.55.219.235 port 47382 ssh2 |
2019-11-30 14:47:50 |
| 222.186.180.223 | attackbotsspam | Nov 30 08:30:47 dri sshd[27829]: error: PAM: Authentication failure for root from 222.186.180.223 Nov 30 08:30:51 dri sshd[27829]: error: PAM: Authentication failure for root from 222.186.180.223 Nov ... |
2019-11-30 14:50:37 |
| 61.180.39.72 | attackbotsspam | port scanning |
2019-11-30 15:24:04 |
| 14.63.169.33 | attackbotsspam | Nov 30 06:23:47 zeus sshd[7258]: Failed password for root from 14.63.169.33 port 36525 ssh2 Nov 30 06:27:14 zeus sshd[7436]: Failed password for root from 14.63.169.33 port 54184 ssh2 Nov 30 06:30:41 zeus sshd[7512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.169.33 |
2019-11-30 14:50:00 |
| 211.35.76.241 | attack | Nov 30 01:30:31 mail sshd\[22751\]: Invalid user admin from 211.35.76.241 Nov 30 01:30:31 mail sshd\[22751\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.35.76.241 ... |
2019-11-30 14:52:36 |
| 211.159.182.44 | attackspam | Nov 29 21:14:03 wbs sshd\[11821\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.182.44 user=root Nov 29 21:14:05 wbs sshd\[11821\]: Failed password for root from 211.159.182.44 port 34598 ssh2 Nov 29 21:18:03 wbs sshd\[12077\]: Invalid user kieran from 211.159.182.44 Nov 29 21:18:03 wbs sshd\[12077\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.182.44 Nov 29 21:18:05 wbs sshd\[12077\]: Failed password for invalid user kieran from 211.159.182.44 port 39036 ssh2 |
2019-11-30 15:20:47 |