City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.49.93.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43119
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.49.93.239. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021500 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 16 00:49:21 CST 2025
;; MSG SIZE rcvd: 105Host 239.93.49.42.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 239.93.49.42.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.177.250.6 | attackspambots | Sep 4 19:56:15 ws22vmsma01 sshd[186788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.177.250.6 Sep 4 19:56:16 ws22vmsma01 sshd[186788]: Failed password for invalid user admin from 14.177.250.6 port 57835 ssh2 ... |
2019-09-05 14:12:28 |
| 125.231.31.226 | attack | Honeypot attack, port: 23, PTR: 125-231-31-226.dynamic-ip.hinet.net. |
2019-09-05 14:40:57 |
| 104.248.188.192 | attackbotsspam | 19/9/4@23:55:36: FAIL: IoT-Telnet address from=104.248.188.192 ... |
2019-09-05 14:51:32 |
| 115.59.48.92 | attackspam | 2019-09-05 01:57:13,129 [snip] proftpd[9167] [snip] (115.59.48.92[115.59.48.92]): USER user: no such user found from 115.59.48.92 [115.59.48.92] to ::ffff:[snip]:22 2019-09-05 01:57:13,391 [snip] proftpd[9167] [snip] (115.59.48.92[115.59.48.92]): USER user: no such user found from 115.59.48.92 [115.59.48.92] to ::ffff:[snip]:22 2019-09-05 01:57:13,657 [snip] proftpd[9167] [snip] (115.59.48.92[115.59.48.92]): USER user: no such user found from 115.59.48.92 [115.59.48.92] to ::ffff:[snip]:22[...] |
2019-09-05 14:12:56 |
| 185.175.93.18 | attack | 09/05/2019-00:48:12.291352 185.175.93.18 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-09-05 14:50:28 |
| 111.231.121.62 | attackbots | Sep 5 06:12:41 hb sshd\[21129\]: Invalid user miner1324 from 111.231.121.62 Sep 5 06:12:41 hb sshd\[21129\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.121.62 Sep 5 06:12:43 hb sshd\[21129\]: Failed password for invalid user miner1324 from 111.231.121.62 port 46626 ssh2 Sep 5 06:17:28 hb sshd\[21992\]: Invalid user 1234 from 111.231.121.62 Sep 5 06:17:28 hb sshd\[21992\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.121.62 |
2019-09-05 14:22:31 |
| 149.154.68.20 | attackbotsspam | Sep 4 20:05:54 lcprod sshd\[14701\]: Invalid user ts from 149.154.68.20 Sep 4 20:05:54 lcprod sshd\[14701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=jc10102016.fvds.ru Sep 4 20:05:55 lcprod sshd\[14701\]: Failed password for invalid user ts from 149.154.68.20 port 59672 ssh2 Sep 4 20:10:37 lcprod sshd\[15209\]: Invalid user gmodserver from 149.154.68.20 Sep 4 20:10:37 lcprod sshd\[15209\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=jc10102016.fvds.ru |
2019-09-05 14:28:07 |
| 77.42.104.229 | attack | Honeypot attack, port: 23, PTR: PTR record not found |
2019-09-05 14:36:25 |
| 180.97.31.28 | attackspam | Sep 4 20:14:33 php1 sshd\[22453\]: Invalid user ts3server1 from 180.97.31.28 Sep 4 20:14:33 php1 sshd\[22453\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.97.31.28 Sep 4 20:14:35 php1 sshd\[22453\]: Failed password for invalid user ts3server1 from 180.97.31.28 port 48055 ssh2 Sep 4 20:18:55 php1 sshd\[22793\]: Invalid user insserver from 180.97.31.28 Sep 4 20:18:55 php1 sshd\[22793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.97.31.28 |
2019-09-05 14:23:42 |
| 93.174.95.41 | attack | *Port Scan* detected from 93.174.95.41 (NL/Netherlands/-). 4 hits in the last 35 seconds |
2019-09-05 15:01:17 |
| 192.227.252.25 | attackbotsspam | Automatic report - Banned IP Access |
2019-09-05 14:11:23 |
| 128.199.180.123 | attack | fail2ban honeypot |
2019-09-05 14:52:15 |
| 134.175.39.246 | attack | Sep 5 08:25:09 dedicated sshd[15528]: Invalid user 1q2w3e4r from 134.175.39.246 port 45676 |
2019-09-05 14:29:42 |
| 212.237.10.122 | attackbotsspam | Sep 5 00:28:55 srv1 postfix/smtpd[20640]: connect from www.cafpatronatocollialbani.hostname[212.237.10.122] Sep 5 00:28:55 srv1 postfix/smtpd[20640]: Anonymous TLS connection established from www.cafpatronatocollialbani.hostname[212.237.10.122]: TLSv1.2 whostnameh cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bhostnames) Sep x@x Sep 5 00:29:01 srv1 postfix/smtpd[20640]: disconnect from www.cafpatronatocollialbani.hostname[212.237.10.122] Sep 5 00:29:31 srv1 postfix/smtpd[20531]: connect from www.valeoggi.hostname[212.237.10.122] Sep 5 00:29:31 srv1 postfix/smtpd[20531]: Anonymous TLS connection established from www.valeoggi.hostname[212.237.10.122]: TLSv1.2 whostnameh cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bhostnames) Sep x@x Sep 5 00:29:37 srv1 postfix/smtpd[20531]: disconnect from www.valeoggi.hostname[212.237.10.122] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=212.237.10.122 |
2019-09-05 14:18:08 |
| 165.227.209.96 | attackspambots | Sep 4 22:35:08 localhost sshd\[27135\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.209.96 user=root Sep 4 22:35:10 localhost sshd\[27135\]: Failed password for root from 165.227.209.96 port 51734 ssh2 Sep 4 22:56:18 localhost sshd\[27413\]: Invalid user vbox from 165.227.209.96 port 37656 ... |
2019-09-05 14:09:58 |