City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.94.208.131
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18432
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.94.208.131. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400
;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 09:11:28 CST 2025
;; MSG SIZE rcvd: 106Host 131.208.94.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 131.208.94.42.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 83.85.170.37 | attack | Attacks on variations around phpmyadmin |
2020-10-13 18:27:42 |
| 123.207.8.86 | attackspambots | Oct 13 08:58:13 124388 sshd[16271]: Failed password for invalid user nagios from 123.207.8.86 port 50500 ssh2 Oct 13 09:03:13 124388 sshd[16586]: Invalid user tvreeland from 123.207.8.86 port 46848 Oct 13 09:03:13 124388 sshd[16586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.8.86 Oct 13 09:03:13 124388 sshd[16586]: Invalid user tvreeland from 123.207.8.86 port 46848 Oct 13 09:03:14 124388 sshd[16586]: Failed password for invalid user tvreeland from 123.207.8.86 port 46848 ssh2 |
2020-10-13 18:05:21 |
| 111.231.89.190 | attack | Oct 13 08:44:40 mail sshd[22543]: Failed password for root from 111.231.89.190 port 39454 ssh2 |
2020-10-13 18:37:09 |
| 198.245.50.154 | attackspambots | 17 attacks on Wordpress URLs like: 198.245.50.154 - - [13/Oct/2020:01:12:10 +0100] "GET //sito/wp-includes/wlwmanifest.xml HTTP/1.1" 404 1895 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" |
2020-10-13 18:30:35 |
| 111.254.159.23 | attack | Oct 12 17:44:38 firewall sshd[25713]: Invalid user admin from 111.254.159.23 Oct 12 17:44:42 firewall sshd[25713]: Failed password for invalid user admin from 111.254.159.23 port 53938 ssh2 Oct 12 17:44:47 firewall sshd[25717]: Invalid user admin from 111.254.159.23 ... |
2020-10-13 18:13:37 |
| 71.6.232.6 | attackspambots | Found on Github Combined on 3 lists / proto=17 . srcport=54377 . dstport=123 NTP . (95) |
2020-10-13 18:17:33 |
| 190.144.182.86 | attackspambots | 2020-10-13T10:27:44.205198vps-d63064a2 sshd[88934]: Invalid user smith from 190.144.182.86 port 43631 2020-10-13T10:27:46.039926vps-d63064a2 sshd[88934]: Failed password for invalid user smith from 190.144.182.86 port 43631 ssh2 2020-10-13T10:31:26.504427vps-d63064a2 sshd[88952]: Invalid user yukipon from 190.144.182.86 port 45606 2020-10-13T10:31:26.522997vps-d63064a2 sshd[88952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.144.182.86 2020-10-13T10:31:26.504427vps-d63064a2 sshd[88952]: Invalid user yukipon from 190.144.182.86 port 45606 2020-10-13T10:31:28.141272vps-d63064a2 sshd[88952]: Failed password for invalid user yukipon from 190.144.182.86 port 45606 ssh2 ... |
2020-10-13 18:35:05 |
| 180.76.238.19 | attackspambots | 2020-10-13 09:36:12,042 fail2ban.actions: WARNING [ssh] Ban 180.76.238.19 |
2020-10-13 18:08:04 |
| 139.59.249.83 | attackspambots | 2020-10-12 UTC: (42x) - allan,amanda,anikei,buser,ek,ftpuser2,hadoop(2x),harrison,jean,klement,nagios,netfonts,postgres,prueba(2x),public,root(17x),tkomatsu,ubuntu,web,workstation,xpertin,yosinski,yvonne,zlin |
2020-10-13 18:34:11 |
| 173.30.96.81 | attack | Oct 13 12:09:31 mail sshd[25087]: Failed password for root from 173.30.96.81 port 43268 ssh2 |
2020-10-13 18:23:31 |
| 159.89.168.216 | attackspam | Oct 13 12:05:20 localhost sshd\[23968\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.168.216 user=root Oct 13 12:05:22 localhost sshd\[23968\]: Failed password for root from 159.89.168.216 port 47334 ssh2 Oct 13 12:08:42 localhost sshd\[24196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.168.216 user=root Oct 13 12:08:44 localhost sshd\[24196\]: Failed password for root from 159.89.168.216 port 40126 ssh2 Oct 13 12:12:08 localhost sshd\[24582\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.168.216 user=root ... |
2020-10-13 18:18:01 |
| 144.34.203.73 | attackspambots | 2020-10-13T16:57:31.217190hostname sshd[81666]: Invalid user nicola from 144.34.203.73 port 37350 ... |
2020-10-13 18:29:14 |
| 212.64.77.154 | attackspambots | 2020-10-13T09:43:02.333873abusebot-8.cloudsearch.cf sshd[30838]: Invalid user irisz from 212.64.77.154 port 55782 2020-10-13T09:43:02.340813abusebot-8.cloudsearch.cf sshd[30838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.77.154 2020-10-13T09:43:02.333873abusebot-8.cloudsearch.cf sshd[30838]: Invalid user irisz from 212.64.77.154 port 55782 2020-10-13T09:43:04.282177abusebot-8.cloudsearch.cf sshd[30838]: Failed password for invalid user irisz from 212.64.77.154 port 55782 ssh2 2020-10-13T09:45:50.257980abusebot-8.cloudsearch.cf sshd[31003]: Invalid user userftp from 212.64.77.154 port 56258 2020-10-13T09:45:50.262830abusebot-8.cloudsearch.cf sshd[31003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.77.154 2020-10-13T09:45:50.257980abusebot-8.cloudsearch.cf sshd[31003]: Invalid user userftp from 212.64.77.154 port 56258 2020-10-13T09:45:51.933327abusebot-8.cloudsearch.cf sshd[31003]: Fa ... |
2020-10-13 18:33:00 |
| 61.177.172.168 | attackspambots | Oct 13 12:20:47 server sshd[8721]: Failed none for root from 61.177.172.168 port 8790 ssh2 Oct 13 12:20:49 server sshd[8721]: Failed password for root from 61.177.172.168 port 8790 ssh2 Oct 13 12:20:55 server sshd[8721]: Failed password for root from 61.177.172.168 port 8790 ssh2 |
2020-10-13 18:21:10 |
| 67.205.143.140 | attack | WordPress wp-login brute force :: 67.205.143.140 0.068 - [13/Oct/2020:06:28:27 0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2577 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1" |
2020-10-13 17:58:16 |