City: unknown
Region: unknown
Country: Hong Kong
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.239.255.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24315
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;47.239.255.48. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021900 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 00:18:44 CST 2025
;; MSG SIZE rcvd: 106Host 48.255.239.47.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 48.255.239.47.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 81.198.13.66 | attackspam | Unauthorized connection attempt detected from IP address 81.198.13.66 to port 5555 [J] |
2020-01-14 00:43:32 |
| 41.38.203.171 | attackbots | Automatic report - Port Scan Attack |
2020-01-14 00:44:03 |
| 14.177.148.101 | attack | logged into my south african microsoft account from vietnam |
2020-01-14 00:52:43 |
| 120.192.81.226 | attack | $f2bV_matches |
2020-01-14 00:23:21 |
| 54.37.232.108 | attack | Jan 13 17:22:29 meumeu sshd[22625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.232.108 Jan 13 17:22:31 meumeu sshd[22625]: Failed password for invalid user sm from 54.37.232.108 port 47166 ssh2 Jan 13 17:25:20 meumeu sshd[23082]: Failed password for root from 54.37.232.108 port 46480 ssh2 ... |
2020-01-14 00:48:06 |
| 47.247.72.56 | attackbots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-01-14 00:58:25 |
| 91.195.98.178 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-01-14 01:02:08 |
| 185.211.245.198 | attackbotsspam | Jan 13 17:14:10 vmanager6029 postfix/smtpd\[3263\]: warning: unknown\[185.211.245.198\]: SASL PLAIN authentication failed: Jan 13 17:14:17 vmanager6029 postfix/smtpd\[3263\]: warning: unknown\[185.211.245.198\]: SASL PLAIN authentication failed: |
2020-01-14 00:41:40 |
| 36.71.237.35 | attackbotsspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-01-14 00:51:47 |
| 209.126.108.37 | attackbotsspam | Jan 13 08:40:12 giraffe sshd[3012]: Invalid user admin from 209.126.108.37 Jan 13 08:40:13 giraffe sshd[3012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.126.108.37 Jan 13 08:40:15 giraffe sshd[3012]: Failed password for invalid user admin from 209.126.108.37 port 23068 ssh2 Jan 13 08:40:15 giraffe sshd[3012]: Received disconnect from 209.126.108.37 port 23068:11: Bye Bye [preauth] Jan 13 08:40:15 giraffe sshd[3012]: Disconnected from 209.126.108.37 port 23068 [preauth] Jan 13 08:59:40 giraffe sshd[4484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.126.108.37 user=r.r Jan 13 08:59:42 giraffe sshd[4484]: Failed password for r.r from 209.126.108.37 port 33982 ssh2 Jan 13 08:59:42 giraffe sshd[4484]: Received disconnect from 209.126.108.37 port 33982:11: Bye Bye [preauth] Jan 13 08:59:42 giraffe sshd[4484]: Disconnected from 209.126.108.37 port 33982 [preauth] Jan 13 09:05:09 ........ ------------------------------- |
2020-01-14 00:51:20 |
| 157.37.183.83 | attack | Automatic report - Port Scan Attack |
2020-01-14 00:31:33 |
| 81.142.80.97 | attack | Invalid user gssc from 81.142.80.97 port 1024 |
2020-01-14 00:50:02 |
| 80.210.27.148 | attack | Unauthorized connection attempt detected from IP address 80.210.27.148 to port 23 [J] |
2020-01-14 01:06:25 |
| 175.6.35.163 | attackbots | Jan 13 08:22:28 h2034429 sshd[8922]: Invalid user produkcja from 175.6.35.163 Jan 13 08:22:28 h2034429 sshd[8922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.35.163 Jan 13 08:22:30 h2034429 sshd[8922]: Failed password for invalid user produkcja from 175.6.35.163 port 34012 ssh2 Jan 13 08:22:30 h2034429 sshd[8922]: Received disconnect from 175.6.35.163 port 34012:11: Bye Bye [preauth] Jan 13 08:22:30 h2034429 sshd[8922]: Disconnected from 175.6.35.163 port 34012 [preauth] Jan 13 08:35:10 h2034429 sshd[9102]: Connection closed by 175.6.35.163 port 60138 [preauth] Jan 13 08:37:25 h2034429 sshd[9132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.35.163 user=r.r Jan 13 08:37:26 h2034429 sshd[9132]: Failed password for r.r from 175.6.35.163 port 47444 ssh2 Jan 13 08:37:27 h2034429 sshd[9132]: Received disconnect from 175.6.35.163 port 47444:11: Bye Bye [preauth] Jan 13 08:37:2........ ------------------------------- |
2020-01-14 00:45:32 |
| 112.85.42.173 | attackbots | Jan 13 21:27:43 gw1 sshd[21604]: Failed password for root from 112.85.42.173 port 42019 ssh2 Jan 13 21:27:58 gw1 sshd[21604]: Failed password for root from 112.85.42.173 port 42019 ssh2 Jan 13 21:27:58 gw1 sshd[21604]: error: maximum authentication attempts exceeded for root from 112.85.42.173 port 42019 ssh2 [preauth] ... |
2020-01-14 00:42:20 |