City: unknown
Region: unknown
Country: India
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.136.78.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11024
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;49.136.78.242. IN A
;; AUTHORITY SECTION:
. 413 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011601 1800 900 604800 86400
;; Query time: 77 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 17 08:10:06 CST 2022
;; MSG SIZE rcvd: 106
Host 242.78.136.49.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 242.78.136.49.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 221.125.165.59 | attack | Invalid user nikolaou from 221.125.165.59 port 33782 |
2019-12-19 06:05:05 |
| 42.114.108.142 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 18-12-2019 14:30:18. |
2019-12-19 06:17:03 |
| 207.154.229.50 | attack | Dec 18 11:30:24 php1 sshd\[15492\]: Invalid user jl from 207.154.229.50 Dec 18 11:30:24 php1 sshd\[15492\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.229.50 Dec 18 11:30:27 php1 sshd\[15492\]: Failed password for invalid user jl from 207.154.229.50 port 47966 ssh2 Dec 18 11:35:47 php1 sshd\[16389\]: Invalid user siegurd from 207.154.229.50 Dec 18 11:35:47 php1 sshd\[16389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.229.50 |
2019-12-19 05:52:46 |
| 40.92.9.71 | attackspam | Dec 18 17:30:25 debian-2gb-vpn-nbg1-1 kernel: [1057789.286786] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.9.71 DST=78.46.192.101 LEN=52 TOS=0x02 PREC=0x00 TTL=104 ID=31389 DF PROTO=TCP SPT=28422 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 |
2019-12-19 06:13:48 |
| 200.220.134.134 | attackspambots | Unauthorized connection attempt from IP address 200.220.134.134 on Port 445(SMB) |
2019-12-19 06:23:33 |
| 61.183.178.194 | attackbotsspam | Dec 18 19:23:54 lnxmysql61 sshd[2640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.183.178.194 Dec 18 19:23:56 lnxmysql61 sshd[2640]: Failed password for invalid user pullen from 61.183.178.194 port 11110 ssh2 Dec 18 19:27:33 lnxmysql61 sshd[3169]: Failed password for root from 61.183.178.194 port 11112 ssh2 |
2019-12-19 05:58:32 |
| 213.186.35.114 | attack | SSH Bruteforce attack |
2019-12-19 06:10:21 |
| 177.207.79.190 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 18-12-2019 14:30:16. |
2019-12-19 06:19:36 |
| 91.133.211.174 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 18-12-2019 16:05:55. |
2019-12-19 05:50:09 |
| 54.39.145.59 | attackbotsspam | Dec 18 22:33:56 [host] sshd[22746]: Invalid user host from 54.39.145.59 Dec 18 22:33:56 [host] sshd[22746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.145.59 Dec 18 22:33:59 [host] sshd[22746]: Failed password for invalid user host from 54.39.145.59 port 47788 ssh2 |
2019-12-19 05:46:34 |
| 36.79.223.6 | attackspam | Unauthorized connection attempt from IP address 36.79.223.6 on Port 445(SMB) |
2019-12-19 05:59:42 |
| 192.236.154.94 | attack | Dec 18 15:28:14 mxgate1 postfix/postscreen[14652]: CONNECT from [192.236.154.94]:43672 to [176.31.12.44]:25 Dec 18 15:28:14 mxgate1 postfix/dnsblog[14656]: addr 192.236.154.94 listed by domain zen.spamhaus.org as 127.0.0.3 Dec 18 15:28:14 mxgate1 postfix/dnsblog[14654]: addr 192.236.154.94 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Dec 18 15:28:14 mxgate1 postfix/postscreen[14652]: PREGREET 26 after 0.1 from [192.236.154.94]:43672: EHLO 07680ebd.techno.bid Dec 18 15:28:15 mxgate1 postfix/postscreen[14652]: DNSBL rank 3 for [192.236.154.94]:43672 Dec x@x Dec 18 15:28:15 mxgate1 postfix/postscreen[14652]: DISCONNECT [192.236.154.94]:43672 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=192.236.154.94 |
2019-12-19 05:55:08 |
| 213.32.71.196 | attackbotsspam | Dec 18 23:15:54 ns41 sshd[18324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.71.196 Dec 18 23:15:56 ns41 sshd[18324]: Failed password for invalid user ubnt from 213.32.71.196 port 39428 ssh2 Dec 18 23:20:57 ns41 sshd[18548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.71.196 |
2019-12-19 06:22:23 |
| 80.82.77.139 | attack | srv.marc-hoffrichter.de:443 80.82.77.139 - - [18/Dec/2019:22:29:47 +0100] "GET /favicon.ico HTTP/1.1" 403 4520 "-" "python-requests/2.13.0" |
2019-12-19 05:58:00 |
| 105.112.97.174 | attackspam | Unauthorized connection attempt detected from IP address 105.112.97.174 to port 445 |
2019-12-19 06:12:33 |