City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 56.242.247.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17583
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;56.242.247.1. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012800 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 28 21:43:49 CST 2025
;; MSG SIZE rcvd: 105Host 1.247.242.56.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 1.247.242.56.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 217.107.219.12 | attackspam | 217.107.219.12 - - [24/Feb/2020:10:54:02 +0000] "POST /wp-login.php HTTP/1.1" 200 6409 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 217.107.219.12 - - [24/Feb/2020:10:54:03 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-02-24 20:41:54 |
| 179.40.66.47 | attackbotsspam | Email rejected due to spam filtering |
2020-02-24 20:40:34 |
| 49.144.4.71 | attackspam | 1582519379 - 02/24/2020 05:42:59 Host: 49.144.4.71/49.144.4.71 Port: 445 TCP Blocked |
2020-02-24 21:00:19 |
| 66.249.64.91 | attackbotsspam | Lines containing failures of 66.249.64.91 /var/log/apache/pucorp.org.log:66.249.64.91 - - [09/Nov/2019:00:15:23 +0100] "GET /aktuelles/nachrichten.html?start=0 HTTP/1.1" 200 13213 "-" "Mozilla/5.0 (Linux; user 6.0.1; Nexus 5X Build/MMB29P) AppleWebKhostname/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +hxxp://www.google.com/bot.html)" /var/log/apache/pucorp.org.log:66.249.64.91 - - [29/Nov/2019:20:09:24 +0100] "GET /robots.txt HTTP/1.1" 200 5892 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +hxxp://www.google.com/bot.html)" /var/log/apache/pucorp.org.log:66.249.64.91 - - [29/Nov/2019:20:09:24 +0100] "GET / HTTP/1.1" 200 11492 "-" "Mozilla/5.0 (Linux; user 6.0.1; Nexus 5X Build/MMB29P) AppleWebKhostname/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +hxxp://www.google.com/bot.html)" /var/log/apache/pucorp.org.log:66.249.64.91 - - [12/Dec/2019:07:48:54 +0100] "GET /hostnameem........ ------------------------------ |
2020-02-24 21:01:47 |
| 188.221.111.100 | attackspambots | Email rejected due to spam filtering |
2020-02-24 21:05:16 |
| 14.165.235.149 | attackspam | Email rejected due to spam filtering |
2020-02-24 20:47:20 |
| 186.6.231.94 | attackspambots | Email rejected due to spam filtering |
2020-02-24 21:21:24 |
| 162.243.135.219 | attack | scan z |
2020-02-24 20:59:28 |
| 86.102.41.234 | attack | Port 1433 Scan |
2020-02-24 21:21:44 |
| 91.139.53.63 | attackspam | Lines containing failures of 91.139.53.63 /var/log/mail.err:Feb 24 05:32:18 server01 postfix/smtpd[30727]: warning: hostname 91-139-53-63.customers.tmcz.cz does not resolve to address 91.139.53.63: Name or service not known /var/log/apache/pucorp.org.log:Feb 24 05:32:18 server01 postfix/smtpd[30727]: warning: hostname 91-139-53-63.customers.tmcz.cz does not resolve to address 91.139.53.63: Name or service not known /var/log/apache/pucorp.org.log:Feb 24 05:32:18 server01 postfix/smtpd[30727]: connect from unknown[91.139.53.63] /var/log/apache/pucorp.org.log:Feb x@x /var/log/apache/pucorp.org.log:Feb x@x /var/log/apache/pucorp.org.log:Feb 24 05:32:19 server01 postfix/policy-spf[30735]: : Policy action=PREPEND Received-SPF: none (e4t.cz: No applicable sender policy available) receiver=x@x /var/log/apache/pucorp.org.log:Feb x@x /var/log/apache/pucorp.org.log:Feb 24 05:32:22 server01 postfix/smtpd[30727]: lost connection after DATA from unknown[91.139.53.63] /var/log/apache/p........ ------------------------------ |
2020-02-24 20:48:13 |
| 197.48.72.54 | attackbotsspam | Feb 23 20:42:31 mockhub sshd[23502]: Failed password for root from 197.48.72.54 port 34988 ssh2 Feb 23 20:42:43 mockhub sshd[23502]: error: maximum authentication attempts exceeded for root from 197.48.72.54 port 34988 ssh2 [preauth] ... |
2020-02-24 21:12:54 |
| 110.36.235.138 | attackspambots | DATE:2020-02-24 05:43:04, IP:110.36.235.138, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc) |
2020-02-24 20:57:37 |
| 5.196.244.191 | attack | Feb 23 10:29:50 nandi sshd[7647]: Failed password for r.r from 5.196.244.191 port 35758 ssh2 Feb 23 10:29:53 nandi sshd[7647]: Connection closed by 5.196.244.191 [preauth] Feb 24 05:31:55 nandi sshd[14095]: Failed password for r.r from 5.196.244.191 port 33640 ssh2 Feb 24 05:31:55 nandi sshd[14097]: Failed password for r.r from 5.196.244.191 port 33656 ssh2 Feb 24 05:31:57 nandi sshd[14095]: Connection closed by 5.196.244.191 [preauth] Feb 24 05:31:57 nandi sshd[14097]: Connection closed by 5.196.244.191 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=5.196.244.191 |
2020-02-24 21:22:38 |
| 49.248.95.146 | attackbotsspam | Unauthorized connection attempt from IP address 49.248.95.146 on Port 445(SMB) |
2020-02-24 20:59:59 |
| 45.123.223.234 | attack | Email rejected due to spam filtering |
2020-02-24 20:58:09 |