City: Guro-gu
Region: Seoul Special City
Country: South Korea
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 61.32.42.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27689
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;61.32.42.243. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021301 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 11:53:31 CST 2025
;; MSG SIZE rcvd: 105Host 243.42.32.61.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 243.42.32.61.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.155.6.87 | attack | Jun 4 07:21:40 buvik sshd[3350]: Failed password for root from 139.155.6.87 port 43954 ssh2 Jun 4 07:26:50 buvik sshd[3962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.6.87 user=root Jun 4 07:26:51 buvik sshd[3962]: Failed password for root from 139.155.6.87 port 49530 ssh2 ... |
2020-06-04 18:06:19 |
| 106.75.13.192 | attackbots | Jun 4 11:23:38 server sshd[5793]: Failed password for root from 106.75.13.192 port 60820 ssh2 Jun 4 11:27:32 server sshd[19829]: Failed password for root from 106.75.13.192 port 45386 ssh2 Jun 4 11:31:22 server sshd[18445]: Failed password for root from 106.75.13.192 port 58184 ssh2 |
2020-06-04 18:25:21 |
| 112.31.12.175 | attackspam | Tried sshing with brute force. |
2020-06-04 18:08:52 |
| 14.207.60.64 | attackbotsspam | Unauthorized IMAP connection attempt |
2020-06-04 18:05:13 |
| 117.51.142.192 | attackspam | SSH Brute-Forcing (server2) |
2020-06-04 18:41:37 |
| 103.214.129.204 | attackbots | Jun 4 10:51:41 melroy-server sshd[3960]: Failed password for root from 103.214.129.204 port 45704 ssh2 ... |
2020-06-04 18:15:04 |
| 151.80.155.98 | attackbots | Jun 4 08:34:33 pve1 sshd[24133]: Failed password for root from 151.80.155.98 port 40068 ssh2 ... |
2020-06-04 18:14:40 |
| 207.194.35.197 | attackbotsspam | Jun 4 06:41:14 ws12vmsma01 sshd[24741]: Failed password for root from 207.194.35.197 port 49938 ssh2 Jun 4 06:44:53 ws12vmsma01 sshd[25553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.194.35.197 user=root Jun 4 06:44:55 ws12vmsma01 sshd[25553]: Failed password for root from 207.194.35.197 port 52850 ssh2 ... |
2020-06-04 18:46:00 |
| 148.70.252.15 | attackbotsspam | Attempts against non-existent wp-login |
2020-06-04 18:23:23 |
| 119.96.158.238 | attackbotsspam | SSH/22 MH Probe, BF, Hack - |
2020-06-04 18:42:38 |
| 106.13.15.242 | attackspam | serveres are UTC -0400 Lines containing failures of 106.13.15.242 May 31 21:10:28 tux2 sshd[31321]: Failed password for r.r from 106.13.15.242 port 43542 ssh2 May 31 21:10:28 tux2 sshd[31321]: Received disconnect from 106.13.15.242 port 43542:11: Bye Bye [preauth] May 31 21:10:28 tux2 sshd[31321]: Disconnected from authenticating user r.r 106.13.15.242 port 43542 [preauth] May 31 21:30:47 tux2 sshd[32400]: Failed password for r.r from 106.13.15.242 port 33452 ssh2 May 31 21:30:48 tux2 sshd[32400]: Received disconnect from 106.13.15.242 port 33452:11: Bye Bye [preauth] May 31 21:30:48 tux2 sshd[32400]: Disconnected from authenticating user r.r 106.13.15.242 port 33452 [preauth] May 31 21:34:46 tux2 sshd[32627]: Failed password for r.r from 106.13.15.242 port 53554 ssh2 May 31 21:34:46 tux2 sshd[32627]: Received disconnect from 106.13.15.242 port 53554:11: Bye Bye [preauth] May 31 21:34:46 tux2 sshd[32627]: Disconnected from authenticating user r.r 106.13.15.242 port 53554........ ------------------------------ |
2020-06-04 18:45:09 |
| 128.199.159.160 | attackspam | DATE:2020-06-04 09:50:08, IP:128.199.159.160, PORT:ssh SSH brute force auth (docker-dc) |
2020-06-04 18:36:49 |
| 106.13.93.60 | attackbotsspam | 2020-06-03 UTC: (62x) - root(62x) |
2020-06-04 18:21:21 |
| 94.102.56.231 | attack | firewall-block, port(s): 8061/tcp |
2020-06-04 18:43:43 |
| 37.187.1.235 | attack | 2020-06-04T11:13:31.660569+02:00 |
2020-06-04 18:15:34 |