City: unknown
Region: unknown
Country: Spain
Internet Service Provider: Telefonica de Espana Sau
Hostname: unknown
Organization: unknown
Usage Type: unknown
| Type | Details | Datetime |
|---|---|---|
| attack | Jul 31 22:18:56 web1 sshd\[28425\]: Invalid user jennifer from 81.42.196.48 Jul 31 22:18:56 web1 sshd\[28425\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.42.196.48 Jul 31 22:18:59 web1 sshd\[28425\]: Failed password for invalid user jennifer from 81.42.196.48 port 60965 ssh2 Jul 31 22:28:31 web1 sshd\[28902\]: Invalid user niklas from 81.42.196.48 Jul 31 22:28:31 web1 sshd\[28902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.42.196.48 |
2019-08-01 05:20:31 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.42.196.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52931
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.42.196.48. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019073101 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 01 05:20:26 CST 2019
;; MSG SIZE rcvd: 11648.196.42.81.in-addr.arpa domain name pointer 48.red-81-42-196.staticip.rima-tde.net.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
48.196.42.81.in-addr.arpa name = 48.red-81-42-196.staticip.rima-tde.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.207.135.161 | attack | Unauthorized connection attempt from IP address 49.207.135.161 on Port 445(SMB) |
2019-10-31 03:31:16 |
| 51.75.253.211 | attack | 2019-10-30T19:31:13.209062mail01 postfix/smtpd[32392]: warning: 211.ip-51-75-253.eu[51.75.253.211]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-10-30T19:38:06.347323mail01 postfix/smtpd[5080]: warning: 211.ip-51-75-253.eu[51.75.253.211]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-10-30T19:40:46.324494mail01 postfix/smtpd[27407]: warning: 211.ip-51-75-253.eu[51.75.253.211]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-10-31 03:10:42 |
| 46.72.188.118 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/46.72.188.118/ RU - 1H : (185) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : RU NAME ASN : ASN12714 IP : 46.72.188.118 CIDR : 46.72.0.0/16 PREFIX COUNT : 274 UNIQUE IP COUNT : 1204224 ATTACKS DETECTED ASN12714 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 5 DateTime : 2019-10-30 12:45:57 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-31 03:32:26 |
| 137.74.122.5 | attack | Automatic report - SQL Injection Attempts |
2019-10-31 03:32:45 |
| 31.173.87.83 | attackbotsspam | Переходите на сайт, чтобы узнать подробнее про предложение http://agressor-seo.ru. Денис. -- Mozilla/5.0 (Windows NT 6.3; WOW64; rv:52.59.12) Gecko/20160044 Firefox/52.59.12 |
2019-10-31 03:26:43 |
| 106.13.117.17 | attackspam | Oct 30 12:46:21 cavern sshd[31029]: Failed password for root from 106.13.117.17 port 34228 ssh2 |
2019-10-31 03:12:31 |
| 2.132.211.198 | attackbotsspam | Oct 30 12:36:04 mxgate1 postfix/postscreen[24263]: CONNECT from [2.132.211.198]:14970 to [176.31.12.44]:25 Oct 30 12:36:04 mxgate1 postfix/dnsblog[24267]: addr 2.132.211.198 listed by domain zen.spamhaus.org as 127.0.0.4 Oct 30 12:36:04 mxgate1 postfix/dnsblog[24267]: addr 2.132.211.198 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 30 12:36:04 mxgate1 postfix/dnsblog[24266]: addr 2.132.211.198 listed by domain cbl.abuseat.org as 127.0.0.2 Oct 30 12:36:04 mxgate1 postfix/postscreen[24263]: PREGREET 22 after 0.17 from [2.132.211.198]:14970: EHLO [2.132.211.198] Oct 30 12:36:04 mxgate1 postfix/postscreen[24263]: DNSBL rank 3 for [2.132.211.198]:14970 Oct x@x Oct 30 12:36:05 mxgate1 postfix/postscreen[24263]: HANGUP after 0.54 from [2.132.211.198]:14970 in tests after SMTP handshake Oct 30 12:36:05 mxgate1 postfix/postscreen[24263]: DISCONNECT [2.132.211.198]:14970 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=2.132.211.198 |
2019-10-31 03:05:01 |
| 212.64.44.246 | attackspam | $f2bV_matches |
2019-10-31 03:34:54 |
| 193.227.49.2 | attack | Unauthorized connection attempt from IP address 193.227.49.2 on Port 445(SMB) |
2019-10-31 03:35:05 |
| 112.78.179.124 | attack | Unauthorized connection attempt from IP address 112.78.179.124 on Port 445(SMB) |
2019-10-31 03:24:59 |
| 92.63.194.17 | attack | 10/30/2019-12:46:26.888975 92.63.194.17 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-31 03:09:03 |
| 118.89.27.248 | attackspam | Automatic report - Banned IP Access |
2019-10-31 03:28:44 |
| 45.136.109.173 | attack | Multiport scan : 63 ports scanned 1119 1455 1777 1995 2130 2244 2350 2485 2545 3328 3545 4040 4265 4457 4493 5001 5220 5460 5547 6185 7590 7766 7778 8135 8185 8222 8250 8265 8383 8889 8900 9235 9440 9955 9978 10230 10245 10465 10550 10580 15451 16000 20500 20902 21312 22111 25852 29792 30003 31000 31513 32032 33033 33350 33891 33894 40300 47074 51000 53053 56789 60900 62026 |
2019-10-31 03:36:29 |
| 80.232.232.83 | attack | Shenzhen TVT DVR Remote Code Execution |
2019-10-31 03:26:15 |
| 14.161.9.148 | attackbotsspam | Unauthorized connection attempt from IP address 14.161.9.148 on Port 445(SMB) |
2019-10-31 03:30:10 |