City: unknown
Region: unknown
Country: Hungary
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 84.2.242.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41014
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;84.2.242.52. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021900 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 19 23:00:53 CST 2025
;; MSG SIZE rcvd: 104
b'Host 52.242.2.84.in-addr.arpa not found: 2(SERVFAIL)
'
server can't find 84.2.242.52.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.187.204.62 | attackspam | Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM - |
2020-10-09 19:32:13 |
| 119.28.6.128 | attack | Oct 9 12:46:54 server sshd[52301]: Failed password for invalid user oprofile from 119.28.6.128 port 41216 ssh2 Oct 9 12:55:37 server sshd[54210]: Failed password for invalid user syftp from 119.28.6.128 port 36058 ssh2 Oct 9 12:59:03 server sshd[54964]: Failed password for invalid user ubuntu from 119.28.6.128 port 34716 ssh2 |
2020-10-09 19:31:30 |
| 172.105.173.19 | attack |
|
2020-10-09 19:04:27 |
| 203.135.63.30 | attackspambots | (sshd) Failed SSH login from 203.135.63.30 (PK/Pakistan/-): 5 in the last 3600 secs |
2020-10-09 19:20:44 |
| 91.93.170.220 | attackbots | SSH login attempts. |
2020-10-09 19:07:32 |
| 5.197.220.34 | attack | C1,WP GET /comic/wp-login.php |
2020-10-09 19:27:48 |
| 74.112.143.27 | attackbots | Oct 8 22:24:40 kunden sshd[25670]: Address 74.112.143.27 maps to wireless-143-27.galena.il.jcwifi.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 8 22:24:40 kunden sshd[25670]: Invalid user admin from 74.112.143.27 Oct 8 22:24:41 kunden sshd[25670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.112.143.27 Oct 8 22:24:43 kunden sshd[25670]: Failed password for invalid user admin from 74.112.143.27 port 37551 ssh2 Oct 8 22:24:44 kunden sshd[25670]: Connection closed by 74.112.143.27 [preauth] Oct 8 22:24:47 kunden sshd[25688]: Address 74.112.143.27 maps to wireless-143-27.galena.il.jcwifi.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 8 22:24:47 kunden sshd[25688]: Invalid user admin from 74.112.143.27 Oct 8 22:24:47 kunden sshd[25688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.112.143.27 Oct 8 22:24:49 k........ ------------------------------- |
2020-10-09 19:26:51 |
| 110.35.80.82 | attackspam | Oct 9 04:30:01 buvik sshd[28910]: Invalid user jacob from 110.35.80.82 Oct 9 04:30:01 buvik sshd[28910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.35.80.82 Oct 9 04:30:03 buvik sshd[28910]: Failed password for invalid user jacob from 110.35.80.82 port 29332 ssh2 ... |
2020-10-09 19:04:51 |
| 49.48.242.87 | attackspam | 1602189747 - 10/08/2020 22:42:27 Host: 49.48.242.87/49.48.242.87 Port: 445 TCP Blocked ... |
2020-10-09 19:03:48 |
| 159.203.30.50 | attackspambots | Port Scan ... |
2020-10-09 18:59:17 |
| 189.114.124.0 | attack | 20 attempts against mh-ssh on sonic |
2020-10-09 19:33:11 |
| 185.41.212.214 | attackbotsspam | $f2bV_matches |
2020-10-09 19:30:23 |
| 162.158.90.34 | attack | srv02 DDoS Malware Target(80:http) .. |
2020-10-09 19:00:08 |
| 139.194.225.62 | attackspam | Oct 8 22:24:18 kunden sshd[25644]: Address 139.194.225.62 maps to fm-dyn-139-194-225-62.fast.net.id, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 8 22:24:18 kunden sshd[25644]: Invalid user admin from 139.194.225.62 Oct 8 22:24:19 kunden sshd[25644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.194.225.62 Oct 8 22:24:21 kunden sshd[25644]: Failed password for invalid user admin from 139.194.225.62 port 45508 ssh2 Oct 8 22:24:21 kunden sshd[25644]: Connection closed by 139.194.225.62 [preauth] Oct 8 22:24:25 kunden sshd[25649]: Address 139.194.225.62 maps to fm-dyn-139-194-225-62.fast.net.id, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 8 22:24:25 kunden sshd[25649]: Invalid user admin from 139.194.225.62 Oct 8 22:24:26 kunden sshd[25649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.194.225.62 Oct 8 22:24:28........ ------------------------------- |
2020-10-09 19:19:38 |
| 79.110.17.32 | attackspam | SS5,Magento Bruteforce Login Attack POST /index.php/admin/ |
2020-10-09 19:14:21 |