City: unknown
Region: unknown
Country: Switzerland
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.2.124.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46782
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;85.2.124.142. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022401 1800 900 604800 86400
;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 25 10:48:20 CST 2025
;; MSG SIZE rcvd: 105142.124.2.85.in-addr.arpa domain name pointer 142.124.2.85.dynamic.cust.swisscom.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
142.124.2.85.in-addr.arpa name = 142.124.2.85.dynamic.cust.swisscom.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.9.159.36 | attackspam | Automatic report - Web App Attack |
2019-06-25 02:09:39 |
| 177.92.245.202 | attackbots | SMTP-sasl brute force ... |
2019-06-25 02:18:46 |
| 87.98.233.162 | attackspambots | familiengesundheitszentrum-fulda.de 87.98.233.162 \[24/Jun/2019:18:27:15 +0200\] "POST /wp-login.php HTTP/1.1" 200 5690 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" familiengesundheitszentrum-fulda.de 87.98.233.162 \[24/Jun/2019:18:27:15 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4150 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-06-25 01:48:43 |
| 202.118.234.175 | attackbots | IP: 202.118.234.175 ASN: AS24372 CERNET2 IX at Harbin Institute of Technology Port: Simple Mail Transfer 25 Date: 24/06/2019 12:00:37 PM UTC |
2019-06-25 02:11:33 |
| 49.165.47.31 | attack | Jun 24 18:24:50 piServer sshd\[21716\]: Invalid user elvis from 49.165.47.31 port 50246 Jun 24 18:24:50 piServer sshd\[21716\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.165.47.31 Jun 24 18:24:52 piServer sshd\[21716\]: Failed password for invalid user elvis from 49.165.47.31 port 50246 ssh2 Jun 24 18:25:09 piServer sshd\[21783\]: Invalid user postgres from 49.165.47.31 port 51340 Jun 24 18:25:09 piServer sshd\[21783\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.165.47.31 ... |
2019-06-25 02:10:18 |
| 104.236.246.16 | attackbots | Jun 24 18:16:35 localhost sshd\[1218\]: Invalid user gl from 104.236.246.16 port 42524 Jun 24 18:16:35 localhost sshd\[1218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.246.16 Jun 24 18:16:37 localhost sshd\[1218\]: Failed password for invalid user gl from 104.236.246.16 port 42524 ssh2 |
2019-06-25 02:29:35 |
| 46.161.14.130 | attackbotsspam | IP: 46.161.14.130 ASN: AS44050 Petersburg Internet Network ltd. Port: http protocol over TLS/SSL 443 Found in one or more Blacklists Date: 24/06/2019 12:00:51 PM UTC |
2019-06-25 01:58:44 |
| 51.79.20.74 | attack | IP: 51.79.20.74 ASN: AS16276 OVH SAS Port: Message Submission 587 Date: 24/06/2019 12:00:54 PM UTC |
2019-06-25 01:55:36 |
| 3.87.71.48 | attack | IP: 3.87.71.48 ASN: AS14618 Amazon.com Inc. Port: http protocol over TLS/SSL 443 Found in one or more Blacklists Date: 24/06/2019 12:00:46 PM UTC |
2019-06-25 02:02:52 |
| 45.32.174.210 | attack | [munged]::443 45.32.174.210 - - [24/Jun/2019:14:12:18 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 45.32.174.210 - - [24/Jun/2019:14:12:20 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 45.32.174.210 - - [24/Jun/2019:14:12:23 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 45.32.174.210 - - [24/Jun/2019:14:12:26 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 45.32.174.210 - - [24/Jun/2019:14:12:29 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 45.32.174.210 - - [24/Jun/2019:14:12:32 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubun |
2019-06-25 01:59:20 |
| 192.99.216.184 | attackbots | ssh failed login |
2019-06-25 02:30:37 |
| 147.210.217.43 | attackspambots | Automatic report - Web App Attack |
2019-06-25 02:24:33 |
| 164.132.171.6 | attack | TCP Port scan. Source port 443 6.171.132.164.in-addr.arpa. 21599 IN PTR proxy-01.27zxc.com. |
2019-06-25 01:49:56 |
| 37.110.210.236 | attack | IP: 37.110.210.236 ASN: AS41202 UNITEL LLC Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 24/06/2019 12:00:48 PM UTC |
2019-06-25 02:00:34 |
| 190.120.191.14 | attackspambots | Unauthorized connection attempt from IP address 190.120.191.14 on Port 445(SMB) |
2019-06-25 02:04:52 |