City: unknown
Region: unknown
Country: Russian Federation (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.41.89.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48458
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.41.89.242. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021301 1800 900 604800 86400
;; Query time: 178 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 05:49:17 CST 2025
;; MSG SIZE rcvd: 105
242.89.41.94.in-addr.arpa domain name pointer 94.41.89.242.dynamic.ufanet.ru.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
242.89.41.94.in-addr.arpa name = 94.41.89.242.dynamic.ufanet.ru.
Authoritative answers can be found from:
IP | Type | Details | Datetime |
---|---|---|---|
183.111.227.5 | attack | Oct 17 14:09:42 OPSO sshd\[21607\]: Invalid user abcde123 from 183.111.227.5 port 46354 Oct 17 14:09:42 OPSO sshd\[21607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.111.227.5 Oct 17 14:09:45 OPSO sshd\[21607\]: Failed password for invalid user abcde123 from 183.111.227.5 port 46354 ssh2 Oct 17 14:15:37 OPSO sshd\[23066\]: Invalid user srlre+pbgf from 183.111.227.5 port 57426 Oct 17 14:15:37 OPSO sshd\[23066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.111.227.5 |
2019-10-18 00:39:09 |
68.183.178.162 | attackspambots | Oct 17 03:46:29 sachi sshd\[16561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.178.162 user=root Oct 17 03:46:31 sachi sshd\[16561\]: Failed password for root from 68.183.178.162 port 60664 ssh2 Oct 17 03:50:53 sachi sshd\[17001\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.178.162 user=root Oct 17 03:50:56 sachi sshd\[17001\]: Failed password for root from 68.183.178.162 port 43584 ssh2 Oct 17 03:55:14 sachi sshd\[17382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.178.162 user=root |
2019-10-18 00:23:36 |
187.108.32.14 | attackspam | Oct 15 15:03:18 xxxxxxx0 sshd[11855]: Invalid user daren from 187.108.32.14 port 31786 Oct 15 15:03:18 xxxxxxx0 sshd[11855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.108.32.14 Oct 15 15:03:20 xxxxxxx0 sshd[11855]: Failed password for invalid user daren from 187.108.32.14 port 31786 ssh2 Oct 15 15:19:10 xxxxxxx0 sshd[15240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.108.32.14 user=r.r Oct 15 15:19:12 xxxxxxx0 sshd[15240]: Failed password for r.r from 187.108.32.14 port 26404 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=187.108.32.14 |
2019-10-18 00:18:00 |
89.191.102.78 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/89.191.102.78/ LV - 1H : (7) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : LV NAME ASN : ASN20910 IP : 89.191.102.78 CIDR : 89.191.96.0/19 PREFIX COUNT : 31 UNIQUE IP COUNT : 272384 WYKRYTE ATAKI Z ASN20910 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-17 13:39:12 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery |
2019-10-18 00:44:31 |
83.53.165.252 | attackbots | (From mark@markmidd.com) Hello there, Do you consider your website promotion important and like to see remarkable results? Then, maybe you already discovered one of the easiest and proven ways to promote your website is by links. Search engines like to see links. My site www.markmidd.com is looking to promote worthy websites. Building links will help to guarantee an increase in your ranks so you can go here to add your site for promotion and we will add your relevant link: www.markmidd.com Best Regards, Mark |
2019-10-18 00:32:27 |
171.244.51.114 | attackspam | Oct 17 03:18:48 auw2 sshd\[13444\]: Invalid user wsxcde32 from 171.244.51.114 Oct 17 03:18:48 auw2 sshd\[13444\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.51.114 Oct 17 03:18:50 auw2 sshd\[13444\]: Failed password for invalid user wsxcde32 from 171.244.51.114 port 33650 ssh2 Oct 17 03:25:50 auw2 sshd\[13954\]: Invalid user speedway from 171.244.51.114 Oct 17 03:25:50 auw2 sshd\[13954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.51.114 |
2019-10-18 00:34:09 |
139.59.14.115 | attackspam | [munged]::443 139.59.14.115 - - [17/Oct/2019:14:32:52 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 139.59.14.115 - - [17/Oct/2019:14:32:55 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 139.59.14.115 - - [17/Oct/2019:14:32:58 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 139.59.14.115 - - [17/Oct/2019:14:33:00 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 139.59.14.115 - - [17/Oct/2019:14:33:02 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 139.59.14.115 - - [17/Oct/2019:14:33:05 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubun |
2019-10-18 00:28:00 |
222.186.175.212 | attackbotsspam | Oct 17 17:41:12 rotator sshd\[31037\]: Failed password for root from 222.186.175.212 port 57784 ssh2Oct 17 17:41:16 rotator sshd\[31037\]: Failed password for root from 222.186.175.212 port 57784 ssh2Oct 17 17:41:21 rotator sshd\[31037\]: Failed password for root from 222.186.175.212 port 57784 ssh2Oct 17 17:41:25 rotator sshd\[31037\]: Failed password for root from 222.186.175.212 port 57784 ssh2Oct 17 17:41:29 rotator sshd\[31037\]: Failed password for root from 222.186.175.212 port 57784 ssh2Oct 17 17:41:40 rotator sshd\[31058\]: Failed password for root from 222.186.175.212 port 53318 ssh2 ... |
2019-10-18 00:28:57 |
89.45.17.11 | attackspambots | 2019-10-17T15:35:24.963020shield sshd\[12412\]: Invalid user jasper from 89.45.17.11 port 43369 2019-10-17T15:35:24.968122shield sshd\[12412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.45.17.11 2019-10-17T15:35:27.437790shield sshd\[12412\]: Failed password for invalid user jasper from 89.45.17.11 port 43369 ssh2 2019-10-17T15:39:49.260108shield sshd\[12979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.45.17.11 user=root 2019-10-17T15:39:51.107884shield sshd\[12979\]: Failed password for root from 89.45.17.11 port 34790 ssh2 |
2019-10-18 00:35:07 |
222.186.180.17 | attack | Oct 17 18:12:53 vpn01 sshd[27620]: Failed password for root from 222.186.180.17 port 21370 ssh2 Oct 17 18:12:57 vpn01 sshd[27620]: Failed password for root from 222.186.180.17 port 21370 ssh2 ... |
2019-10-18 00:36:06 |
140.143.30.191 | attackbotsspam | Jan 26 14:52:20 odroid64 sshd\[4364\]: Invalid user mapred from 140.143.30.191 Jan 26 14:52:20 odroid64 sshd\[4364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.30.191 Jan 26 14:52:22 odroid64 sshd\[4364\]: Failed password for invalid user mapred from 140.143.30.191 port 56936 ssh2 Feb 27 21:40:15 odroid64 sshd\[30656\]: Invalid user vaibhav from 140.143.30.191 Feb 27 21:40:15 odroid64 sshd\[30656\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.30.191 Feb 27 21:40:17 odroid64 sshd\[30656\]: Failed password for invalid user vaibhav from 140.143.30.191 port 33166 ssh2 Feb 28 23:29:46 odroid64 sshd\[10440\]: Invalid user website from 140.143.30.191 Feb 28 23:29:46 odroid64 sshd\[10440\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.30.191 Feb 28 23:29:47 odroid64 sshd\[10440\]: Failed password for invalid user website from 140. ... |
2019-10-18 00:19:17 |
80.82.77.33 | attackbots | 10/17/2019-10:56:33.496568 80.82.77.33 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 82 |
2019-10-18 00:27:10 |
45.55.206.241 | attack | Oct 17 15:07:08 server sshd\[25365\]: Invalid user admin from 45.55.206.241 port 58487 Oct 17 15:07:08 server sshd\[25365\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.206.241 Oct 17 15:07:10 server sshd\[25365\]: Failed password for invalid user admin from 45.55.206.241 port 58487 ssh2 Oct 17 15:11:09 server sshd\[11542\]: User root from 45.55.206.241 not allowed because listed in DenyUsers Oct 17 15:11:09 server sshd\[11542\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.206.241 user=root |
2019-10-18 00:42:27 |
133.232.83.93 | attack | Automatic report - Port Scan Attack |
2019-10-18 00:34:42 |
35.195.238.142 | attack | Oct 17 17:18:24 MainVPS sshd[8385]: Invalid user PASSWORDs1 from 35.195.238.142 port 45638 Oct 17 17:18:24 MainVPS sshd[8385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.195.238.142 Oct 17 17:18:24 MainVPS sshd[8385]: Invalid user PASSWORDs1 from 35.195.238.142 port 45638 Oct 17 17:18:27 MainVPS sshd[8385]: Failed password for invalid user PASSWORDs1 from 35.195.238.142 port 45638 ssh2 Oct 17 17:22:09 MainVPS sshd[8642]: Invalid user backup@123 from 35.195.238.142 port 56162 ... |
2019-10-18 00:09:04 |