City: Iksan
Region: Jeollabuk-do
Country: South Korea
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.245.29.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25079
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;1.245.29.141. IN A
;; AUTHORITY SECTION:
. 193 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022012200 1800 900 604800 86400
;; Query time: 81 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 22 20:34:10 CST 2022
;; MSG SIZE rcvd: 105Host 141.29.245.1.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 141.29.245.1.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.217.234.68 | attackspambots | Dec 16 23:19:29 h2812830 sshd[5725]: Invalid user uucp from 139.217.234.68 port 35908 Dec 16 23:19:29 h2812830 sshd[5725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.234.68 Dec 16 23:19:29 h2812830 sshd[5725]: Invalid user uucp from 139.217.234.68 port 35908 Dec 16 23:19:31 h2812830 sshd[5725]: Failed password for invalid user uucp from 139.217.234.68 port 35908 ssh2 Dec 16 23:31:38 h2812830 sshd[5915]: Invalid user guest from 139.217.234.68 port 36944 ... |
2019-12-17 06:46:22 |
| 120.29.158.113 | attackbotsspam | Dec 16 21:59:13 system,error,critical: login failure for user admin from 120.29.158.113 via telnet Dec 16 21:59:14 system,error,critical: login failure for user mother from 120.29.158.113 via telnet Dec 16 21:59:15 system,error,critical: login failure for user root from 120.29.158.113 via telnet Dec 16 21:59:16 system,error,critical: login failure for user root from 120.29.158.113 via telnet Dec 16 21:59:17 system,error,critical: login failure for user root from 120.29.158.113 via telnet Dec 16 21:59:18 system,error,critical: login failure for user root from 120.29.158.113 via telnet Dec 16 21:59:20 system,error,critical: login failure for user root from 120.29.158.113 via telnet Dec 16 21:59:21 system,error,critical: login failure for user root from 120.29.158.113 via telnet Dec 16 21:59:22 system,error,critical: login failure for user root from 120.29.158.113 via telnet Dec 16 21:59:23 system,error,critical: login failure for user root from 120.29.158.113 via telnet |
2019-12-17 06:49:25 |
| 144.217.213.131 | attackspam | 2019-12-16 16:09:24 dovecot_login authenticator failed for ip131.ip-144-217-213.net (D18ebpH9Tw) [144.217.213.131]:53875 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=donsanders@lerctr.org) 2019-12-16 16:09:40 dovecot_login authenticator failed for ip131.ip-144-217-213.net (x7MVdke) [144.217.213.131]:49539 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=donsanders@lerctr.org) 2019-12-16 16:10:00 dovecot_login authenticator failed for ip131.ip-144-217-213.net (0hKi54PPn) [144.217.213.131]:51828 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=donsanders@lerctr.org) ... |
2019-12-17 06:29:13 |
| 36.70.73.247 | attackbots | 1576533562 - 12/16/2019 22:59:22 Host: 36.70.73.247/36.70.73.247 Port: 445 TCP Blocked |
2019-12-17 06:50:44 |
| 106.13.145.183 | attackbotsspam | Dec 16 23:16:14 mail sshd[6524]: Failed password for root from 106.13.145.183 port 57782 ssh2 Dec 16 23:21:51 mail sshd[8591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.145.183 Dec 16 23:21:53 mail sshd[8591]: Failed password for invalid user test from 106.13.145.183 port 55436 ssh2 |
2019-12-17 06:27:01 |
| 87.239.85.169 | attackbotsspam | Dec 16 23:08:13 OPSO sshd\[2596\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.239.85.169 user=root Dec 16 23:08:15 OPSO sshd\[2596\]: Failed password for root from 87.239.85.169 port 53648 ssh2 Dec 16 23:13:54 OPSO sshd\[4348\]: Invalid user raaen from 87.239.85.169 port 37712 Dec 16 23:13:54 OPSO sshd\[4348\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.239.85.169 Dec 16 23:13:56 OPSO sshd\[4348\]: Failed password for invalid user raaen from 87.239.85.169 port 37712 ssh2 |
2019-12-17 06:20:28 |
| 187.12.181.106 | attackspambots | Dec 16 21:51:48 hcbbdb sshd\[3555\]: Invalid user yeen from 187.12.181.106 Dec 16 21:51:48 hcbbdb sshd\[3555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.12.181.106 Dec 16 21:51:50 hcbbdb sshd\[3555\]: Failed password for invalid user yeen from 187.12.181.106 port 46706 ssh2 Dec 16 21:59:49 hcbbdb sshd\[4553\]: Invalid user ftp_user from 187.12.181.106 Dec 16 21:59:49 hcbbdb sshd\[4553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.12.181.106 |
2019-12-17 06:19:39 |
| 51.68.192.106 | attack | Dec 16 12:33:37 tdfoods sshd\[18142\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip106.ip-51-68-192.eu user=root Dec 16 12:33:39 tdfoods sshd\[18142\]: Failed password for root from 51.68.192.106 port 34158 ssh2 Dec 16 12:38:34 tdfoods sshd\[18593\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip106.ip-51-68-192.eu user=root Dec 16 12:38:36 tdfoods sshd\[18593\]: Failed password for root from 51.68.192.106 port 41540 ssh2 Dec 16 12:43:28 tdfoods sshd\[19094\]: Invalid user 1 from 51.68.192.106 |
2019-12-17 06:43:59 |
| 59.112.252.241 | attackspambots | Dec 17 00:20:36 sauna sshd[202764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.112.252.241 Dec 17 00:20:39 sauna sshd[202764]: Failed password for invalid user peterp from 59.112.252.241 port 54974 ssh2 ... |
2019-12-17 06:54:42 |
| 40.92.42.95 | attack | Dec 17 00:59:45 debian-2gb-vpn-nbg1-1 kernel: [911953.621768] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.42.95 DST=78.46.192.101 LEN=48 TOS=0x00 PREC=0x00 TTL=102 ID=19554 DF PROTO=TCP SPT=6369 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0 |
2019-12-17 06:30:26 |
| 106.12.137.226 | attackspambots | Dec 17 00:34:12 sauna sshd[203149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.137.226 Dec 17 00:34:13 sauna sshd[203149]: Failed password for invalid user tmp from 106.12.137.226 port 54140 ssh2 ... |
2019-12-17 06:38:57 |
| 154.8.185.122 | attack | 2019-12-16T22:59:17.615650centos sshd\[13940\]: Invalid user eminem from 154.8.185.122 port 36486 2019-12-16T22:59:17.624172centos sshd\[13940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.185.122 2019-12-16T22:59:20.032266centos sshd\[13940\]: Failed password for invalid user eminem from 154.8.185.122 port 36486 ssh2 |
2019-12-17 06:51:12 |
| 199.116.112.245 | attackspam | Dec 16 22:34:13 web8 sshd\[28946\]: Invalid user guns from 199.116.112.245 Dec 16 22:34:13 web8 sshd\[28946\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.116.112.245 Dec 16 22:34:15 web8 sshd\[28946\]: Failed password for invalid user guns from 199.116.112.245 port 45345 ssh2 Dec 16 22:41:03 web8 sshd\[32230\]: Invalid user torsvik from 199.116.112.245 Dec 16 22:41:03 web8 sshd\[32230\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.116.112.245 |
2019-12-17 06:53:12 |
| 52.59.10.212 | attackspam | B: File scanning |
2019-12-17 06:52:56 |
| 118.89.237.20 | attackbotsspam | Dec 16 23:13:14 OPSO sshd\[4114\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.237.20 user=root Dec 16 23:13:16 OPSO sshd\[4114\]: Failed password for root from 118.89.237.20 port 49052 ssh2 Dec 16 23:19:08 OPSO sshd\[5513\]: Invalid user kalair from 118.89.237.20 port 48978 Dec 16 23:19:08 OPSO sshd\[5513\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.237.20 Dec 16 23:19:10 OPSO sshd\[5513\]: Failed password for invalid user kalair from 118.89.237.20 port 48978 ssh2 |
2019-12-17 06:26:10 |