City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 12.102.130.234
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16789
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;12.102.130.234. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021500 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 19:54:11 CST 2025
;; MSG SIZE rcvd: 107234.130.102.12.in-addr.arpa domain name pointer 234.sue130.chcg.cgcil01r18.dsl.att.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
234.130.102.12.in-addr.arpa name = 234.sue130.chcg.cgcil01r18.dsl.att.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.92.0.199 | attack | Feb 15 08:14:51 dcd-gentoo sshd[6952]: User root from 218.92.0.199 not allowed because none of user's groups are listed in AllowGroups Feb 15 08:14:54 dcd-gentoo sshd[6952]: error: PAM: Authentication failure for illegal user root from 218.92.0.199 Feb 15 08:14:51 dcd-gentoo sshd[6952]: User root from 218.92.0.199 not allowed because none of user's groups are listed in AllowGroups Feb 15 08:14:54 dcd-gentoo sshd[6952]: error: PAM: Authentication failure for illegal user root from 218.92.0.199 Feb 15 08:14:51 dcd-gentoo sshd[6952]: User root from 218.92.0.199 not allowed because none of user's groups are listed in AllowGroups Feb 15 08:14:54 dcd-gentoo sshd[6952]: error: PAM: Authentication failure for illegal user root from 218.92.0.199 Feb 15 08:14:54 dcd-gentoo sshd[6952]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.199 port 55364 ssh2 ... |
2020-02-15 15:33:19 |
| 115.216.156.42 | attackbotsspam | unauthorized connection attempt |
2020-02-15 15:30:37 |
| 218.85.213.15 | attack | unauthorized connection attempt |
2020-02-15 15:32:32 |
| 193.35.48.51 | attack | 2020-02-15 07:10:18 dovecot_login authenticator failed for \(\[193.35.48.51\]\) \[193.35.48.51\]: 535 Incorrect authentication data \(set_id=amministrazione@opso.it\) 2020-02-15 07:10:26 dovecot_login authenticator failed for \(\[193.35.48.51\]\) \[193.35.48.51\]: 535 Incorrect authentication data 2020-02-15 07:10:35 dovecot_login authenticator failed for \(\[193.35.48.51\]\) \[193.35.48.51\]: 535 Incorrect authentication data 2020-02-15 07:10:42 dovecot_login authenticator failed for \(\[193.35.48.51\]\) \[193.35.48.51\]: 535 Incorrect authentication data 2020-02-15 07:10:54 dovecot_login authenticator failed for \(\[193.35.48.51\]\) \[193.35.48.51\]: 535 Incorrect authentication data |
2020-02-15 15:09:26 |
| 222.186.30.35 | attackspambots | 2020-02-15T07:18:55.843738scmdmz1 sshd[25333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.35 user=root 2020-02-15T07:18:57.622218scmdmz1 sshd[25333]: Failed password for root from 222.186.30.35 port 58939 ssh2 2020-02-15T07:19:01.968106scmdmz1 sshd[25333]: Failed password for root from 222.186.30.35 port 58939 ssh2 2020-02-15T07:18:55.843738scmdmz1 sshd[25333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.35 user=root 2020-02-15T07:18:57.622218scmdmz1 sshd[25333]: Failed password for root from 222.186.30.35 port 58939 ssh2 2020-02-15T07:19:01.968106scmdmz1 sshd[25333]: Failed password for root from 222.186.30.35 port 58939 ssh2 2020-02-15T07:18:55.843738scmdmz1 sshd[25333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.35 user=root 2020-02-15T07:18:57.622218scmdmz1 sshd[25333]: Failed password for root from 222.186.30.35 port 58939 ssh2 2020-02-1 |
2020-02-15 14:53:49 |
| 80.82.77.232 | attack | Feb 15 06:22:26 debian-2gb-nbg1-2 kernel: \[4003370.459196\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.77.232 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=63688 PROTO=TCP SPT=44134 DPT=3353 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-02-15 15:25:50 |
| 159.226.169.49 | attack | Feb 15 05:53:45 localhost sshd\[32734\]: Invalid user empleado from 159.226.169.49 port 54025 Feb 15 05:53:45 localhost sshd\[32734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.226.169.49 Feb 15 05:53:47 localhost sshd\[32734\]: Failed password for invalid user empleado from 159.226.169.49 port 54025 ssh2 |
2020-02-15 15:04:37 |
| 47.74.231.192 | attack | Feb 15 05:53:45 pornomens sshd\[32170\]: Invalid user clementine from 47.74.231.192 port 43438 Feb 15 05:53:45 pornomens sshd\[32170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.74.231.192 Feb 15 05:53:47 pornomens sshd\[32170\]: Failed password for invalid user clementine from 47.74.231.192 port 43438 ssh2 ... |
2020-02-15 15:04:49 |
| 111.254.39.8 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-15 14:57:21 |
| 117.50.126.4 | attack | Port probing on unauthorized port 1433 |
2020-02-15 14:51:14 |
| 115.178.100.70 | attack | Feb 14 09:50:48 server sshd\[4608\]: Invalid user admin from 115.178.100.70 Feb 14 09:50:48 server sshd\[4608\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.178.100.70 Feb 14 09:50:50 server sshd\[4608\]: Failed password for invalid user admin from 115.178.100.70 port 64915 ssh2 Feb 15 07:53:58 server sshd\[25718\]: Invalid user admin from 115.178.100.70 Feb 15 07:53:58 server sshd\[25718\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.178.100.70 ... |
2020-02-15 14:57:01 |
| 203.147.74.216 | attackbots | (imapd) Failed IMAP login from 203.147.74.216 (NC/New Caledonia/host-203-147-74-216.h27.canl.nc): 1 in the last 3600 secs |
2020-02-15 15:04:10 |
| 87.27.199.200 | attack | Feb 15 05:54:03 localhost kernel: [1526397.963721] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=87.27.199.200 DST=91.205.173.180 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=25865 DF PROTO=TCP SPT=65126 DPT=8291 WINDOW=8192 RES=0x00 SYN URGP=0 Feb 15 05:54:04 localhost kernel: [1526398.514672] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=87.27.199.200 DST=91.205.173.180 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=30816 DF PROTO=TCP SPT=65126 DPT=8291 WINDOW=8192 RES=0x00 SYN URGP=0 Feb 15 05:54:08 localhost kernel: [1526402.248964] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=87.27.199.200 DST=91.205.173.180 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=19443 DF PROTO=TCP SPT=65126 DPT=8291 WINDOW=8192 RES=0x00 SYN URGP=0 |
2020-02-15 14:47:52 |
| 122.227.230.11 | attackbots | Feb 15 05:47:32 MK-Soft-Root1 sshd[23787]: Failed password for root from 122.227.230.11 port 42938 ssh2 Feb 15 05:53:29 MK-Soft-Root1 sshd[25196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.227.230.11 ... |
2020-02-15 15:21:17 |
| 159.65.146.141 | attack | Invalid user cron from 159.65.146.141 port 44942 |
2020-02-15 15:13:31 |