City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.138.16.220
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25079
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;120.138.16.220. IN A
;; AUTHORITY SECTION:
. 226 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400
;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 10:45:04 CST 2022
;; MSG SIZE rcvd: 107220.16.138.120.in-addr.arpa domain name pointer rdns.120.138.16.220.sth.nz.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
220.16.138.120.in-addr.arpa name = rdns.120.138.16.220.sth.nz.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.209.148.107 | attackspambots | [N1.H1.VM1] Port Scanner Detected Blocked by UFW |
2020-09-30 03:43:16 |
| 192.141.144.38 | attackbots | Sep 28 22:36:09 mxgate1 postfix/postscreen[28212]: CONNECT from [192.141.144.38]:31112 to [176.31.12.44]:25 Sep 28 22:36:09 mxgate1 postfix/dnsblog[28213]: addr 192.141.144.38 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Sep 28 22:36:09 mxgate1 postfix/dnsblog[28215]: addr 192.141.144.38 listed by domain b.barracudacentral.org as 127.0.0.2 Sep 28 22:36:10 mxgate1 postfix/dnsblog[28214]: addr 192.141.144.38 listed by domain cbl.abuseat.org as 127.0.0.2 Sep 28 22:36:10 mxgate1 postfix/dnsblog[28216]: addr 192.141.144.38 listed by domain zen.spamhaus.org as 127.0.0.4 Sep 28 22:36:10 mxgate1 postfix/dnsblog[28216]: addr 192.141.144.38 listed by domain zen.spamhaus.org as 127.0.0.3 Sep 28 22:36:15 mxgate1 postfix/postscreen[28212]: DNSBL rank 5 for [192.141.144.38]:31112 Sep x@x Sep 28 22:36:16 mxgate1 postfix/postscreen[28212]: HANGUP after 1.2 from [192.141.144.38]:31112 in tests after SMTP handshake Sep 28 22:36:16 mxgate1 postfix/postscreen[28212]: DISCONNECT [192.1........ ------------------------------- |
2020-09-30 03:49:18 |
| 157.245.70.68 | attackbots | 7722/tcp 2822/tcp 6122/tcp... [2020-09-23/29]19pkt,19pt.(tcp) |
2020-09-30 03:51:12 |
| 176.111.173.23 | attackspam | Rude login attack (12 tries in 1d) |
2020-09-30 03:49:46 |
| 192.241.223.72 | attack | SMB Server BruteForce Attack |
2020-09-30 03:21:33 |
| 149.202.175.11 | attack | $f2bV_matches |
2020-09-30 03:51:48 |
| 43.231.129.193 | attack | Invalid user rahul from 43.231.129.193 port 60560 |
2020-09-30 03:31:36 |
| 103.131.71.163 | attackbots | (mod_security) mod_security (id:210730) triggered by 103.131.71.163 (VN/Vietnam/bot-103-131-71-163.coccoc.com): 5 in the last 3600 secs |
2020-09-30 03:50:33 |
| 137.74.219.115 | attackbots | Invalid user database from 137.74.219.115 port 44976 |
2020-09-30 03:34:39 |
| 51.77.146.170 | attackbotsspam | Sep 29 10:58:44 mockhub sshd[177296]: Invalid user alexis from 51.77.146.170 port 48990 Sep 29 10:58:47 mockhub sshd[177296]: Failed password for invalid user alexis from 51.77.146.170 port 48990 ssh2 Sep 29 10:59:55 mockhub sshd[177343]: Invalid user charles from 51.77.146.170 port 39938 ... |
2020-09-30 03:23:05 |
| 173.0.84.226 | attackspam | Unauthorized connection attempt from IP address 173.0.84.226 on Port 25(SMTP) |
2020-09-30 03:37:49 |
| 160.179.149.56 | attack | Sep 28 22:32:00 ns3164893 sshd[3305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.179.149.56 Sep 28 22:32:01 ns3164893 sshd[3305]: Failed password for invalid user ubnt from 160.179.149.56 port 63631 ssh2 ... |
2020-09-30 03:45:16 |
| 125.162.208.114 | attackspambots | Sep 28 22:36:19 iago sshd[24684]: Did not receive identification string from 125.162.208.114 Sep 28 22:36:28 iago sshd[24689]: Address 125.162.208.114 maps to 114.subnet125-162-208.speedy.telkom.net.id, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 28 22:36:28 iago sshd[24689]: Invalid user service from 125.162.208.114 Sep 28 22:36:28 iago sshd[24689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.162.208.114 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=125.162.208.114 |
2020-09-30 03:58:38 |
| 110.49.70.248 | attackbots | Sep 29 19:06:07 localhost sshd\[25031\]: Invalid user server from 110.49.70.248 port 48646 Sep 29 19:06:07 localhost sshd\[25031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.49.70.248 Sep 29 19:06:10 localhost sshd\[25031\]: Failed password for invalid user server from 110.49.70.248 port 48646 ssh2 ... |
2020-09-30 03:46:28 |
| 1.196.253.13 | attackbots | 20 attempts against mh-ssh on air |
2020-09-30 03:46:10 |