City: Gangnam-gu
Region: Seoul Special City
Country: South Korea
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.138.16.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24335
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;121.138.16.29. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012000 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 20 23:35:18 CST 2025
;; MSG SIZE rcvd: 106
Host 29.16.138.121.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 29.16.138.121.in-addr.arpa: NXDOMAIN
IP | Type | Details | Datetime |
---|---|---|---|
78.201.227.55 | attackbots | SSH-bruteforce attempts |
2019-11-26 15:18:39 |
185.74.5.170 | attackbotsspam | Nov 26 08:24:08 mc1 kernel: \[6039280.407645\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.74.5.170 DST=159.69.205.51 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=44246 PROTO=TCP SPT=56292 DPT=1751 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 26 08:24:19 mc1 kernel: \[6039291.955723\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.74.5.170 DST=159.69.205.51 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=45730 PROTO=TCP SPT=56292 DPT=2247 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 26 08:28:08 mc1 kernel: \[6039520.715011\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.74.5.170 DST=159.69.205.51 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=62331 PROTO=TCP SPT=56292 DPT=1627 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-26 15:36:46 |
46.166.151.47 | attack | \[2019-11-26 01:53:22\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-26T01:53:22.761-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="002146462607501",SessionID="0x7f26c4715dc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.47/50525",ACLName="no_extension_match" \[2019-11-26 01:54:45\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-26T01:54:45.055-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="0002146462607501",SessionID="0x7f26c4715dc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.47/56782",ACLName="no_extension_match" \[2019-11-26 01:56:02\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-26T01:56:02.946-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="00146462607501",SessionID="0x7f26c46b9ac8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.47/54930",ACLName="no_ext |
2019-11-26 15:19:13 |
212.64.91.66 | attackspam | Nov 26 07:08:06 hcbbdb sshd\[24821\]: Invalid user kathryn123 from 212.64.91.66 Nov 26 07:08:06 hcbbdb sshd\[24821\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.91.66 Nov 26 07:08:08 hcbbdb sshd\[24821\]: Failed password for invalid user kathryn123 from 212.64.91.66 port 46650 ssh2 Nov 26 07:15:24 hcbbdb sshd\[25589\]: Invalid user copper from 212.64.91.66 Nov 26 07:15:24 hcbbdb sshd\[25589\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.91.66 |
2019-11-26 15:27:28 |
49.234.13.138 | attackspambots | Port scan on 2 port(s): 2375 4243 |
2019-11-26 15:28:54 |
218.92.0.154 | attackspambots | Nov 26 10:32:19 hosting sshd[5526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.154 user=root Nov 26 10:32:21 hosting sshd[5526]: Failed password for root from 218.92.0.154 port 37142 ssh2 ... |
2019-11-26 15:38:41 |
124.155.244.188 | attackspam | Automatic report - Banned IP Access |
2019-11-26 15:12:11 |
45.136.108.85 | attackspambots | SSH bruteforce (Triggered fail2ban) Nov 26 08:27:52 dev1 sshd[145566]: Disconnecting invalid user 0 45.136.108.85 port 63478: Change of username or service not allowed: (0,ssh-connection) -> (22,ssh-connection) [preauth] |
2019-11-26 15:35:13 |
42.104.97.228 | attack | Nov 26 13:31:25 webhost01 sshd[31717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.104.97.228 Nov 26 13:31:28 webhost01 sshd[31717]: Failed password for invalid user $rfvvfr4 from 42.104.97.228 port 52065 ssh2 ... |
2019-11-26 15:03:35 |
58.229.208.187 | attackbotsspam | Nov 26 08:10:46 lnxded64 sshd[28536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.229.208.187 |
2019-11-26 15:38:13 |
218.92.0.145 | attackspambots | Nov 26 08:00:36 jane sshd[19625]: Failed password for root from 218.92.0.145 port 31240 ssh2 Nov 26 08:00:41 jane sshd[19625]: Failed password for root from 218.92.0.145 port 31240 ssh2 ... |
2019-11-26 15:09:07 |
45.85.213.167 | attackbots | Fail2Ban Ban Triggered |
2019-11-26 15:15:07 |
77.77.149.170 | attackbots | Detected by ModSecurity. Request URI: /.well-known/pki-validation/760F43E49E84AD0F9CD57D5AFEAE61DC.txt |
2019-11-26 15:35:44 |
119.18.154.196 | attackbotsspam | 2019-11-26 00:29:08 H=(ip-154-194.jlm.net.id) [119.18.154.196]:52812 I=[192.147.25.65]:25 F= |
2019-11-26 15:43:02 |
106.13.7.186 | attackbotsspam | Nov 26 13:23:47 itv-usvr-01 sshd[28828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.7.186 user=root Nov 26 13:23:48 itv-usvr-01 sshd[28828]: Failed password for root from 106.13.7.186 port 60782 ssh2 Nov 26 13:29:26 itv-usvr-01 sshd[29071]: Invalid user dovecot from 106.13.7.186 Nov 26 13:29:26 itv-usvr-01 sshd[29071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.7.186 Nov 26 13:29:26 itv-usvr-01 sshd[29071]: Invalid user dovecot from 106.13.7.186 Nov 26 13:29:28 itv-usvr-01 sshd[29071]: Failed password for invalid user dovecot from 106.13.7.186 port 42844 ssh2 |
2019-11-26 15:28:00 |