City: unknown
Region: unknown
Country: Korea Republic of
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.134.12.27
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19683
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;125.134.12.27. IN A
;; AUTHORITY SECTION:
. 452 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011000 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 10 23:28:29 CST 2022
;; MSG SIZE rcvd: 106Host 27.12.134.125.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 27.12.134.125.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 198.245.63.151 | attackbots | Sep 2 00:32:01 www_kotimaassa_fi sshd[27890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.245.63.151 Sep 2 00:32:03 www_kotimaassa_fi sshd[27890]: Failed password for invalid user adam from 198.245.63.151 port 35536 ssh2 ... |
2019-09-02 08:33:21 |
| 80.82.64.127 | attackbotsspam | Port scan on 9 port(s): 1070 1253 1299 1526 1652 1662 1901 1943 1963 |
2019-09-02 08:46:47 |
| 2002:b66c:66d::b66c:66d | attackspam | 2019-09-01 12:28:09 dovecot_login authenticator failed for (gdsxxxmjac.com) [2002:b66c:66d::b66c:66d]:55249 I=[2001:470:1f0f:3ad:bb:dcff:fe50:d900]:25: 535 Incorrect authentication data (set_id=ler@lerctr.org) 2019-09-01 12:28:35 dovecot_login authenticator failed for (gdsxxxmjac.com) [2002:b66c:66d::b66c:66d]:57849 I=[2001:470:1f0f:3ad:bb:dcff:fe50:d900]:25: 535 Incorrect authentication data (set_id=ler@lerctr.org) 2019-09-01 12:29:04 dovecot_login authenticator failed for (gdsxxxmjac.com) [2002:b66c:66d::b66c:66d]:59775 I=[2001:470:1f0f:3ad:bb:dcff:fe50:d900]:25: 535 Incorrect authentication data (set_id=ler@lerctr.org) ... |
2019-09-02 08:26:04 |
| 167.71.40.112 | attack | 2019-09-02T00:05:39.507740 sshd[28817]: Invalid user war from 167.71.40.112 port 33106 2019-09-02T00:05:39.521133 sshd[28817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.40.112 2019-09-02T00:05:39.507740 sshd[28817]: Invalid user war from 167.71.40.112 port 33106 2019-09-02T00:05:41.895891 sshd[28817]: Failed password for invalid user war from 167.71.40.112 port 33106 ssh2 2019-09-02T00:13:03.494976 sshd[28902]: Invalid user bomb from 167.71.40.112 port 51662 ... |
2019-09-02 08:40:20 |
| 79.31.92.33 | attackspambots | Fail2Ban Ban Triggered |
2019-09-02 08:15:49 |
| 139.198.4.44 | attackbots | Sep 1 13:09:39 php2 sshd\[14257\]: Invalid user nash from 139.198.4.44 Sep 1 13:09:39 php2 sshd\[14257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.4.44 Sep 1 13:09:41 php2 sshd\[14257\]: Failed password for invalid user nash from 139.198.4.44 port 58636 ssh2 Sep 1 13:14:39 php2 sshd\[14692\]: Invalid user marcio from 139.198.4.44 Sep 1 13:14:39 php2 sshd\[14692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.4.44 |
2019-09-02 08:12:56 |
| 92.118.37.82 | attackbotsspam | Sep 2 02:03:09 h2177944 kernel: \[259250.707362\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=12776 PROTO=TCP SPT=55326 DPT=25309 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 02:03:20 h2177944 kernel: \[259261.746723\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=59440 PROTO=TCP SPT=55326 DPT=28599 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 02:04:22 h2177944 kernel: \[259324.084524\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=9335 PROTO=TCP SPT=55326 DPT=26581 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 02:06:57 h2177944 kernel: \[259478.739938\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=43128 PROTO=TCP SPT=55326 DPT=22328 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 02:07:05 h2177944 kernel: \[259487.593435\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40 |
2019-09-02 08:10:44 |
| 61.142.247.210 | attackspambots | SPAM Delivery Attempt |
2019-09-02 08:13:29 |
| 177.69.26.97 | attackbots | Sep 1 19:32:45 MK-Soft-VM3 sshd\[4309\]: Invalid user nexus from 177.69.26.97 port 53914 Sep 1 19:32:45 MK-Soft-VM3 sshd\[4309\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.69.26.97 Sep 1 19:32:47 MK-Soft-VM3 sshd\[4309\]: Failed password for invalid user nexus from 177.69.26.97 port 53914 ssh2 ... |
2019-09-02 08:10:15 |
| 80.211.245.183 | attackbotsspam | Sep 1 22:36:28 heissa sshd\[632\]: Invalid user yasmina from 80.211.245.183 port 60346 Sep 1 22:36:28 heissa sshd\[632\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.245.183 Sep 1 22:36:30 heissa sshd\[632\]: Failed password for invalid user yasmina from 80.211.245.183 port 60346 ssh2 Sep 1 22:40:19 heissa sshd\[1170\]: Invalid user msdn from 80.211.245.183 port 47556 Sep 1 22:40:19 heissa sshd\[1170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.245.183 |
2019-09-02 08:48:33 |
| 182.61.182.50 | attackspam | Sep 1 21:06:15 marvibiene sshd[20073]: Invalid user vishvjit from 182.61.182.50 port 48886 Sep 1 21:06:15 marvibiene sshd[20073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.182.50 Sep 1 21:06:15 marvibiene sshd[20073]: Invalid user vishvjit from 182.61.182.50 port 48886 Sep 1 21:06:16 marvibiene sshd[20073]: Failed password for invalid user vishvjit from 182.61.182.50 port 48886 ssh2 ... |
2019-09-02 08:02:57 |
| 117.69.51.164 | attack | 2019-09-01 12:28:29 dovecot_login authenticator failed for (rlrnlskrgk.com) [117.69.51.164]:51887 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=ler@lerctr.org) 2019-09-01 12:28:39 dovecot_login authenticator failed for (rlrnlskrgk.com) [117.69.51.164]:52250 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=ler@lerctr.org) 2019-09-01 12:28:52 dovecot_login authenticator failed for (rlrnlskrgk.com) [117.69.51.164]:52969 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=ler@lerctr.org) ... |
2019-09-02 08:35:05 |
| 62.234.99.172 | attackspam | Sep 1 19:24:52 markkoudstaal sshd[30897]: Failed password for root from 62.234.99.172 port 56799 ssh2 Sep 1 19:29:32 markkoudstaal sshd[31372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.99.172 Sep 1 19:29:34 markkoudstaal sshd[31372]: Failed password for invalid user pck from 62.234.99.172 port 49152 ssh2 |
2019-09-02 08:09:47 |
| 194.88.204.163 | attackspambots | frenzy |
2019-09-02 08:25:08 |
| 138.197.195.52 | attackbots | Sep 1 22:33:49 nextcloud sshd\[24489\]: Invalid user tester from 138.197.195.52 Sep 1 22:33:49 nextcloud sshd\[24489\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.195.52 Sep 1 22:33:51 nextcloud sshd\[24489\]: Failed password for invalid user tester from 138.197.195.52 port 56124 ssh2 ... |
2019-09-02 08:38:35 |