City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.12.47.27
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62263
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.12.47.27. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013000 1800 900 604800 86400
;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 16:45:21 CST 2025
;; MSG SIZE rcvd: 105Host 27.47.12.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 27.47.12.139.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 108.52.107.31 | attackbots | 2019-09-04T09:54:18.535388hub.schaetter.us sshd\[8165\]: Invalid user notice from 108.52.107.31 2019-09-04T09:54:18.568803hub.schaetter.us sshd\[8165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=pool-108-52-107-31.phlapa.fios.verizon.net 2019-09-04T09:54:20.188663hub.schaetter.us sshd\[8165\]: Failed password for invalid user notice from 108.52.107.31 port 39410 ssh2 2019-09-04T09:58:14.763898hub.schaetter.us sshd\[8194\]: Invalid user jira from 108.52.107.31 2019-09-04T09:58:14.799984hub.schaetter.us sshd\[8194\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=pool-108-52-107-31.phlapa.fios.verizon.net ... |
2019-09-04 19:44:38 |
| 190.228.16.101 | attackspam | Sep 4 10:23:14 mail sshd\[1246\]: Invalid user saulo from 190.228.16.101 Sep 4 10:23:14 mail sshd\[1246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.228.16.101 Sep 4 10:23:16 mail sshd\[1246\]: Failed password for invalid user saulo from 190.228.16.101 port 47486 ssh2 ... |
2019-09-04 19:22:20 |
| 51.68.173.253 | attackspam | Sep 04 00:29:39 askasleikir sshd[25119]: Failed password for invalid user cod4server from 51.68.173.253 port 52948 ssh2 |
2019-09-04 19:16:28 |
| 67.207.94.61 | attack | [WP scan/spam/exploit] [bad UserAgent] Blocklist.DE:"listed [bruteforcelogin]" SpamCop:"listed" SORBS:"listed [spam]" ProjectHoneyPot: [Suspicious] |
2019-09-04 19:58:01 |
| 91.132.103.64 | attackbotsspam | Sep 4 10:59:27 legacy sshd[14586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.132.103.64 Sep 4 10:59:29 legacy sshd[14586]: Failed password for invalid user nano from 91.132.103.64 port 42848 ssh2 Sep 4 11:03:28 legacy sshd[14673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.132.103.64 ... |
2019-09-04 19:23:23 |
| 103.207.39.193 | attack | 2019-09-04T12:06:51.849938MailD postfix/smtpd[5804]: warning: unknown[103.207.39.193]: SASL LOGIN authentication failed: authentication failure 2019-09-04T12:06:53.549425MailD postfix/smtpd[5804]: warning: unknown[103.207.39.193]: SASL LOGIN authentication failed: authentication failure 2019-09-04T12:06:55.231910MailD postfix/smtpd[5804]: warning: unknown[103.207.39.193]: SASL LOGIN authentication failed: authentication failure |
2019-09-04 19:27:15 |
| 218.98.40.140 | attackspam | Sep 4 00:59:24 hanapaa sshd\[16736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.40.140 user=root Sep 4 00:59:26 hanapaa sshd\[16736\]: Failed password for root from 218.98.40.140 port 56867 ssh2 Sep 4 00:59:34 hanapaa sshd\[16746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.40.140 user=root Sep 4 00:59:37 hanapaa sshd\[16746\]: Failed password for root from 218.98.40.140 port 28148 ssh2 Sep 4 00:59:45 hanapaa sshd\[16764\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.40.140 user=root |
2019-09-04 19:13:54 |
| 24.106.125.38 | attackspam | Unauthorised access (Sep 4) SRC=24.106.125.38 LEN=40 TOS=0x10 PREC=0x40 TTL=236 ID=52316 TCP DPT=445 WINDOW=1024 SYN Unauthorised access (Sep 4) SRC=24.106.125.38 LEN=40 TOS=0x10 PREC=0x40 TTL=236 ID=43147 TCP DPT=445 WINDOW=1024 SYN |
2019-09-04 19:24:32 |
| 58.213.198.77 | attackbots | Sep 3 20:35:54 lcdev sshd\[24385\]: Invalid user digital from 58.213.198.77 Sep 3 20:35:54 lcdev sshd\[24385\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.198.77 Sep 3 20:35:56 lcdev sshd\[24385\]: Failed password for invalid user digital from 58.213.198.77 port 45706 ssh2 Sep 3 20:41:51 lcdev sshd\[25083\]: Invalid user erica from 58.213.198.77 Sep 3 20:41:51 lcdev sshd\[25083\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.213.198.77 |
2019-09-04 19:28:10 |
| 1.168.31.125 | attackspam | Sep 4 04:43:26 finnair postfix/smtpd[25961]: connect from 1-168-31-125.dynamic-ip.hinet.net[1.168.31.125] Sep 4 04:43:33 finnair postfix/smtpd[25961]: warning: 1-168-31-125.dynamic-ip.hinet.net[1.168.31.125]: SASL PLAIN authentication failed: authentication failure Sep 4 04:43:34 finnair postfix/smtpd[25961]: disconnect from 1-168-31-125.dynamic-ip.hinet.net[1.168.31.125] Sep 4 04:43:35 finnair postfix/smtpd[25961]: connect from 1-168-31-125.dynamic-ip.hinet.net[1.168.31.125] Sep 4 04:43:40 finnair postfix/smtpd[25961]: warning: 1-168-31-125.dynamic-ip.hinet.net[1.168.31.125]: SASL PLAIN authentication failed: authentication failure Sep 4 04:43:41 finnair postfix/smtpd[25961]: disconnect from 1-168-31-125.dynamic-ip.hinet.net[1.168.31.125] Sep 4 04:43:42 finnair postfix/smtpd[25961]: connect from 1-168-31-125.dynamic-ip.hinet.net[1.168.31.125] Sep 4 04:43:48 finnair postfix/smtpd[25961]: warning: 1-168-31-125.dynamic-ip.hinet.net[1.168.31.125]: SASL PLAIN authen........ ------------------------------- |
2019-09-04 19:24:53 |
| 190.191.194.9 | attack | Automatic report - Banned IP Access |
2019-09-04 19:55:04 |
| 119.199.40.53 | attackbotsspam | Telnet Server BruteForce Attack |
2019-09-04 19:47:11 |
| 133.130.89.115 | attackbots | Sep 4 08:13:57 XXX sshd[65314]: Invalid user marcus from 133.130.89.115 port 57816 |
2019-09-04 19:56:33 |
| 109.188.83.123 | attackbotsspam | 23/tcp 23/tcp 23/tcp [2019-07-22/09-04]3pkt |
2019-09-04 19:27:37 |
| 157.230.175.60 | attackspam | 2019-09-04T11:10:34.293440abusebot-3.cloudsearch.cf sshd\[12380\]: Invalid user was from 157.230.175.60 port 52960 |
2019-09-04 19:13:01 |