City: unknown
Region: unknown
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.125.184.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61180
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;212.125.184.109. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022200 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 22 18:31:53 CST 2025
;; MSG SIZE rcvd: 108109.184.125.212.in-addr.arpa domain name pointer user04173.du.no.uu.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
109.184.125.212.in-addr.arpa name = user04173.du.no.uu.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.36.79.141 | attackspam | TCP Port: 25 _ invalid blocked abuseat-org zen-spamhaus _ _ _ _ (195) |
2019-09-20 09:28:26 |
| 101.89.166.204 | attackbots | Sep 19 15:30:07 eddieflores sshd\[4836\]: Invalid user mihaela from 101.89.166.204 Sep 19 15:30:07 eddieflores sshd\[4836\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.89.166.204 Sep 19 15:30:08 eddieflores sshd\[4836\]: Failed password for invalid user mihaela from 101.89.166.204 port 53612 ssh2 Sep 19 15:34:46 eddieflores sshd\[5172\]: Invalid user inventory from 101.89.166.204 Sep 19 15:34:46 eddieflores sshd\[5172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.89.166.204 |
2019-09-20 09:51:05 |
| 169.50.137.105 | attack | Sep 20 02:43:56 microserver sshd[46948]: Invalid user phyto2@123 from 169.50.137.105 port 12893 Sep 20 02:43:56 microserver sshd[46948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.50.137.105 Sep 20 02:43:58 microserver sshd[46948]: Failed password for invalid user phyto2@123 from 169.50.137.105 port 12893 ssh2 Sep 20 02:47:47 microserver sshd[47583]: Invalid user st123 from 169.50.137.105 port 54613 Sep 20 02:47:47 microserver sshd[47583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.50.137.105 Sep 20 02:59:09 microserver sshd[49066]: Invalid user 123456 from 169.50.137.105 port 10284 Sep 20 02:59:09 microserver sshd[49066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.50.137.105 Sep 20 02:59:11 microserver sshd[49066]: Failed password for invalid user 123456 from 169.50.137.105 port 10284 ssh2 Sep 20 03:03:01 microserver sshd[49668]: Invalid user raspberrypi from 169. |
2019-09-20 09:53:49 |
| 103.249.205.78 | attack | Sep 19 21:08:32 ny01 sshd[19816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.249.205.78 Sep 19 21:08:34 ny01 sshd[19816]: Failed password for invalid user debian from 103.249.205.78 port 56419 ssh2 Sep 19 21:13:43 ny01 sshd[20838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.249.205.78 |
2019-09-20 09:16:59 |
| 222.186.52.89 | attack | 2019-08-29T01:38:27.168009wiz-ks3 sshd[23576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.89 user=root 2019-08-29T01:38:29.069882wiz-ks3 sshd[23576]: Failed password for root from 222.186.52.89 port 32694 ssh2 2019-08-29T01:38:31.466729wiz-ks3 sshd[23576]: Failed password for root from 222.186.52.89 port 32694 ssh2 2019-08-29T01:38:27.168009wiz-ks3 sshd[23576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.89 user=root 2019-08-29T01:38:29.069882wiz-ks3 sshd[23576]: Failed password for root from 222.186.52.89 port 32694 ssh2 2019-08-29T01:38:31.466729wiz-ks3 sshd[23576]: Failed password for root from 222.186.52.89 port 32694 ssh2 2019-08-29T01:38:27.168009wiz-ks3 sshd[23576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.89 user=root 2019-08-29T01:38:29.069882wiz-ks3 sshd[23576]: Failed password for root from 222.186.52.89 port 32694 ssh2 2019-08-2 |
2019-09-20 09:48:20 |
| 112.215.113.10 | attackspambots | Sep 19 21:13:39 plusreed sshd[29662]: Invalid user sklopaket from 112.215.113.10 Sep 19 21:13:39 plusreed sshd[29662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.215.113.10 Sep 19 21:13:39 plusreed sshd[29662]: Invalid user sklopaket from 112.215.113.10 Sep 19 21:13:41 plusreed sshd[29662]: Failed password for invalid user sklopaket from 112.215.113.10 port 52683 ssh2 ... |
2019-09-20 09:16:32 |
| 202.125.53.68 | attackbots | Sep 19 15:34:26 php1 sshd\[24758\]: Invalid user admin from 202.125.53.68 Sep 19 15:34:26 php1 sshd\[24758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=u068.d053125202.ctt.ne.jp Sep 19 15:34:29 php1 sshd\[24758\]: Failed password for invalid user admin from 202.125.53.68 port 53218 ssh2 Sep 19 15:38:52 php1 sshd\[25350\]: Invalid user user from 202.125.53.68 Sep 19 15:38:52 php1 sshd\[25350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=u068.d053125202.ctt.ne.jp |
2019-09-20 09:56:13 |
| 220.163.128.170 | attack | TCP Port: 25 _ invalid blocked dnsbl-sorbs abuseat-org _ _ _ _ (197) |
2019-09-20 09:15:19 |
| 46.38.144.202 | attack | Sep 20 03:46:55 webserver postfix/smtpd\[4774\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 20 03:49:15 webserver postfix/smtpd\[4848\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 20 03:51:36 webserver postfix/smtpd\[5831\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 20 03:53:56 webserver postfix/smtpd\[4848\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 20 03:56:18 webserver postfix/smtpd\[4848\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-09-20 09:57:51 |
| 121.122.50.157 | attackspambots | Unauthorized IMAP connection attempt |
2019-09-20 09:26:47 |
| 51.158.114.246 | attack | Sep 20 01:25:17 web8 sshd\[29858\]: Invalid user samba from 51.158.114.246 Sep 20 01:25:17 web8 sshd\[29858\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.114.246 Sep 20 01:25:18 web8 sshd\[29858\]: Failed password for invalid user samba from 51.158.114.246 port 57546 ssh2 Sep 20 01:29:21 web8 sshd\[32131\]: Invalid user tai from 51.158.114.246 Sep 20 01:29:21 web8 sshd\[32131\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.114.246 |
2019-09-20 09:29:42 |
| 151.232.208.5 | attackbots | Sep 20 02:59:59 mxgate1 postfix/postscreen[8963]: CONNECT from [151.232.208.5]:25844 to [176.31.12.44]:25 Sep 20 02:59:59 mxgate1 postfix/dnsblog[8966]: addr 151.232.208.5 listed by domain cbl.abuseat.org as 127.0.0.2 Sep 20 02:59:59 mxgate1 postfix/dnsblog[8967]: addr 151.232.208.5 listed by domain zen.spamhaus.org as 127.0.0.11 Sep 20 02:59:59 mxgate1 postfix/dnsblog[8967]: addr 151.232.208.5 listed by domain zen.spamhaus.org as 127.0.0.3 Sep 20 02:59:59 mxgate1 postfix/dnsblog[8967]: addr 151.232.208.5 listed by domain zen.spamhaus.org as 127.0.0.4 Sep 20 02:59:59 mxgate1 postfix/dnsblog[8983]: addr 151.232.208.5 listed by domain b.barracudacentral.org as 127.0.0.2 Sep 20 02:59:59 mxgate1 postfix/dnsblog[8965]: addr 151.232.208.5 listed by domain bl.spamcop.net as 127.0.0.2 Sep 20 02:59:59 mxgate1 postfix/dnsblog[8964]: addr 151.232.208.5 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Sep 20 03:00:05 mxgate1 postfix/postscreen[8963]: DNSBL rank 6 for [151.232.208......... ------------------------------- |
2019-09-20 09:15:47 |
| 177.139.153.186 | attack | Sep 19 15:22:28 wbs sshd\[17874\]: Invalid user leslie from 177.139.153.186 Sep 19 15:22:28 wbs sshd\[17874\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.139.153.186 Sep 19 15:22:30 wbs sshd\[17874\]: Failed password for invalid user leslie from 177.139.153.186 port 34555 ssh2 Sep 19 15:27:25 wbs sshd\[18633\]: Invalid user admin from 177.139.153.186 Sep 19 15:27:25 wbs sshd\[18633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.139.153.186 |
2019-09-20 09:44:41 |
| 92.118.37.74 | attackbots | Sep 20 03:08:35 mc1 kernel: \[228175.958821\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.74 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=47994 PROTO=TCP SPT=46525 DPT=12951 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 20 03:08:54 mc1 kernel: \[228195.217306\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.74 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=43417 PROTO=TCP SPT=46525 DPT=10727 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 20 03:13:41 mc1 kernel: \[228482.585256\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.74 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=43947 PROTO=TCP SPT=46525 DPT=38305 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-20 09:17:55 |
| 109.72.97.66 | attack | Sent mail to target address hacked/leaked from abandonia in 2016 |
2019-09-20 09:52:19 |