City: unknown
Region: unknown
Country: Singapore
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.0.121.95
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27033
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;3.0.121.95. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020301 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 02:15:33 CST 2025
;; MSG SIZE rcvd: 10395.121.0.3.in-addr.arpa domain name pointer ec2-3-0-121-95.ap-southeast-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
95.121.0.3.in-addr.arpa name = ec2-3-0-121-95.ap-southeast-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 125.64.94.211 | attack | scan z |
2019-09-03 07:43:34 |
| 222.186.30.111 | attack | Sep 2 13:33:11 kapalua sshd\[14065\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.111 user=root Sep 2 13:33:13 kapalua sshd\[14065\]: Failed password for root from 222.186.30.111 port 14032 ssh2 Sep 2 13:33:19 kapalua sshd\[14076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.111 user=root Sep 2 13:33:21 kapalua sshd\[14076\]: Failed password for root from 222.186.30.111 port 52550 ssh2 Sep 2 13:33:23 kapalua sshd\[14076\]: Failed password for root from 222.186.30.111 port 52550 ssh2 |
2019-09-03 07:42:58 |
| 37.187.100.54 | attack | Sep 2 23:39:26 hcbbdb sshd\[23923\]: Invalid user toku from 37.187.100.54 Sep 2 23:39:26 hcbbdb sshd\[23923\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ks3363565.kimsufi.com Sep 2 23:39:28 hcbbdb sshd\[23923\]: Failed password for invalid user toku from 37.187.100.54 port 55258 ssh2 Sep 2 23:43:52 hcbbdb sshd\[24410\]: Invalid user ranger from 37.187.100.54 Sep 2 23:43:52 hcbbdb sshd\[24410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ks3363565.kimsufi.com |
2019-09-03 07:45:50 |
| 54.36.149.23 | attackspam | Automatic report - Banned IP Access |
2019-09-03 07:29:54 |
| 91.191.223.207 | attack | Sep 3 01:09:21 mail postfix/smtpd\[2998\]: warning: unknown\[91.191.223.207\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 3 01:09:23 mail postfix/smtpd\[4995\]: warning: unknown\[91.191.223.207\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 3 01:09:25 mail postfix/smtpd\[4997\]: warning: unknown\[91.191.223.207\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-09-03 07:25:25 |
| 138.68.212.31 | attack | firewall-block, port(s): 123/udp |
2019-09-03 07:37:22 |
| 45.82.153.37 | attack | Sep 3 00:47:42 mailserver postfix/smtps/smtpd[65938]: lost connection after AUTH from unknown[45.82.153.37] Sep 3 00:47:42 mailserver postfix/smtps/smtpd[65938]: disconnect from unknown[45.82.153.37] Sep 3 00:54:51 mailserver postfix/anvil[65545]: statistics: max connection rate 2/60s for (smtps:45.82.153.37) at Sep 3 00:47:33 Sep 3 01:19:53 mailserver postfix/smtps/smtpd[66144]: connect from unknown[45.82.153.37] Sep 3 01:19:56 mailserver dovecot: auth-worker(66147): sql([hidden],45.82.153.37): unknown user Sep 3 01:19:58 mailserver postfix/smtps/smtpd[66144]: warning: unknown[45.82.153.37]: SASL PLAIN authentication failed: Sep 3 01:19:58 mailserver postfix/smtps/smtpd[66144]: lost connection after AUTH from unknown[45.82.153.37] Sep 3 01:19:58 mailserver postfix/smtps/smtpd[66144]: disconnect from unknown[45.82.153.37] Sep 3 01:19:58 mailserver postfix/smtps/smtpd[66144]: connect from unknown[45.82.153.37] Sep 3 01:20:07 mailserver dovecot: auth-worker(66147): sql([hidden],45.82.153.37): unknow |
2019-09-03 07:26:32 |
| 106.12.208.202 | attackspam | Sep 3 01:13:50 mail sshd\[12572\]: Failed password for invalid user gen from 106.12.208.202 port 59834 ssh2 Sep 3 01:17:55 mail sshd\[13311\]: Invalid user p0stgr3s from 106.12.208.202 port 43244 Sep 3 01:17:55 mail sshd\[13311\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.208.202 Sep 3 01:17:57 mail sshd\[13311\]: Failed password for invalid user p0stgr3s from 106.12.208.202 port 43244 ssh2 Sep 3 01:22:01 mail sshd\[13950\]: Invalid user arleigh from 106.12.208.202 port 54880 |
2019-09-03 07:25:08 |
| 103.209.64.19 | attack | Postfix Brute-Force reported by Fail2Ban |
2019-09-03 07:28:59 |
| 52.42.7.30 | attackspambots | 52.42.7.30 - - [03/Sep/2019:01:09:21 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 52.42.7.30 - - [03/Sep/2019:01:09:21 +0200] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 52.42.7.30 - - [03/Sep/2019:01:09:22 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 52.42.7.30 - - [03/Sep/2019:01:09:23 +0200] "POST /wp-login.php HTTP/1.1" 200 1684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 52.42.7.30 - - [03/Sep/2019:01:09:23 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 52.42.7.30 - - [03/Sep/2019:01:09:24 +0200] "POST /wp-login.php HTTP/1.1" 200 1688 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-09-03 07:41:13 |
| 99.149.251.77 | attackspam | Sep 3 01:05:16 markkoudstaal sshd[11372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=99.149.251.77 Sep 3 01:05:18 markkoudstaal sshd[11372]: Failed password for invalid user postgres from 99.149.251.77 port 47816 ssh2 Sep 3 01:09:54 markkoudstaal sshd[11875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=99.149.251.77 |
2019-09-03 07:15:08 |
| 195.24.207.169 | attackspambots | Unauthorised access (Sep 3) SRC=195.24.207.169 LEN=40 TTL=53 ID=63463 TCP DPT=8080 WINDOW=57121 SYN |
2019-09-03 07:15:40 |
| 181.129.14.218 | attackspam | Sep 2 13:22:51 friendsofhawaii sshd\[21586\]: Invalid user mailman from 181.129.14.218 Sep 2 13:22:51 friendsofhawaii sshd\[21586\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.129.14.218 Sep 2 13:22:53 friendsofhawaii sshd\[21586\]: Failed password for invalid user mailman from 181.129.14.218 port 8185 ssh2 Sep 2 13:27:16 friendsofhawaii sshd\[21973\]: Invalid user toor from 181.129.14.218 Sep 2 13:27:16 friendsofhawaii sshd\[21973\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.129.14.218 |
2019-09-03 07:27:24 |
| 78.186.159.5 | attackspam | Sep 2 13:10:34 raspberrypi sshd\[18064\]: Failed password for root from 78.186.159.5 port 56024 ssh2Sep 2 13:10:36 raspberrypi sshd\[18064\]: Failed password for root from 78.186.159.5 port 56024 ssh2Sep 2 13:10:38 raspberrypi sshd\[18064\]: Failed password for root from 78.186.159.5 port 56024 ssh2 ... |
2019-09-03 07:05:56 |
| 171.6.174.214 | attackspam | Sep 2 13:02:39 php2 sshd\[9689\]: Invalid user yangjun from 171.6.174.214 Sep 2 13:02:39 php2 sshd\[9689\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mx-ll-171.6.174-214.dynamic.3bb.co.th Sep 2 13:02:41 php2 sshd\[9689\]: Failed password for invalid user yangjun from 171.6.174.214 port 9024 ssh2 Sep 2 13:09:56 php2 sshd\[10915\]: Invalid user webmaster from 171.6.174.214 Sep 2 13:09:56 php2 sshd\[10915\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mx-ll-171.6.174-214.dynamic.3bb.co.th |
2019-09-03 07:13:44 |