City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.125.59.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26205
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;3.125.59.139. IN A
;; AUTHORITY SECTION:
. 570 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023052400 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 24 15:43:32 CST 2023
;; MSG SIZE rcvd: 105139.59.125.3.in-addr.arpa domain name pointer ec2-3-125-59-139.eu-central-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
139.59.125.3.in-addr.arpa name = ec2-3-125-59-139.eu-central-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 1.64.103.196 | attack | firewall-block, port(s): 5555/tcp |
2019-11-09 14:44:57 |
| 104.131.29.92 | attackbotsspam | Nov 9 07:23:11 dedicated sshd[479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.29.92 user=games Nov 9 07:23:12 dedicated sshd[479]: Failed password for games from 104.131.29.92 port 36909 ssh2 |
2019-11-09 14:29:00 |
| 200.39.231.147 | attackbots | Automatic report - Port Scan Attack |
2019-11-09 14:46:09 |
| 200.41.86.59 | attack | 2019-11-09T05:56:15.381080abusebot-3.cloudsearch.cf sshd\[13196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.41.86.59 user=root |
2019-11-09 14:21:46 |
| 92.119.160.107 | attack | Nov 9 07:20:48 mc1 kernel: \[4566738.193116\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=24403 PROTO=TCP SPT=50091 DPT=57967 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 9 07:22:56 mc1 kernel: \[4566866.542077\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54138 PROTO=TCP SPT=50091 DPT=58184 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 9 07:23:03 mc1 kernel: \[4566872.894851\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=11492 PROTO=TCP SPT=50091 DPT=57610 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-09 14:25:22 |
| 197.225.166.204 | attack | Nov 9 07:29:44 vps01 sshd[24460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.225.166.204 Nov 9 07:29:46 vps01 sshd[24460]: Failed password for invalid user 1234@asdf from 197.225.166.204 port 42594 ssh2 |
2019-11-09 14:51:47 |
| 92.249.143.33 | attack | Nov 9 06:04:24 srv01 sshd[17872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92-249-143-33.static.digikabel.hu user=root Nov 9 06:04:26 srv01 sshd[17872]: Failed password for root from 92.249.143.33 port 54424 ssh2 Nov 9 06:07:59 srv01 sshd[18028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92-249-143-33.static.digikabel.hu user=root Nov 9 06:08:01 srv01 sshd[18028]: Failed password for root from 92.249.143.33 port 45886 ssh2 Nov 9 06:11:42 srv01 sshd[18292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92-249-143-33.static.digikabel.hu user=root Nov 9 06:11:44 srv01 sshd[18292]: Failed password for root from 92.249.143.33 port 37365 ssh2 ... |
2019-11-09 14:21:25 |
| 185.222.211.166 | attack | Nov 9 05:12:36 h2177944 kernel: \[6148348.424520\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.222.211.166 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=8322 PROTO=TCP SPT=8080 DPT=3401 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 9 05:16:10 h2177944 kernel: \[6148562.872810\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.222.211.166 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=59928 PROTO=TCP SPT=8080 DPT=444 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 9 05:16:18 h2177944 kernel: \[6148570.882767\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.222.211.166 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=58318 PROTO=TCP SPT=8080 DPT=13389 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 9 05:26:10 h2177944 kernel: \[6149162.385920\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.222.211.166 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=29248 PROTO=TCP SPT=8080 DPT=33398 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 9 05:53:16 h2177944 kernel: \[6150787.990897\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.222.211.166 DST=85.214 |
2019-11-09 14:27:43 |
| 79.179.23.74 | attackspambots | 1573280983 - 11/09/2019 07:29:43 Host: bzq-79-179-23-74.red.bezeqint.net/79.179.23.74 Port: 137 UDP Blocked |
2019-11-09 14:53:06 |
| 132.232.93.48 | attack | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.93.48 user=root Failed password for root from 132.232.93.48 port 37640 ssh2 Invalid user temp from 132.232.93.48 port 33724 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.93.48 Failed password for invalid user temp from 132.232.93.48 port 33724 ssh2 |
2019-11-09 14:59:05 |
| 178.62.0.215 | attackbotsspam | 2019-11-09T05:57:51.026745abusebot-6.cloudsearch.cf sshd\[6805\]: Invalid user pinebluff from 178.62.0.215 port 53852 |
2019-11-09 14:14:31 |
| 43.247.176.196 | attackbots | firewall-block, port(s): 1433/tcp |
2019-11-09 14:43:45 |
| 183.111.227.5 | attack | Nov 8 19:56:15 php1 sshd\[25420\]: Invalid user gt5fr4 from 183.111.227.5 Nov 8 19:56:15 php1 sshd\[25420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.111.227.5 Nov 8 19:56:17 php1 sshd\[25420\]: Failed password for invalid user gt5fr4 from 183.111.227.5 port 46880 ssh2 Nov 8 20:01:53 php1 sshd\[26039\]: Invalid user studio123 from 183.111.227.5 Nov 8 20:01:53 php1 sshd\[26039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.111.227.5 |
2019-11-09 14:10:22 |
| 134.73.95.160 | attack | Nov 9 07:23:23 mxgate1 postfix/postscreen[27578]: CONNECT from [134.73.95.160]:58148 to [176.31.12.44]:25 Nov 9 07:23:23 mxgate1 postfix/dnsblog[27579]: addr 134.73.95.160 listed by domain zen.spamhaus.org as 127.0.0.3 Nov 9 07:23:23 mxgate1 postfix/dnsblog[27582]: addr 134.73.95.160 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 9 07:23:29 mxgate1 postfix/postscreen[27578]: DNSBL rank 3 for [134.73.95.160]:58148 Nov x@x Nov 9 07:23:30 mxgate1 postfix/postscreen[27578]: DISCONNECT [134.73.95.160]:58148 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=134.73.95.160 |
2019-11-09 14:50:14 |
| 185.232.67.8 | attackspambots | Nov 9 06:53:09 dedicated sshd[28203]: Invalid user admin from 185.232.67.8 port 45542 |
2019-11-09 14:24:10 |