City: unknown
Region: unknown
Country: South Africa
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.125.109.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2194
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;41.125.109.45. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 23:26:40 CST 2025
;; MSG SIZE rcvd: 106
Host 45.109.125.41.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 45.109.125.41.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 173.12.107.133 | attack | Honeypot attack, port: 81, PTR: 173-12-107-133-miami.hfc.comcastbusiness.net. |
2020-01-12 06:11:04 |
| 202.29.39.1 | attackbots | Jan 11 11:57:53 web1 sshd\[13304\]: Invalid user cacti from 202.29.39.1 Jan 11 11:57:53 web1 sshd\[13304\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.39.1 Jan 11 11:57:55 web1 sshd\[13304\]: Failed password for invalid user cacti from 202.29.39.1 port 48514 ssh2 Jan 11 12:00:04 web1 sshd\[13492\]: Invalid user jboss from 202.29.39.1 Jan 11 12:00:04 web1 sshd\[13492\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.39.1 |
2020-01-12 06:01:03 |
| 211.107.119.117 | attackspambots | Honeypot attack, port: 5555, PTR: PTR record not found |
2020-01-12 06:04:34 |
| 171.255.224.110 | attack | Honeypot attack, port: 445, PTR: dynamic-adsl.viettel.vn. |
2020-01-12 06:09:55 |
| 121.178.107.202 | attackspambots | Honeypot attack, port: 81, PTR: PTR record not found |
2020-01-12 05:41:11 |
| 77.42.96.97 | attackspambots | Automatic report - Port Scan Attack |
2020-01-12 05:48:07 |
| 195.225.108.247 | attack | Tries to login WordPress (wp-login.php) |
2020-01-12 05:36:38 |
| 106.52.121.64 | attack | Jan 11 22:32:36 meumeu sshd[20789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.121.64 Jan 11 22:32:38 meumeu sshd[20789]: Failed password for invalid user symantec from 106.52.121.64 port 42400 ssh2 Jan 11 22:33:58 meumeu sshd[21035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.121.64 ... |
2020-01-12 05:44:37 |
| 217.36.223.29 | attack | Jan 11 21:07:36 work-partkepr sshd\[17326\]: Invalid user invoices from 217.36.223.29 port 51720 Jan 11 21:07:36 work-partkepr sshd\[17326\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.36.223.29 ... |
2020-01-12 06:07:56 |
| 222.186.180.130 | attackspam | Jan 11 22:37:55 dcd-gentoo sshd[21018]: User root from 222.186.180.130 not allowed because none of user's groups are listed in AllowGroups Jan 11 22:37:58 dcd-gentoo sshd[21018]: error: PAM: Authentication failure for illegal user root from 222.186.180.130 Jan 11 22:37:55 dcd-gentoo sshd[21018]: User root from 222.186.180.130 not allowed because none of user's groups are listed in AllowGroups Jan 11 22:37:58 dcd-gentoo sshd[21018]: error: PAM: Authentication failure for illegal user root from 222.186.180.130 Jan 11 22:37:55 dcd-gentoo sshd[21018]: User root from 222.186.180.130 not allowed because none of user's groups are listed in AllowGroups Jan 11 22:37:58 dcd-gentoo sshd[21018]: error: PAM: Authentication failure for illegal user root from 222.186.180.130 Jan 11 22:37:58 dcd-gentoo sshd[21018]: Failed keyboard-interactive/pam for invalid user root from 222.186.180.130 port 23586 ssh2 ... |
2020-01-12 05:42:05 |
| 80.82.77.245 | attack | firewall-block, port(s): 68/udp, 120/udp, 136/udp, 158/udp, 445/udp, 515/udp |
2020-01-12 06:04:15 |
| 112.85.42.237 | attackspambots | Jan 11 21:42:59 localhost sshd\[35502\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.237 user=root Jan 11 21:43:02 localhost sshd\[35502\]: Failed password for root from 112.85.42.237 port 34456 ssh2 Jan 11 21:43:04 localhost sshd\[35502\]: Failed password for root from 112.85.42.237 port 34456 ssh2 Jan 11 21:43:07 localhost sshd\[35502\]: Failed password for root from 112.85.42.237 port 34456 ssh2 Jan 11 21:44:19 localhost sshd\[35518\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.237 user=root ... |
2020-01-12 05:47:01 |
| 148.70.158.215 | attack | Jan 11 22:07:41 vmanager6029 sshd\[27484\]: Invalid user anonymous. from 148.70.158.215 port 35501 Jan 11 22:07:41 vmanager6029 sshd\[27484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.158.215 Jan 11 22:07:43 vmanager6029 sshd\[27484\]: Failed password for invalid user anonymous. from 148.70.158.215 port 35501 ssh2 |
2020-01-12 05:59:08 |
| 85.186.151.246 | attack | Honeypot attack, port: 81, PTR: PTR record not found |
2020-01-12 05:45:38 |
| 61.154.197.245 | attackbotsspam | 2020-01-11 15:07:35 dovecot_login authenticator failed for (gxvxt) [61.154.197.245]:54565 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=lifangfang@lerctr.org) 2020-01-11 15:07:42 dovecot_login authenticator failed for (gslcm) [61.154.197.245]:54565 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=lifangfang@lerctr.org) 2020-01-11 15:07:54 dovecot_login authenticator failed for (mfefr) [61.154.197.245]:54565 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=lifangfang@lerctr.org) ... |
2020-01-12 05:49:16 |