City: unknown
Region: unknown
Country: Republic of China (ROC)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
        ; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.172.104.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56014
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;1.172.104.104.			IN	A
;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022400 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 24 14:26:17 CST 2022
;; MSG SIZE  rcvd: 106
        104.104.172.1.in-addr.arpa domain name pointer 1-172-104-104.dynamic-ip.hinet.net.
        Server:		183.60.83.19
Address:	183.60.83.19#53
Non-authoritative answer:
104.104.172.1.in-addr.arpa	name = 1-172-104-104.dynamic-ip.hinet.net.
Authoritative answers can be found from:
        | IP | Type | Details | Datetime | 
|---|---|---|---|
| 83.219.128.94 | attackspambots | Apr 2 17:51:00 meumeu sshd[20855]: Failed password for root from 83.219.128.94 port 44120 ssh2 Apr 2 17:55:01 meumeu sshd[21391]: Failed password for root from 83.219.128.94 port 55680 ssh2 ...  | 
                    2020-04-03 00:18:23 | 
| 112.3.25.139 | attack | Lines containing failures of 112.3.25.139 Apr 1 09:33:38 shared04 sshd[5145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.3.25.139 user=r.r Apr 1 09:33:40 shared04 sshd[5145]: Failed password for r.r from 112.3.25.139 port 43770 ssh2 Apr 1 09:33:46 shared04 sshd[5145]: Received disconnect from 112.3.25.139 port 43770:11: Bye Bye [preauth] Apr 1 09:33:46 shared04 sshd[5145]: Disconnected from authenticating user r.r 112.3.25.139 port 43770 [preauth] Apr 1 09:40:41 shared04 sshd[8057]: Connection closed by 112.3.25.139 port 45777 [preauth] Apr 1 09:46:18 shared04 sshd[10146]: Connection closed by 112.3.25.139 port 46398 [preauth] Apr 1 09:51:51 shared04 sshd[12010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.3.25.139 user=r.r Apr 1 09:51:53 shared04 sshd[12010]: Failed password for r.r from 112.3.25.139 port 47017 ssh2 Apr 1 09:51:53 shared04 sshd[12010]: Received di........ ------------------------------  | 
                    2020-04-03 01:02:06 | 
| 190.60.204.74 | attackbots | Unauthorized connection attempt from IP address 190.60.204.74 on Port 445(SMB)  | 
                    2020-04-03 00:48:11 | 
| 106.13.37.203 | attack | Invalid user ok from 106.13.37.203 port 59994  | 
                    2020-04-03 00:08:34 | 
| 88.199.122.30 | attack | Attempted to connect 2 times to port 23 TCP  | 
                    2020-04-03 00:56:55 | 
| 51.75.27.78 | attack | 2020-04-02T17:28:58.138183vps773228.ovh.net sshd[20445]: Failed password for root from 51.75.27.78 port 55522 ssh2 2020-04-02T17:33:40.457856vps773228.ovh.net sshd[22206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-51-75-27.eu user=root 2020-04-02T17:33:42.814908vps773228.ovh.net sshd[22206]: Failed password for root from 51.75.27.78 port 40590 ssh2 2020-04-02T17:38:18.136416vps773228.ovh.net sshd[23915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-51-75-27.eu user=root 2020-04-02T17:38:19.991219vps773228.ovh.net sshd[23915]: Failed password for root from 51.75.27.78 port 53892 ssh2 ...  | 
                    2020-04-03 00:22:23 | 
| 79.1.229.229 | attack | Unauthorized connection attempt from IP address 79.1.229.229 on Port 445(SMB)  | 
                    2020-04-03 00:23:30 | 
| 112.167.108.182 | attackbots | Telnet Server BruteForce Attack  | 
                    2020-04-03 00:26:10 | 
| 42.117.154.126 | attackbotsspam | Unauthorized connection attempt from IP address 42.117.154.126 on Port 445(SMB)  | 
                    2020-04-03 00:54:33 | 
| 117.211.192.70 | attackspambots | SSH Brute-Force Attack  | 
                    2020-04-03 00:52:00 | 
| 87.98.190.42 | attackspambots | Apr 1 01:04:47 hgb10301 sshd[25170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.98.190.42 user=r.r Apr 1 01:04:49 hgb10301 sshd[25170]: Failed password for r.r from 87.98.190.42 port 52077 ssh2 Apr 1 01:04:51 hgb10301 sshd[25170]: Received disconnect from 87.98.190.42 port 52077:11: Bye Bye [preauth] Apr 1 01:04:51 hgb10301 sshd[25170]: Disconnected from authenticating user r.r 87.98.190.42 port 52077 [preauth] Apr 1 01:09:04 hgb10301 sshd[25286]: Invalid user shubh from 87.98.190.42 port 58926 Apr 1 01:09:04 hgb10301 sshd[25286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.98.190.42 Apr 1 01:09:06 hgb10301 sshd[25286]: Failed password for invalid user shubh from 87.98.190.42 port 58926 ssh2 Apr 1 01:09:07 hgb10301 sshd[25286]: Received disconnect from 87.98.190.42 port 58926:11: Bye Bye [preauth] Apr 1 01:09:07 hgb10301 sshd[25286]: Disconnected from invalid user s........ -------------------------------  | 
                    2020-04-03 00:32:33 | 
| 180.120.209.226 | attackbots | MAIL: User Login Brute Force Attempt  | 
                    2020-04-03 00:31:41 | 
| 114.200.239.143 | attackspambots | Unauthorized connection attempt from IP address 114.200.239.143 on Port 445(SMB)  | 
                    2020-04-03 00:13:28 | 
| 103.48.140.39 | attackspam | Apr 2 19:42:23 webhost01 sshd[18051]: Failed password for root from 103.48.140.39 port 36928 ssh2 Apr 2 19:45:48 webhost01 sshd[18109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.48.140.39 ...  | 
                    2020-04-03 00:06:02 | 
| 95.167.39.12 | attackbots | Apr 2 17:14:05 hosting sshd[4137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.167.39.12 user=root Apr 2 17:14:07 hosting sshd[4137]: Failed password for root from 95.167.39.12 port 55960 ssh2 ...  | 
                    2020-04-03 00:27:30 |