City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.107.1.28
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22754
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.107.1.28. IN A
;; AUTHORITY SECTION:
. 484 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 96 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 01:30:13 CST 2022
;; MSG SIZE rcvd: 10528.1.107.104.in-addr.arpa domain name pointer a104-107-1-28.deploy.static.akamaitechnologies.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
28.1.107.104.in-addr.arpa name = a104-107-1-28.deploy.static.akamaitechnologies.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 36.75.107.252 | attack | Aug 3 17:11:29 [munged] sshd[1633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.75.107.252 |
2019-08-04 03:43:26 |
| 202.83.28.14 | attack | Unauthorised access (Aug 3) SRC=202.83.28.14 LEN=52 PREC=0x20 TTL=113 ID=977 DF TCP DPT=445 WINDOW=8192 SYN |
2019-08-04 03:23:06 |
| 188.128.39.129 | attack | Aug 3 22:19:52 tuotantolaitos sshd[8867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.128.39.129 Aug 3 22:19:54 tuotantolaitos sshd[8867]: Failed password for invalid user alba from 188.128.39.129 port 54608 ssh2 ... |
2019-08-04 03:21:31 |
| 58.87.100.49 | attack | Aug 3 22:24:32 site3 sshd\[224093\]: Invalid user connor from 58.87.100.49 Aug 3 22:24:32 site3 sshd\[224093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.100.49 Aug 3 22:24:35 site3 sshd\[224093\]: Failed password for invalid user connor from 58.87.100.49 port 59818 ssh2 Aug 3 22:28:46 site3 sshd\[224145\]: Invalid user postgres from 58.87.100.49 Aug 3 22:28:46 site3 sshd\[224145\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.100.49 ... |
2019-08-04 03:44:58 |
| 134.73.161.46 | attack | 2019-08-03T17:12:22.724633stark.klein-stark.info sshd\[13036\]: Invalid user admin from 134.73.161.46 port 53242 2019-08-03T17:12:22.731002stark.klein-stark.info sshd\[13036\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.161.46 2019-08-03T17:12:24.334400stark.klein-stark.info sshd\[13036\]: Failed password for invalid user admin from 134.73.161.46 port 53242 ssh2 ... |
2019-08-04 03:12:38 |
| 52.231.69.162 | attackbots | 52.231.69.162 - - \[03/Aug/2019:17:11:22 +0200\] "POST /wp-login.php HTTP/1.1" 200 2110 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 52.231.69.162 - - \[03/Aug/2019:17:11:24 +0200\] "POST /wp-login.php HTTP/1.1" 200 2113 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2019-08-04 03:45:39 |
| 138.68.101.199 | attackspambots | Aug 3 22:33:28 tuotantolaitos sshd[9168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.101.199 Aug 3 22:33:30 tuotantolaitos sshd[9168]: Failed password for invalid user ps from 138.68.101.199 port 38814 ssh2 ... |
2019-08-04 03:40:22 |
| 171.25.193.25 | attack | SSH bruteforce |
2019-08-04 03:27:00 |
| 189.79.107.245 | attack | Aug 3 11:55:26 shadeyouvpn sshd[32616]: Address 189.79.107.245 maps to 189-79-107-245.dsl.telesp.net.br, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Aug 3 11:55:26 shadeyouvpn sshd[32616]: Invalid user giacomini from 189.79.107.245 Aug 3 11:55:26 shadeyouvpn sshd[32616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.79.107.245 Aug 3 11:55:28 shadeyouvpn sshd[32616]: Failed password for invalid user giacomini from 189.79.107.245 port 47074 ssh2 Aug 3 11:55:28 shadeyouvpn sshd[32616]: Received disconnect from 189.79.107.245: 11: Bye Bye [preauth] Aug 3 12:08:55 shadeyouvpn sshd[9857]: Address 189.79.107.245 maps to 189-79-107-245.dsl.telesp.net.br, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Aug 3 12:08:55 shadeyouvpn sshd[9857]: Invalid user administracion from 189.79.107.245 Aug 3 12:08:55 shadeyouvpn sshd[9857]: pam_unix(sshd:auth): authentication failure; logna........ ------------------------------- |
2019-08-04 03:05:00 |
| 14.116.184.146 | attack | /var/log/apache/pucorp.org.log:[Sat Aug 03 16:41:13 2019] [error] [client 14.116.184.146] File does not exist: /home/ovh/www/App.php /var/log/apache/pucorp.org.log:[Sat Aug 03 16:41:17 2019] [error] [client 14.116.184.146] File does not exist: /home/ovh/www/webdav /var/log/apache/pucorp.org.log:[Sat Aug 03 16:41:22 2019] [error] [client 14.116.184.146] File does not exist: /home/ovh/www/help.php /var/log/apache/pucorp.org.log:[Sat Aug 03 16:41:25 2019] [error] [client 14.116.184.146] File does not exist: /home/ovh/www/java.php /var/log/apache/pucorp.org.log:[Sat Aug 03 16:41:29 2019] [error] [client 14.116.184.146] File does not exist: /home/ovh/www/_query.php /var/log/apache/pucorp.org.log:[Sat Aug 03 16:41:29 2019] [error] [client 14.116.184.146] File does not exist: /home/ovh/www/test.php /var/log/apache/pucorp.org.log:[Sat Aug 03 16:41:32 2019] [error] [client 14.116.184.146] File does not exist: /home/ovh/www/db_cts.php /var/log/apache/pucorp.org.log:[Sat Aug 03 16:........ ------------------------------ |
2019-08-04 03:36:06 |
| 51.38.176.147 | attackbotsspam | 2019-08-03T19:04:20.6829851240 sshd\[1371\]: Invalid user abc123 from 51.38.176.147 port 45870 2019-08-03T19:04:20.6877101240 sshd\[1371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.176.147 2019-08-03T19:04:23.2238561240 sshd\[1371\]: Failed password for invalid user abc123 from 51.38.176.147 port 45870 ssh2 ... |
2019-08-04 03:09:42 |
| 117.89.14.175 | attack | Aug 3 11:11:33 web1 postfix/smtpd[17941]: warning: unknown[117.89.14.175]: SASL LOGIN authentication failed: authentication failure ... |
2019-08-04 03:41:17 |
| 123.207.237.31 | attackspambots | Aug 3 12:20:23 TORMINT sshd\[1106\]: Invalid user teamspeak2 from 123.207.237.31 Aug 3 12:20:23 TORMINT sshd\[1106\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.237.31 Aug 3 12:20:25 TORMINT sshd\[1106\]: Failed password for invalid user teamspeak2 from 123.207.237.31 port 36902 ssh2 ... |
2019-08-04 03:07:32 |
| 177.223.50.6 | attackbotsspam | Aug 4 00:24:33 our-server-hostname postfix/smtpd[31338]: connect from unknown[177.223.50.6] Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=177.223.50.6 |
2019-08-04 03:43:47 |
| 51.68.243.1 | attackspambots | Aug 3 17:31:48 SilenceServices sshd[28662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.243.1 Aug 3 17:31:50 SilenceServices sshd[28662]: Failed password for invalid user inx from 51.68.243.1 port 51760 ssh2 Aug 3 17:37:02 SilenceServices sshd[31432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.243.1 |
2019-08-04 03:23:45 |