City: Piscataway
Region: New Jersey
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.111.103.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25189
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.111.103.71. IN A
;; AUTHORITY SECTION:
. 552 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022031801 1800 900 604800 86400
;; Query time: 23 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 19 09:12:14 CST 2022
;; MSG SIZE rcvd: 10771.103.111.104.in-addr.arpa domain name pointer a104-111-103-71.deploy.static.akamaitechnologies.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
71.103.111.104.in-addr.arpa name = a104-111-103-71.deploy.static.akamaitechnologies.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 80.82.78.20 | attackspam | A portscan was detected. Details about the event: Time.............: 2020-09-11 16:14:35 Source IP address: 80.82.78.20 (test4.com) |
2020-09-14 13:54:25 |
| 112.85.42.172 | attackspambots | Sep 14 08:09:15 abendstille sshd\[20028\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172 user=root Sep 14 08:09:16 abendstille sshd\[20030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172 user=root Sep 14 08:09:17 abendstille sshd\[20028\]: Failed password for root from 112.85.42.172 port 44122 ssh2 Sep 14 08:09:18 abendstille sshd\[20030\]: Failed password for root from 112.85.42.172 port 12167 ssh2 Sep 14 08:09:20 abendstille sshd\[20028\]: Failed password for root from 112.85.42.172 port 44122 ssh2 ... |
2020-09-14 14:11:50 |
| 42.118.121.252 | attack | Sep 14 06:07:17 ns382633 sshd\[2233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.121.252 user=root Sep 14 06:07:20 ns382633 sshd\[2233\]: Failed password for root from 42.118.121.252 port 20196 ssh2 Sep 14 06:18:27 ns382633 sshd\[4167\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.121.252 user=root Sep 14 06:18:29 ns382633 sshd\[4167\]: Failed password for root from 42.118.121.252 port 40642 ssh2 Sep 14 06:23:03 ns382633 sshd\[4993\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.118.121.252 user=root |
2020-09-14 14:14:24 |
| 218.92.0.133 | attack | [MK-VM4] SSH login failed |
2020-09-14 14:07:22 |
| 212.230.191.245 | attackspambots | Sep 13 18:55:28 lnxweb61 sshd[3417]: Failed password for root from 212.230.191.245 port 47142 ssh2 Sep 13 18:55:28 lnxweb61 sshd[3417]: Failed password for root from 212.230.191.245 port 47142 ssh2 |
2020-09-14 13:40:55 |
| 144.217.89.55 | attackspambots | Sep 13 19:27:58 wbs sshd\[15595\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.89.55 user=root Sep 13 19:28:00 wbs sshd\[15595\]: Failed password for root from 144.217.89.55 port 38558 ssh2 Sep 13 19:32:10 wbs sshd\[16000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.89.55 user=root Sep 13 19:32:13 wbs sshd\[16000\]: Failed password for root from 144.217.89.55 port 51790 ssh2 Sep 13 19:36:29 wbs sshd\[16408\]: Invalid user mzouhery from 144.217.89.55 |
2020-09-14 13:44:23 |
| 195.223.211.242 | attackspambots | Bruteforce detected by fail2ban |
2020-09-14 14:17:41 |
| 117.50.8.157 | attackspambots | Sep 14 05:47:21 haigwepa sshd[10063]: Failed password for root from 117.50.8.157 port 35668 ssh2 ... |
2020-09-14 14:00:17 |
| 51.254.129.170 | attackbots | Failed password for invalid user bryan777 from 51.254.129.170 port 48460 ssh2 |
2020-09-14 14:12:28 |
| 106.13.8.46 | attackspambots | Sep 14 04:00:13 journals sshd\[86059\]: Invalid user 000123 from 106.13.8.46 Sep 14 04:00:13 journals sshd\[86059\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.8.46 Sep 14 04:00:15 journals sshd\[86059\]: Failed password for invalid user 000123 from 106.13.8.46 port 46246 ssh2 Sep 14 04:02:48 journals sshd\[86284\]: Invalid user rizvi from 106.13.8.46 Sep 14 04:02:48 journals sshd\[86284\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.8.46 ... |
2020-09-14 14:15:17 |
| 115.97.193.152 | attack | srvr3: (mod_security) mod_security (id:920350) triggered by 115.97.193.152 (IN/-/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/09/13 18:57:22 [error] 479773#0: *2523 [client 115.97.193.152] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/GponForm/diag_Form"] [unique_id "160001624233.989233"] [ref "o0,12v48,12"], client: 115.97.193.152, [redacted] request: "POST /GponForm/diag_Form?images/ HTTP/1.1" [redacted] |
2020-09-14 14:05:21 |
| 128.199.223.233 | attackspambots | Time: Mon Sep 14 05:29:27 2020 +0000 IP: 128.199.223.233 (SG/Singapore/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 14 05:16:24 ca-29-ams1 sshd[15493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.223.233 user=root Sep 14 05:16:26 ca-29-ams1 sshd[15493]: Failed password for root from 128.199.223.233 port 38254 ssh2 Sep 14 05:25:53 ca-29-ams1 sshd[16807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.223.233 user=root Sep 14 05:25:56 ca-29-ams1 sshd[16807]: Failed password for root from 128.199.223.233 port 39650 ssh2 Sep 14 05:29:25 ca-29-ams1 sshd[17306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.223.233 user=root |
2020-09-14 14:03:08 |
| 181.114.208.114 | attackbots | (smtpauth) Failed SMTP AUTH login from 181.114.208.114 (AR/Argentina/host-208-114.adc.net.ar): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-09-13 21:27:38 plain authenticator failed for ([181.114.208.114]) [181.114.208.114]: 535 Incorrect authentication data (set_id=int) |
2020-09-14 13:48:41 |
| 118.163.101.207 | attackspambots | $f2bV_matches |
2020-09-14 13:57:09 |
| 129.211.150.238 | attackspam | 20 attempts against mh-ssh on hail |
2020-09-14 14:03:49 |