City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.102.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29450
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.168.102.106. IN A
;; AUTHORITY SECTION:
. 275 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022032801 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 29 12:13:04 CST 2022
;; MSG SIZE rcvd: 108106.102.168.104.in-addr.arpa domain name pointer 104-168-102-106-host.colocrossing.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
106.102.168.104.in-addr.arpa name = 104-168-102-106-host.colocrossing.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 61.219.142.9 | attackbots | SSH Bruteforce attack |
2019-07-03 02:54:40 |
| 121.153.12.239 | attackspambots | Jul 1 21:43:00 pi01 sshd[26252]: Connection from 121.153.12.239 port 48698 on 192.168.1.10 port 22 Jul 1 21:43:02 pi01 sshd[26252]: Invalid user 12345 from 121.153.12.239 port 48698 Jul 1 21:43:02 pi01 sshd[26252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.153.12.239 Jul 1 21:43:05 pi01 sshd[26252]: Failed password for invalid user 12345 from 121.153.12.239 port 48698 ssh2 Jul 1 21:43:05 pi01 sshd[26252]: Connection closed by 121.153.12.239 port 48698 [preauth] Jul 1 21:54:47 pi01 sshd[26575]: Connection from 121.153.12.239 port 51040 on 192.168.1.10 port 22 Jul 1 21:54:48 pi01 sshd[26575]: Invalid user 111 from 121.153.12.239 port 51040 Jul 1 21:54:48 pi01 sshd[26575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.153.12.239 Jul 1 21:54:51 pi01 sshd[26575]: Failed password for invalid user 111 from 121.153.12.239 port 51040 ssh2 Jul 1 21:54:51 pi01 sshd[26575]: Con........ ------------------------------- |
2019-07-03 02:25:29 |
| 61.19.247.121 | attack | Jul 2 16:40:40 vtv3 sshd\[16853\]: Invalid user test10 from 61.19.247.121 port 39604 Jul 2 16:40:40 vtv3 sshd\[16853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.19.247.121 Jul 2 16:40:43 vtv3 sshd\[16853\]: Failed password for invalid user test10 from 61.19.247.121 port 39604 ssh2 Jul 2 16:43:41 vtv3 sshd\[17978\]: Invalid user oracle from 61.19.247.121 port 42720 Jul 2 16:43:41 vtv3 sshd\[17978\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.19.247.121 Jul 2 16:54:15 vtv3 sshd\[23027\]: Invalid user guest from 61.19.247.121 port 56758 Jul 2 16:54:15 vtv3 sshd\[23027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.19.247.121 Jul 2 16:54:17 vtv3 sshd\[23027\]: Failed password for invalid user guest from 61.19.247.121 port 56758 ssh2 Jul 2 16:56:57 vtv3 sshd\[24475\]: Invalid user arma3 from 61.19.247.121 port 38486 Jul 2 16:56:57 vtv3 sshd\[24475\]: pa |
2019-07-03 02:52:53 |
| 178.62.209.5 | attack | 22 attempts against mh-ssh on sonic.magehost.pro |
2019-07-03 02:39:43 |
| 193.32.163.112 | attack | Jul 2 17:25:57 h2177944 kernel: \[405565.872478\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=193.32.163.112 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=48387 PROTO=TCP SPT=50475 DPT=3396 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 2 17:47:48 h2177944 kernel: \[406876.286775\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=193.32.163.112 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=40539 PROTO=TCP SPT=50475 DPT=3381 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 2 18:05:33 h2177944 kernel: \[407941.172060\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=193.32.163.112 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=3933 PROTO=TCP SPT=50475 DPT=2020 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 2 18:05:37 h2177944 kernel: \[407945.599723\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=193.32.163.112 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=61267 PROTO=TCP SPT=50475 DPT=3383 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 2 18:26:04 h2177944 kernel: \[409172.607507\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=193.32.163.112 DST=85.214.117.9 |
2019-07-03 02:54:04 |
| 189.155.247.162 | attackbotsspam | Jan 5 10:44:49 motanud sshd\[5601\]: Invalid user elastic from 189.155.247.162 port 37302 Jan 5 10:44:49 motanud sshd\[5601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.155.247.162 Jan 5 10:44:51 motanud sshd\[5601\]: Failed password for invalid user elastic from 189.155.247.162 port 37302 ssh2 |
2019-07-03 03:06:09 |
| 23.24.71.187 | attack | 2019-07-02T20:35:29.979439scmdmz1 sshd\[14307\]: Invalid user tara from 23.24.71.187 port 50732 2019-07-02T20:35:29.982423scmdmz1 sshd\[14307\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23-24-71-187-static.hfc.comcastbusiness.net 2019-07-02T20:35:32.914061scmdmz1 sshd\[14307\]: Failed password for invalid user tara from 23.24.71.187 port 50732 ssh2 ... |
2019-07-03 02:43:41 |
| 122.195.200.148 | attackbotsspam | Jul 2 20:47:44 ovpn sshd\[4244\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.195.200.148 user=root Jul 2 20:47:46 ovpn sshd\[4244\]: Failed password for root from 122.195.200.148 port 14212 ssh2 Jul 2 20:47:48 ovpn sshd\[4244\]: Failed password for root from 122.195.200.148 port 14212 ssh2 Jul 2 20:47:50 ovpn sshd\[4244\]: Failed password for root from 122.195.200.148 port 14212 ssh2 Jul 2 20:47:53 ovpn sshd\[4284\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.195.200.148 user=root |
2019-07-03 02:58:24 |
| 219.155.167.254 | attackspambots | Unauthorised access (Jul 2) SRC=219.155.167.254 LEN=40 TTL=49 ID=22937 TCP DPT=23 WINDOW=27364 SYN |
2019-07-03 02:44:56 |
| 94.191.49.38 | attackbotsspam | SSH Brute-Force attacks |
2019-07-03 02:35:50 |
| 189.213.210.35 | attackbotsspam | Feb 23 12:28:02 motanud sshd\[27593\]: Invalid user webuser from 189.213.210.35 port 56894 Feb 23 12:28:02 motanud sshd\[27593\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.213.210.35 Feb 23 12:28:03 motanud sshd\[27593\]: Failed password for invalid user webuser from 189.213.210.35 port 56894 ssh2 |
2019-07-03 02:31:47 |
| 54.167.119.76 | attackbots | Jul 2 13:43:43 TCP Attack: SRC=54.167.119.76 DST=[Masked] LEN=250 TOS=0x00 PREC=0x00 TTL=235 DF PROTO=TCP SPT=40452 DPT=80 WINDOW=913 RES=0x00 ACK PSH URGP=0 |
2019-07-03 02:50:57 |
| 153.36.236.234 | attack | Jul 2 20:37:14 MK-Soft-Root2 sshd\[12451\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.236.234 user=root Jul 2 20:37:17 MK-Soft-Root2 sshd\[12451\]: Failed password for root from 153.36.236.234 port 11208 ssh2 Jul 2 20:37:51 MK-Soft-Root2 sshd\[12531\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.236.234 user=root ... |
2019-07-03 02:42:11 |
| 123.207.78.134 | attackspam | Jul 2 20:14:24 lnxmail61 sshd[19421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.78.134 |
2019-07-03 02:21:44 |
| 189.229.219.179 | attack | Jan 17 10:29:22 motanud sshd\[13653\]: Invalid user james from 189.229.219.179 port 52261 Jan 17 10:29:22 motanud sshd\[13653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.229.219.179 Jan 17 10:29:24 motanud sshd\[13653\]: Failed password for invalid user james from 189.229.219.179 port 52261 ssh2 |
2019-07-03 02:24:12 |