City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.107.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33116
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.168.107.54. IN A
;; AUTHORITY SECTION:
. 579 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400
;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 19:36:22 CST 2022
;; MSG SIZE rcvd: 10754.107.168.104.in-addr.arpa domain name pointer 104-168-107-54-host.colocrossing.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
54.107.168.104.in-addr.arpa name = 104-168-107-54-host.colocrossing.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 107.170.195.219 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-08-28 07:47:31 |
| 206.189.51.28 | attackspam | WordPress login Brute force / Web App Attack on client site. |
2019-08-28 07:48:31 |
| 51.158.74.14 | attack | Aug 24 07:15:38 vtv3 sshd\[19775\]: Invalid user teacher from 51.158.74.14 port 52018 Aug 24 07:15:38 vtv3 sshd\[19775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.74.14 Aug 24 07:15:40 vtv3 sshd\[19775\]: Failed password for invalid user teacher from 51.158.74.14 port 52018 ssh2 Aug 24 07:19:34 vtv3 sshd\[21353\]: Invalid user artur from 51.158.74.14 port 40502 Aug 24 07:19:34 vtv3 sshd\[21353\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.74.14 Aug 24 07:31:27 vtv3 sshd\[27304\]: Invalid user tommy from 51.158.74.14 port 34234 Aug 24 07:31:27 vtv3 sshd\[27304\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.74.14 Aug 24 07:31:29 vtv3 sshd\[27304\]: Failed password for invalid user tommy from 51.158.74.14 port 34234 ssh2 Aug 24 07:35:32 vtv3 sshd\[29329\]: Invalid user amssys from 51.158.74.14 port 50962 Aug 24 07:35:32 vtv3 sshd\[29329\]: pam_unix\ |
2019-08-28 07:46:07 |
| 31.145.1.146 | attackbotsspam | Unauthorized connection attempt from IP address 31.145.1.146 on Port 445(SMB) |
2019-08-28 08:14:07 |
| 134.209.81.60 | attackbots | Aug 28 01:39:37 vps691689 sshd[10779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.81.60 Aug 28 01:39:38 vps691689 sshd[10779]: Failed password for invalid user atn from 134.209.81.60 port 48420 ssh2 ... |
2019-08-28 08:15:40 |
| 138.117.108.88 | attack | Aug 27 12:20:49 wbs sshd\[24936\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.117.108.88 user=root Aug 27 12:20:52 wbs sshd\[24936\]: Failed password for root from 138.117.108.88 port 47236 ssh2 Aug 27 12:28:31 wbs sshd\[25879\]: Invalid user leroy from 138.117.108.88 Aug 27 12:28:31 wbs sshd\[25879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.117.108.88 Aug 27 12:28:34 wbs sshd\[25879\]: Failed password for invalid user leroy from 138.117.108.88 port 40678 ssh2 |
2019-08-28 08:09:29 |
| 202.112.237.228 | attack | Triggered by Fail2Ban at Ares web server |
2019-08-28 08:23:31 |
| 167.71.200.201 | attackbots | Aug 28 07:38:14 localhost sshd[31940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.200.201 user=root Aug 28 07:38:17 localhost sshd[31940]: Failed password for root from 167.71.200.201 port 32792 ssh2 Aug 28 07:48:18 localhost sshd[32129]: Invalid user bsugar from 167.71.200.201 port 46483 ... |
2019-08-28 08:02:33 |
| 109.106.195.200 | attackbots | Unauthorized connection attempt from IP address 109.106.195.200 on Port 445(SMB) |
2019-08-28 08:00:14 |
| 121.204.93.13 | attack | IP reached maximum auth failures |
2019-08-28 08:15:55 |
| 218.92.0.155 | attackspambots | Aug 28 01:54:09 s64-1 sshd[22597]: Failed password for root from 218.92.0.155 port 3596 ssh2 Aug 28 01:54:23 s64-1 sshd[22597]: error: maximum authentication attempts exceeded for root from 218.92.0.155 port 3596 ssh2 [preauth] Aug 28 01:54:41 s64-1 sshd[22624]: Failed password for root from 218.92.0.155 port 37538 ssh2 ... |
2019-08-28 08:07:21 |
| 54.39.141.247 | attack | Aug 28 01:56:59 vps691689 sshd[11226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.141.247 Aug 28 01:57:01 vps691689 sshd[11226]: Failed password for invalid user pilot from 54.39.141.247 port 43484 ssh2 Aug 28 01:57:40 vps691689 sshd[11242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.141.247 ... |
2019-08-28 08:08:07 |
| 190.204.220.171 | attack | SSH/22 MH Probe, BF, Hack - |
2019-08-28 08:10:23 |
| 139.199.14.128 | attackspambots | Aug 28 00:31:55 www sshd\[26234\]: Invalid user lucas from 139.199.14.128 port 33854 ... |
2019-08-28 07:49:27 |
| 94.176.76.103 | attackspam | (Aug 28) LEN=40 TTL=245 ID=20200 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=40 TTL=245 ID=3766 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=40 TTL=245 ID=38271 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=40 TTL=245 ID=606 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=40 TTL=245 ID=33621 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=40 TTL=245 ID=2612 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=40 TTL=245 ID=62317 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=40 TTL=245 ID=18742 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=40 TTL=245 ID=58610 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=40 TTL=245 ID=18499 DF TCP DPT=23 WINDOW=14600 SYN (Aug 27) LEN=40 TTL=245 ID=34769 DF TCP DPT=23 WINDOW=14600 SYN (Aug 26) LEN=40 TTL=245 ID=48547 DF TCP DPT=23 WINDOW=14600 SYN (Aug 26) LEN=40 TTL=245 ID=33068 DF TCP DPT=23 WINDOW=14600 SYN (Aug 26) LEN=40 TTL=245 ID=34329 DF TCP DPT=23 WINDOW=14600 SYN (Aug 26) LEN=40 TTL=245 ID=47255 DF TCP DPT=23 WINDOW=14600 SYN ... |
2019-08-28 08:24:37 |