City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.66.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55576
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.168.66.2. IN A
;; AUTHORITY SECTION:
. 597 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 19:39:55 CST 2022
;; MSG SIZE rcvd: 1052.66.168.104.in-addr.arpa domain name pointer 104-168-66-2-host.colocrossing.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
2.66.168.104.in-addr.arpa name = 104-168-66-2-host.colocrossing.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 36.92.21.50 | attack | 2020-04-06T23:44:17.851703shield sshd\[9735\]: Invalid user postgres from 36.92.21.50 port 42648 2020-04-06T23:44:17.855595shield sshd\[9735\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.92.21.50 2020-04-06T23:44:20.582873shield sshd\[9735\]: Failed password for invalid user postgres from 36.92.21.50 port 42648 ssh2 2020-04-06T23:48:32.400773shield sshd\[10897\]: Invalid user adriano from 36.92.21.50 port 41755 2020-04-06T23:48:32.404221shield sshd\[10897\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.92.21.50 |
2020-04-07 08:03:24 |
| 122.51.207.46 | attackbots | Apr 7 01:46:56 localhost sshd\[2772\]: Invalid user daniela from 122.51.207.46 Apr 7 01:46:56 localhost sshd\[2772\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.207.46 Apr 7 01:46:58 localhost sshd\[2772\]: Failed password for invalid user daniela from 122.51.207.46 port 54868 ssh2 Apr 7 01:48:26 localhost sshd\[2825\]: Invalid user karla from 122.51.207.46 Apr 7 01:48:26 localhost sshd\[2825\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.207.46 ... |
2020-04-07 08:06:40 |
| 46.38.145.144 | attackspam | Brute Force attack - banned by Fail2Ban |
2020-04-07 08:26:59 |
| 46.101.199.212 | attackbotsspam | Apr 7 01:46:11 roki sshd[429]: Invalid user administrateur from 46.101.199.212 Apr 7 01:46:11 roki sshd[429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.199.212 Apr 7 01:46:12 roki sshd[429]: Failed password for invalid user administrateur from 46.101.199.212 port 44982 ssh2 Apr 7 01:47:57 roki sshd[556]: Invalid user ftp_test from 46.101.199.212 Apr 7 01:47:57 roki sshd[556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.199.212 ... |
2020-04-07 08:32:34 |
| 71.189.47.10 | attackbotsspam | (sshd) Failed SSH login from 71.189.47.10 (US/United States/mail.ehmsllc.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 7 01:39:23 amsweb01 sshd[26296]: Invalid user user1 from 71.189.47.10 port 7731 Apr 7 01:39:24 amsweb01 sshd[26296]: Failed password for invalid user user1 from 71.189.47.10 port 7731 ssh2 Apr 7 01:44:48 amsweb01 sshd[27012]: Invalid user ming from 71.189.47.10 port 11502 Apr 7 01:44:50 amsweb01 sshd[27012]: Failed password for invalid user ming from 71.189.47.10 port 11502 ssh2 Apr 7 01:48:30 amsweb01 sshd[27529]: Invalid user httpd from 71.189.47.10 port 3805 |
2020-04-07 08:00:54 |
| 202.168.205.181 | attack | Apr 7 01:48:10 mout sshd[27650]: Invalid user admin from 202.168.205.181 port 23428 |
2020-04-07 08:20:27 |
| 178.156.202.142 | attack | 2020-04-07T01:48:33.233929hz01.yumiweb.com sshd\[16200\]: Invalid user admin from 178.156.202.142 port 49588 2020-04-07T01:48:33.564863hz01.yumiweb.com sshd\[16202\]: Invalid user admin from 178.156.202.142 port 50106 2020-04-07T01:48:33.945808hz01.yumiweb.com sshd\[16204\]: Invalid user user from 178.156.202.142 port 50652 ... |
2020-04-07 08:00:19 |
| 222.186.180.9 | attackspam | $f2bV_matches |
2020-04-07 07:55:24 |
| 45.13.93.82 | attack | Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080 |
2020-04-07 08:17:19 |
| 210.211.101.58 | attack | Apr 6 23:45:03 124388 sshd[25767]: Invalid user admin from 210.211.101.58 port 40848 Apr 6 23:45:03 124388 sshd[25767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.211.101.58 Apr 6 23:45:03 124388 sshd[25767]: Invalid user admin from 210.211.101.58 port 40848 Apr 6 23:45:05 124388 sshd[25767]: Failed password for invalid user admin from 210.211.101.58 port 40848 ssh2 Apr 6 23:47:56 124388 sshd[25889]: Invalid user ubuntu from 210.211.101.58 port 19003 |
2020-04-07 08:34:57 |
| 118.25.123.42 | attack | Apr 7 01:43:14 v22018086721571380 sshd[12260]: Failed password for invalid user user2 from 118.25.123.42 port 55102 ssh2 |
2020-04-07 07:59:04 |
| 157.245.83.8 | attackbotsspam | Apr 7 01:48:12 odroid64 sshd\[2509\]: Invalid user user from 157.245.83.8 Apr 7 01:48:12 odroid64 sshd\[2509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.83.8 ... |
2020-04-07 08:17:46 |
| 201.49.127.212 | attackbotsspam | Apr 6 23:32:55 ws26vmsma01 sshd[224236]: Failed password for root from 201.49.127.212 port 50740 ssh2 ... |
2020-04-07 08:25:26 |
| 222.89.92.196 | attack | Apr 7 01:49:20 sso sshd[21144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.89.92.196 Apr 7 01:49:22 sso sshd[21144]: Failed password for invalid user test from 222.89.92.196 port 15525 ssh2 ... |
2020-04-07 08:04:39 |
| 123.30.154.184 | attack | sshd jail - ssh hack attempt |
2020-04-07 08:03:07 |