City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.20.70.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29155
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.20.70.45. IN A
;; AUTHORITY SECTION:
. 322 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400
;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 20 20:00:16 CST 2022
;; MSG SIZE rcvd: 105Host 45.70.20.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 45.70.20.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 79.174.248.224 | attack | Unauthorised access (Nov 23) SRC=79.174.248.224 LEN=52 TTL=112 ID=27751 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Nov 22) SRC=79.174.248.224 LEN=52 TTL=112 ID=6928 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Nov 22) SRC=79.174.248.224 LEN=52 TTL=112 ID=4546 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Nov 22) SRC=79.174.248.224 LEN=48 TTL=112 ID=23018 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Nov 20) SRC=79.174.248.224 LEN=52 TTL=115 ID=3029 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Nov 18) SRC=79.174.248.224 LEN=52 TTL=115 ID=25072 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Nov 18) SRC=79.174.248.224 LEN=52 TTL=115 ID=1061 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-23 23:21:00 |
| 93.29.173.161 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/93.29.173.161/ FR - 1H : (67) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : FR NAME ASN : ASN15557 IP : 93.29.173.161 CIDR : 93.24.0.0/13 PREFIX COUNT : 120 UNIQUE IP COUNT : 11490560 ATTACKS DETECTED ASN15557 : 1H - 2 3H - 2 6H - 2 12H - 4 24H - 5 DateTime : 2019-11-23 15:27:40 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-23 23:11:27 |
| 223.215.11.22 | attackspambots | badbot |
2019-11-23 23:16:58 |
| 80.228.4.194 | attackspam | Lines containing failures of 80.228.4.194 Nov 21 02:58:42 nxxxxxxx sshd[13837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.228.4.194 user=r.r Nov 21 02:58:45 nxxxxxxx sshd[13837]: Failed password for r.r from 80.228.4.194 port 34548 ssh2 Nov 21 02:58:45 nxxxxxxx sshd[13837]: Received disconnect from 80.228.4.194 port 34548:11: Bye Bye [preauth] Nov 21 02:58:45 nxxxxxxx sshd[13837]: Disconnected from authenticating user r.r 80.228.4.194 port 34548 [preauth] Nov 21 03:06:41 nxxxxxxx sshd[14906]: Invalid user apache from 80.228.4.194 port 18958 Nov 21 03:06:41 nxxxxxxx sshd[14906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.228.4.194 Nov 21 03:06:43 nxxxxxxx sshd[14906]: Failed password for invalid user apache from 80.228.4.194 port 18958 ssh2 Nov 21 03:06:43 nxxxxxxx sshd[14906]: Received disconnect from 80.228.4.194 port 18958:11: Bye Bye [preauth] Nov 21 03:06:43 nxxxxxxx ssh........ ------------------------------ |
2019-11-23 23:02:14 |
| 148.70.59.114 | attackbotsspam | Nov 23 16:00:32 meumeu sshd[11896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.59.114 Nov 23 16:00:34 meumeu sshd[11896]: Failed password for invalid user guest from 148.70.59.114 port 39626 ssh2 Nov 23 16:05:13 meumeu sshd[12412]: Failed password for backup from 148.70.59.114 port 16731 ssh2 ... |
2019-11-23 23:06:46 |
| 54.37.150.23 | attack | 54.37.150.23 was recorded 144 times by 35 hosts attempting to connect to the following ports: 2377,4243,2375,2376. Incident counter (4h, 24h, all-time): 144, 258, 1279 |
2019-11-23 22:51:18 |
| 199.249.230.101 | attackbotsspam | Nov 23 05:02:01 kapalua sshd\[16364\]: Invalid user netcon from 199.249.230.101 Nov 23 05:02:02 kapalua sshd\[16364\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=tor11.quintex.com Nov 23 05:02:04 kapalua sshd\[16364\]: Failed password for invalid user netcon from 199.249.230.101 port 18020 ssh2 Nov 23 05:02:07 kapalua sshd\[16364\]: Failed password for invalid user netcon from 199.249.230.101 port 18020 ssh2 Nov 23 05:02:09 kapalua sshd\[16364\]: Failed password for invalid user netcon from 199.249.230.101 port 18020 ssh2 |
2019-11-23 23:30:02 |
| 175.173.222.238 | attackspambots | badbot |
2019-11-23 22:54:20 |
| 150.223.28.250 | attackbots | 2019-11-23T15:23:59.979803scmdmz1 sshd\[5158\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.223.28.250 user=root 2019-11-23T15:24:02.153317scmdmz1 sshd\[5158\]: Failed password for root from 150.223.28.250 port 52578 ssh2 2019-11-23T15:27:52.120194scmdmz1 sshd\[5451\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.223.28.250 user=root ... |
2019-11-23 23:04:48 |
| 121.165.66.226 | attackbotsspam | Nov 23 04:44:10 eddieflores sshd\[12291\]: Invalid user tagoe from 121.165.66.226 Nov 23 04:44:10 eddieflores sshd\[12291\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.165.66.226 Nov 23 04:44:12 eddieflores sshd\[12291\]: Failed password for invalid user tagoe from 121.165.66.226 port 46808 ssh2 Nov 23 04:52:43 eddieflores sshd\[12924\]: Invalid user einsiedel from 121.165.66.226 Nov 23 04:52:43 eddieflores sshd\[12924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.165.66.226 |
2019-11-23 23:17:39 |
| 222.120.192.122 | attack | SSH Brute Force, server-1 sshd[999]: Failed password for invalid user ftpadmin from 222.120.192.122 port 34092 ssh2 |
2019-11-23 23:29:22 |
| 175.153.91.18 | attack | badbot |
2019-11-23 23:26:27 |
| 180.169.28.51 | attack | Nov 23 15:17:14 venus sshd\[830\]: Invalid user mowrer from 180.169.28.51 port 49478 Nov 23 15:17:14 venus sshd\[830\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.169.28.51 Nov 23 15:17:16 venus sshd\[830\]: Failed password for invalid user mowrer from 180.169.28.51 port 49478 ssh2 ... |
2019-11-23 23:26:02 |
| 106.75.6.229 | attackspambots | Nov 23 15:53:26 srv01 sshd[6502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.6.229 user=backup Nov 23 15:53:28 srv01 sshd[6502]: Failed password for backup from 106.75.6.229 port 48278 ssh2 Nov 23 15:58:20 srv01 sshd[6818]: Invalid user guest from 106.75.6.229 port 48336 Nov 23 15:58:20 srv01 sshd[6818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.6.229 Nov 23 15:58:20 srv01 sshd[6818]: Invalid user guest from 106.75.6.229 port 48336 Nov 23 15:58:22 srv01 sshd[6818]: Failed password for invalid user guest from 106.75.6.229 port 48336 ssh2 ... |
2019-11-23 23:06:16 |
| 91.134.169.67 | attackbotsspam | firewall-block, port(s): 5060/udp |
2019-11-23 23:19:54 |