City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.20.81.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20669
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.20.81.99. IN A
;; AUTHORITY SECTION:
. 460 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030501 1800 900 604800 86400
;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 06 07:23:32 CST 2022
;; MSG SIZE rcvd: 105Host 99.81.20.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 99.81.20.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 93.210.53.245 | attackspambots | Aug 2 01:15:59 ArkNodeAT sshd\[3372\]: Invalid user security from 93.210.53.245 Aug 2 01:15:59 ArkNodeAT sshd\[3372\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.210.53.245 Aug 2 01:16:01 ArkNodeAT sshd\[3372\]: Failed password for invalid user security from 93.210.53.245 port 61884 ssh2 |
2019-08-02 14:09:03 |
| 185.222.211.230 | attack | Port scan on 8 port(s): 7910 7911 7912 7915 7916 7917 7918 7919 |
2019-08-02 13:55:53 |
| 94.194.166.5 | attackbotsspam | Aug 2 05:21:06 SilenceServices sshd[27311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.194.166.5 Aug 2 05:21:07 SilenceServices sshd[27311]: Failed password for invalid user plesk from 94.194.166.5 port 3879 ssh2 Aug 2 05:25:35 SilenceServices sshd[30397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.194.166.5 |
2019-08-02 13:28:44 |
| 79.133.56.144 | attackspambots | Jul 31 19:40:04 finn sshd[6301]: Invalid user erman from 79.133.56.144 port 52134 Jul 31 19:40:04 finn sshd[6301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.133.56.144 Jul 31 19:40:06 finn sshd[6301]: Failed password for invalid user erman from 79.133.56.144 port 52134 ssh2 Jul 31 19:40:07 finn sshd[6301]: Received disconnect from 79.133.56.144 port 52134:11: Bye Bye [preauth] Jul 31 19:40:07 finn sshd[6301]: Disconnected from 79.133.56.144 port 52134 [preauth] Jul 31 19:51:30 finn sshd[8830]: Invalid user ragna from 79.133.56.144 port 45926 Jul 31 19:51:30 finn sshd[8830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.133.56.144 Jul 31 19:51:32 finn sshd[8830]: Failed password for invalid user ragna from 79.133.56.144 port 45926 ssh2 Jul 31 19:51:32 finn sshd[8830]: Received disconnect from 79.133.56.144 port 45926:11: Bye Bye [preauth] Jul 31 19:51:32 finn sshd[8830]: Disconn........ ------------------------------- |
2019-08-02 13:56:12 |
| 119.145.27.16 | attack | Brute force SMTP login attempted. ... |
2019-08-02 13:36:29 |
| 190.119.190.122 | attackspam | Brute force attempt |
2019-08-02 13:44:16 |
| 218.92.0.204 | attackspambots | Aug 2 02:06:51 debian sshd\[2809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.204 user=root Aug 2 02:06:53 debian sshd\[2809\]: Failed password for root from 218.92.0.204 port 50894 ssh2 Aug 2 02:06:55 debian sshd\[2809\]: Failed password for root from 218.92.0.204 port 50894 ssh2 ... |
2019-08-02 14:11:25 |
| 91.121.217.23 | attackspambots | /var/log/messages:Aug 1 07:03:54 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1564643034.568:131595): pid=4879 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=4880 suid=74 rport=62467 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.121.217.23 terminal=? res=success' /var/log/messages:Aug 1 07:03:54 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1564643034.571:131596): pid=4879 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=4880 suid=74 rport=62467 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=91.121.217.23 terminal=? res=success' /var/log/messages:Aug 1 07:03:55 sanyalnet-cloud-vps fail2ban.filter[5325]: INFO [sshd]........ ------------------------------- |
2019-08-02 14:37:31 |
| 187.17.145.237 | attack | proto=tcp . spt=43485 . dpt=25 . (listed on Blocklist de Aug 01) (32) |
2019-08-02 14:28:13 |
| 86.3.14.48 | attack | Aug 2 01:16:32 server sshd[58184]: Failed password for invalid user support from 86.3.14.48 port 59894 ssh2 Aug 2 01:16:35 server sshd[58190]: Failed password for invalid user ubnt from 86.3.14.48 port 48968 ssh2 Aug 2 01:16:40 server sshd[58196]: Failed password for invalid user cisco from 86.3.14.48 port 49820 ssh2 |
2019-08-02 13:49:16 |
| 170.79.89.154 | attackbots | proto=tcp . spt=42070 . dpt=25 . (listed on Blocklist de Aug 01) (34) |
2019-08-02 14:22:38 |
| 222.120.192.122 | attackspambots | Invalid user network1 from 222.120.192.122 port 57072 |
2019-08-02 14:15:44 |
| 78.220.228.8 | attackbotsspam | 20 attempts against mh-ssh on oak.magehost.pro |
2019-08-02 14:07:33 |
| 54.38.242.80 | attack | Aug 2 04:53:13 ip-172-31-62-245 sshd\[17717\]: Invalid user exam from 54.38.242.80\ Aug 2 04:53:15 ip-172-31-62-245 sshd\[17717\]: Failed password for invalid user exam from 54.38.242.80 port 49608 ssh2\ Aug 2 04:57:13 ip-172-31-62-245 sshd\[17737\]: Invalid user cristian from 54.38.242.80\ Aug 2 04:57:14 ip-172-31-62-245 sshd\[17737\]: Failed password for invalid user cristian from 54.38.242.80 port 44604 ssh2\ Aug 2 05:01:20 ip-172-31-62-245 sshd\[17747\]: Invalid user test from 54.38.242.80\ |
2019-08-02 13:37:58 |
| 220.134.64.142 | attackbotsspam | Aug 2 07:54:31 vps647732 sshd[10949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.134.64.142 Aug 2 07:54:33 vps647732 sshd[10949]: Failed password for invalid user arjun from 220.134.64.142 port 44140 ssh2 ... |
2019-08-02 14:13:10 |