City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.20.85.124
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53823
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.20.85.124. IN A
;; AUTHORITY SECTION:
. 397 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022031400 1800 900 604800 86400
;; Query time: 75 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 14 18:39:24 CST 2022
;; MSG SIZE rcvd: 106Host 124.85.20.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 124.85.20.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 190.37.14.161 | attackbots | Unauthorized connection attempt from IP address 190.37.14.161 on Port 445(SMB) |
2019-11-05 02:17:31 |
| 81.22.45.190 | attack | Nov 4 19:07:38 h2177944 kernel: \[5766520.236975\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=19746 PROTO=TCP SPT=47950 DPT=44534 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 4 19:19:48 h2177944 kernel: \[5767249.417094\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=26402 PROTO=TCP SPT=47950 DPT=45364 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 4 19:29:17 h2177944 kernel: \[5767818.964815\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=57694 PROTO=TCP SPT=47950 DPT=45271 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 4 19:30:36 h2177944 kernel: \[5767897.950893\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=11278 PROTO=TCP SPT=47950 DPT=45061 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 4 19:31:23 h2177944 kernel: \[5767945.242347\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.190 DST=85.214.117.9 |
2019-11-05 02:32:04 |
| 89.219.222.239 | attackspambots | Unauthorized connection attempt from IP address 89.219.222.239 on Port 445(SMB) |
2019-11-05 02:25:24 |
| 118.70.171.4 | attack | Unauthorized connection attempt from IP address 118.70.171.4 on Port 445(SMB) |
2019-11-05 02:00:55 |
| 95.210.45.30 | attackspambots | (sshd) Failed SSH login from 95.210.45.30 (IT/Italy/Latium/Rome/95-210-45-30.ip.skylogicnet.com/[AS29286 Skylogic S.p.A.]): 1 in the last 3600 secs |
2019-11-05 01:59:25 |
| 115.238.62.154 | attackbotsspam | " " |
2019-11-05 02:32:32 |
| 178.128.117.68 | attack | 178.128.117.68 - - \[04/Nov/2019:15:25:09 +0000\] "POST /wp-login.php HTTP/1.1" 200 4358 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 178.128.117.68 - - \[04/Nov/2019:15:25:10 +0000\] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2019-11-05 02:34:52 |
| 116.203.152.250 | attack | SSH/22 MH Probe, BF, Hack - |
2019-11-05 02:04:18 |
| 151.80.41.124 | attackbots | Nov 4 15:43:40 localhost sshd\[5357\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.41.124 user=root Nov 4 15:43:42 localhost sshd\[5357\]: Failed password for root from 151.80.41.124 port 33734 ssh2 Nov 4 15:47:23 localhost sshd\[5566\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.41.124 user=root Nov 4 15:47:25 localhost sshd\[5566\]: Failed password for root from 151.80.41.124 port 43260 ssh2 Nov 4 15:50:57 localhost sshd\[5808\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.41.124 user=root ... |
2019-11-05 01:54:44 |
| 80.211.9.207 | attackbotsspam | Nov 4 15:31:33 [munged] sshd[29671]: Failed password for root from 80.211.9.207 port 45280 ssh2 |
2019-11-05 02:25:36 |
| 81.241.235.191 | attackbots | 2019-11-04T17:11:10.446743abusebot-2.cloudsearch.cf sshd\[21963\]: Invalid user pleomax from 81.241.235.191 port 60736 |
2019-11-05 02:22:07 |
| 222.186.173.154 | attackspam | $f2bV_matches |
2019-11-05 02:35:40 |
| 152.136.72.17 | attack | Nov 4 18:16:07 bouncer sshd\[2671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.72.17 user=root Nov 4 18:16:09 bouncer sshd\[2671\]: Failed password for root from 152.136.72.17 port 59868 ssh2 Nov 4 18:20:59 bouncer sshd\[2694\]: Invalid user v from 152.136.72.17 port 40788 ... |
2019-11-05 01:58:33 |
| 138.197.189.138 | attackspambots | Nov 4 12:24:38 plusreed sshd[26660]: Invalid user mbett from 138.197.189.138 ... |
2019-11-05 02:08:16 |
| 136.232.8.34 | attackbots | Unauthorized connection attempt from IP address 136.232.8.34 on Port 445(SMB) |
2019-11-05 02:16:30 |