City: Santa Clara
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.248.76.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13519
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.248.76.100. IN A
;; AUTHORITY SECTION:
. 272 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022032602 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 27 09:01:52 CST 2022
;; MSG SIZE rcvd: 107Host 100.76.248.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 100.76.248.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.191.50.57 | attack | Sep 27 08:53:41 aat-srv002 sshd[17854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.57 Sep 27 08:53:43 aat-srv002 sshd[17854]: Failed password for invalid user usuarios from 94.191.50.57 port 42556 ssh2 Sep 27 09:00:59 aat-srv002 sshd[18060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.50.57 Sep 27 09:01:01 aat-srv002 sshd[18060]: Failed password for invalid user andrade123 from 94.191.50.57 port 54538 ssh2 ... |
2019-09-27 22:14:41 |
| 103.31.12.150 | attackspam | Sep 27 13:19:42 h2177944 kernel: \[2459443.916246\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=103.31.12.150 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=41483 DF PROTO=TCP SPT=59138 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 Sep 27 13:23:01 h2177944 kernel: \[2459642.363755\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=103.31.12.150 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=74 ID=1695 DF PROTO=TCP SPT=50433 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 Sep 27 13:25:17 h2177944 kernel: \[2459778.411477\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=103.31.12.150 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=63 ID=32624 DF PROTO=TCP SPT=54691 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 Sep 27 13:49:56 h2177944 kernel: \[2461257.562096\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=103.31.12.150 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=81 ID=50772 DF PROTO=TCP SPT=55036 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 Sep 27 14:14:48 h2177944 kernel: \[2462748.952317\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=103.31.12.150 DST=85.214.11 |
2019-09-27 21:26:02 |
| 162.144.119.35 | attackbotsspam | Sep 27 13:40:18 venus sshd\[19061\]: Invalid user audelaevent from 162.144.119.35 port 53802 Sep 27 13:40:18 venus sshd\[19061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.144.119.35 Sep 27 13:40:19 venus sshd\[19061\]: Failed password for invalid user audelaevent from 162.144.119.35 port 53802 ssh2 ... |
2019-09-27 21:46:47 |
| 69.10.52.142 | attack | Sep 27 07:54:44 aat-srv002 sshd[16017]: Failed password for root from 69.10.52.142 port 60294 ssh2 Sep 27 07:58:45 aat-srv002 sshd[16162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.10.52.142 Sep 27 07:58:47 aat-srv002 sshd[16162]: Failed password for invalid user guest from 69.10.52.142 port 42082 ssh2 ... |
2019-09-27 21:54:36 |
| 185.2.112.21 | attack | (sshd) Failed SSH login from 185.2.112.21 (PL/Poland/h21-112.host.cloud.atman.pl): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 27 08:14:43 host sshd[64386]: Did not receive identification string from 185.2.112.21 port 39540 |
2019-09-27 21:33:24 |
| 115.41.57.249 | attack | Sep 27 03:25:35 kapalua sshd\[24395\]: Invalid user db2inst1 from 115.41.57.249 Sep 27 03:25:35 kapalua sshd\[24395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.41.57.249 Sep 27 03:25:37 kapalua sshd\[24395\]: Failed password for invalid user db2inst1 from 115.41.57.249 port 54146 ssh2 Sep 27 03:30:27 kapalua sshd\[24939\]: Invalid user stage from 115.41.57.249 Sep 27 03:30:27 kapalua sshd\[24939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.41.57.249 |
2019-09-27 21:33:57 |
| 106.12.108.23 | attackbotsspam | Sep 27 15:01:52 microserver sshd[11483]: Invalid user cloud from 106.12.108.23 port 58846 Sep 27 15:01:52 microserver sshd[11483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.23 Sep 27 15:01:55 microserver sshd[11483]: Failed password for invalid user cloud from 106.12.108.23 port 58846 ssh2 Sep 27 15:07:11 microserver sshd[12178]: Invalid user instrume from 106.12.108.23 port 42440 Sep 27 15:07:11 microserver sshd[12178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.23 Sep 27 15:17:59 microserver sshd[13586]: Invalid user eduard from 106.12.108.23 port 37858 Sep 27 15:17:59 microserver sshd[13586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.23 Sep 27 15:18:01 microserver sshd[13586]: Failed password for invalid user eduard from 106.12.108.23 port 37858 ssh2 Sep 27 15:23:16 microserver sshd[14274]: Invalid user cs from 106.12.108.23 port 49688 Sep |
2019-09-27 22:06:13 |
| 175.139.231.129 | attackspambots | 2019-09-27T14:14:18.5024641240 sshd\[12588\]: Invalid user infra from 175.139.231.129 port 8369 2019-09-27T14:14:18.5051721240 sshd\[12588\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.139.231.129 2019-09-27T14:14:20.5510971240 sshd\[12588\]: Failed password for invalid user infra from 175.139.231.129 port 8369 ssh2 ... |
2019-09-27 21:51:15 |
| 84.33.93.48 | attackspam | $f2bV_matches |
2019-09-27 21:40:59 |
| 37.193.108.101 | attackspam | Sep 27 14:00:24 web8 sshd\[9091\]: Invalid user postgres from 37.193.108.101 Sep 27 14:00:24 web8 sshd\[9091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.193.108.101 Sep 27 14:00:26 web8 sshd\[9091\]: Failed password for invalid user postgres from 37.193.108.101 port 59338 ssh2 Sep 27 14:05:10 web8 sshd\[11313\]: Invalid user yy from 37.193.108.101 Sep 27 14:05:10 web8 sshd\[11313\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.193.108.101 |
2019-09-27 22:07:32 |
| 188.131.144.65 | attackbotsspam | 188.131.144.65 - - [27/Sep/2019:14:14:10 +0200] "POST /App.php?_=156269058172e HTTP/1.1" 404 491 ... |
2019-09-27 21:59:04 |
| 222.186.30.59 | attackbotsspam | Sep 27 13:14:57 ip-172-31-62-245 sshd\[13408\]: Failed password for root from 222.186.30.59 port 38828 ssh2\ Sep 27 13:14:59 ip-172-31-62-245 sshd\[13408\]: Failed password for root from 222.186.30.59 port 38828 ssh2\ Sep 27 13:15:02 ip-172-31-62-245 sshd\[13408\]: Failed password for root from 222.186.30.59 port 38828 ssh2\ Sep 27 13:15:21 ip-172-31-62-245 sshd\[13415\]: Failed password for root from 222.186.30.59 port 46048 ssh2\ Sep 27 13:15:47 ip-172-31-62-245 sshd\[13427\]: Failed password for root from 222.186.30.59 port 63692 ssh2\ |
2019-09-27 21:32:55 |
| 121.142.111.230 | attack | SSH scan :: |
2019-09-27 21:46:17 |
| 34.93.149.4 | attackbotsspam | Sep 27 15:17:36 eventyay sshd[23817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.93.149.4 Sep 27 15:17:38 eventyay sshd[23817]: Failed password for invalid user teamspeak3 from 34.93.149.4 port 54614 ssh2 Sep 27 15:23:19 eventyay sshd[23935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.93.149.4 ... |
2019-09-27 21:30:30 |
| 45.142.195.5 | attackbots | Sep 27 16:17:50 andromeda postfix/smtpd\[4308\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure Sep 27 16:17:56 andromeda postfix/smtpd\[10092\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure Sep 27 16:18:34 andromeda postfix/smtpd\[4156\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure Sep 27 16:18:44 andromeda postfix/smtpd\[35650\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure Sep 27 16:18:50 andromeda postfix/smtpd\[4308\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure |
2019-09-27 22:19:18 |