City: Daly City
Region: California
Country: United States
Internet Service Provider: AT&T
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.52.4.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14554
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.52.4.6. IN A
;; AUTHORITY SECTION:
. 143 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011300 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 13 18:07:37 CST 2022
;; MSG SIZE rcvd: 1036.4.52.104.in-addr.arpa domain name pointer 104-52-4-6.lightspeed.sntcca.sbcglobal.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
6.4.52.104.in-addr.arpa name = 104-52-4-6.lightspeed.sntcca.sbcglobal.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 61.216.13.170 | attack | Aug 14 19:58:58 itv-usvr-01 sshd[27789]: Invalid user fileserver from 61.216.13.170 Aug 14 19:58:58 itv-usvr-01 sshd[27789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.216.13.170 Aug 14 19:58:58 itv-usvr-01 sshd[27789]: Invalid user fileserver from 61.216.13.170 Aug 14 19:59:00 itv-usvr-01 sshd[27789]: Failed password for invalid user fileserver from 61.216.13.170 port 22127 ssh2 Aug 14 20:04:04 itv-usvr-01 sshd[28018]: Invalid user amanda from 61.216.13.170 |
2019-08-15 06:37:53 |
| 188.166.235.171 | attackspam | Aug 14 14:22:49 XXX sshd[5844]: Invalid user client from 188.166.235.171 port 36866 |
2019-08-15 06:36:40 |
| 43.231.61.146 | attackspam | SSH bruteforce |
2019-08-15 06:30:17 |
| 167.86.77.52 | attackbots | Aug 14 16:43:13 server sshd\[13988\]: Invalid user celery from 167.86.77.52 port 59646 Aug 14 16:43:13 server sshd\[13988\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.86.77.52 Aug 14 16:43:15 server sshd\[13988\]: Failed password for invalid user celery from 167.86.77.52 port 59646 ssh2 Aug 14 16:48:04 server sshd\[25744\]: Invalid user bootcamp from 167.86.77.52 port 52748 Aug 14 16:48:04 server sshd\[25744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.86.77.52 |
2019-08-15 07:07:22 |
| 13.67.143.123 | attackspambots | Aug 14 14:19:41 XXX sshd[5779]: Invalid user named from 13.67.143.123 port 57958 |
2019-08-15 06:54:44 |
| 203.99.57.114 | attack | Aug 14 17:26:18 aat-srv002 sshd[26463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.99.57.114 Aug 14 17:26:19 aat-srv002 sshd[26463]: Failed password for invalid user seba from 203.99.57.114 port 57139 ssh2 Aug 14 17:31:14 aat-srv002 sshd[26563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.99.57.114 Aug 14 17:31:16 aat-srv002 sshd[26563]: Failed password for invalid user scaner from 203.99.57.114 port 46848 ssh2 ... |
2019-08-15 06:45:58 |
| 176.38.158.48 | attackspam | Aug 14 17:29:43 MK-Soft-VM6 sshd\[15178\]: Invalid user uu from 176.38.158.48 port 60442 Aug 14 17:29:43 MK-Soft-VM6 sshd\[15178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.38.158.48 Aug 14 17:29:45 MK-Soft-VM6 sshd\[15178\]: Failed password for invalid user uu from 176.38.158.48 port 60442 ssh2 ... |
2019-08-15 06:44:13 |
| 79.137.87.44 | attackbots | Invalid user git from 79.137.87.44 port 45385 |
2019-08-15 06:50:10 |
| 157.230.209.220 | attackbots | Aug 14 23:47:16 [munged] sshd[10300]: Invalid user bootcamp from 157.230.209.220 port 50100 Aug 14 23:47:16 [munged] sshd[10300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.209.220 |
2019-08-15 06:48:13 |
| 159.65.6.57 | attackspambots | Aug 14 19:04:36 XXX sshd[20791]: Invalid user vi from 159.65.6.57 port 42362 |
2019-08-15 06:43:14 |
| 115.70.196.41 | attackspam | Aug 14 22:22:47 db sshd\[20819\]: Invalid user tomcat from 115.70.196.41 Aug 14 22:22:47 db sshd\[20819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.196.70.115.static.exetel.com.au Aug 14 22:22:48 db sshd\[20819\]: Failed password for invalid user tomcat from 115.70.196.41 port 38874 ssh2 Aug 14 22:28:25 db sshd\[21209\]: Invalid user botmaster from 115.70.196.41 Aug 14 22:28:25 db sshd\[21209\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.196.70.115.static.exetel.com.au ... |
2019-08-15 06:49:08 |
| 36.72.140.100 | attack | Aug 12 20:55:27 penfold sshd[24286]: Invalid user yuan from 36.72.140.100 port 34844 Aug 12 20:55:27 penfold sshd[24286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.72.140.100 Aug 12 20:55:29 penfold sshd[24286]: Failed password for invalid user yuan from 36.72.140.100 port 34844 ssh2 Aug 12 20:55:30 penfold sshd[24286]: Received disconnect from 36.72.140.100 port 34844:11: Bye Bye [preauth] Aug 12 20:55:30 penfold sshd[24286]: Disconnected from 36.72.140.100 port 34844 [preauth] Aug 12 21:09:45 penfold sshd[26310]: Invalid user nixie from 36.72.140.100 port 37912 Aug 12 21:09:45 penfold sshd[26310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.72.140.100 Aug 12 21:09:47 penfold sshd[26310]: Failed password for invalid user nixie from 36.72.140.100 port 37912 ssh2 Aug 12 21:09:47 penfold sshd[26310]: Received disconnect from 36.72.140.100 port 37912:11: Bye Bye [preauth] Aug ........ ------------------------------- |
2019-08-15 06:42:20 |
| 113.88.166.44 | attackbotsspam | Unauthorized connection attempt from IP address 113.88.166.44 on Port 445(SMB) |
2019-08-15 06:57:33 |
| 82.166.93.77 | attackspambots | Aug 14 19:06:20 XXX sshd[21200]: Invalid user filter from 82.166.93.77 port 56492 |
2019-08-15 06:52:10 |
| 85.216.49.226 | attackspam | 85.216.49.226 - - [14/Aug/2019:15:03:59 +0200] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 394 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 85.216.49.226 - - [14/Aug/2019:15:03:59 +0200] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404 396 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 85.216.49.226 - - [14/Aug/2019:15:04:00 +0200] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 399 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 85.216.49.226 - - [14/Aug/2019:15:04:01 +0200] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/53 ... |
2019-08-15 06:41:15 |