City: San Antonio
Region: Texas
Country: United States
Internet Service Provider: AT&T
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.55.239.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30673
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.55.239.53. IN A
;; AUTHORITY SECTION:
. 427 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023032600 1800 900 604800 86400
;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 27 00:54:15 CST 2023
;; MSG SIZE rcvd: 10653.239.55.104.in-addr.arpa domain name pointer 104-55-239-53.lightspeed.livnmi.sbcglobal.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
53.239.55.104.in-addr.arpa name = 104-55-239-53.lightspeed.livnmi.sbcglobal.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.15.158 | attackspambots | Feb 12 21:26:59 localhost sshd\[1146\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.158 user=root Feb 12 21:27:01 localhost sshd\[1146\]: Failed password for root from 222.186.15.158 port 35470 ssh2 Feb 12 21:27:04 localhost sshd\[1146\]: Failed password for root from 222.186.15.158 port 35470 ssh2 |
2020-02-13 04:30:28 |
| 89.248.172.101 | attack | Feb 12 20:51:10 h2177944 kernel: \[4735052.205426\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=89.248.172.101 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=25297 PROTO=TCP SPT=41838 DPT=20971 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 12 20:51:10 h2177944 kernel: \[4735052.205440\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=89.248.172.101 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=25297 PROTO=TCP SPT=41838 DPT=20971 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 12 20:54:52 h2177944 kernel: \[4735274.172367\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=89.248.172.101 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=7614 PROTO=TCP SPT=41838 DPT=20911 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 12 20:54:52 h2177944 kernel: \[4735274.172380\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=89.248.172.101 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=7614 PROTO=TCP SPT=41838 DPT=20911 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 12 21:43:54 h2177944 kernel: \[4738215.045525\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=89.248.172.101 DST=85.21 |
2020-02-13 04:56:25 |
| 115.238.46.69 | attackbots | 1433/tcp 1433/tcp [2020-01-26/02-12]2pkt |
2020-02-13 04:35:58 |
| 111.229.45.193 | attackbotsspam | 2020-02-12T20:28:56.362826 sshd[32143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.45.193 user=root 2020-02-12T20:28:58.163581 sshd[32143]: Failed password for root from 111.229.45.193 port 56088 ssh2 2020-02-12T20:32:47.310110 sshd[32247]: Invalid user celeste from 111.229.45.193 port 51516 2020-02-12T20:32:47.324628 sshd[32247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.45.193 2020-02-12T20:32:47.310110 sshd[32247]: Invalid user celeste from 111.229.45.193 port 51516 2020-02-12T20:32:49.170568 sshd[32247]: Failed password for invalid user celeste from 111.229.45.193 port 51516 ssh2 ... |
2020-02-13 04:52:07 |
| 190.66.3.92 | attackspam | Feb 12 17:50:02 vlre-nyc-1 sshd\[897\]: Invalid user ishimaki from 190.66.3.92 Feb 12 17:50:02 vlre-nyc-1 sshd\[897\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.66.3.92 Feb 12 17:50:04 vlre-nyc-1 sshd\[897\]: Failed password for invalid user ishimaki from 190.66.3.92 port 43682 ssh2 Feb 12 17:52:34 vlre-nyc-1 sshd\[939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.66.3.92 user=root Feb 12 17:52:36 vlre-nyc-1 sshd\[939\]: Failed password for root from 190.66.3.92 port 36050 ssh2 ... |
2020-02-13 04:33:53 |
| 60.113.85.41 | attackspam | Feb 12 20:44:30 MK-Soft-VM3 sshd[2989]: Failed password for root from 60.113.85.41 port 59008 ssh2 ... |
2020-02-13 04:21:19 |
| 217.211.149.4 | attackspam | firewall-block, port(s): 23/tcp |
2020-02-13 04:57:08 |
| 5.165.80.162 | attackspam | 1581514837 - 02/12/2020 14:40:37 Host: 5.165.80.162/5.165.80.162 Port: 23 TCP Blocked |
2020-02-13 04:26:59 |
| 178.128.29.113 | attackspambots | $f2bV_matches |
2020-02-13 04:29:03 |
| 207.154.206.212 | attackspambots | Feb 12 16:05:07 srv01 sshd[8259]: Invalid user cic from 207.154.206.212 port 51660 Feb 12 16:05:07 srv01 sshd[8259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.206.212 Feb 12 16:05:07 srv01 sshd[8259]: Invalid user cic from 207.154.206.212 port 51660 Feb 12 16:05:09 srv01 sshd[8259]: Failed password for invalid user cic from 207.154.206.212 port 51660 ssh2 Feb 12 16:07:36 srv01 sshd[8338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.206.212 user=root Feb 12 16:07:38 srv01 sshd[8338]: Failed password for root from 207.154.206.212 port 48120 ssh2 ... |
2020-02-13 05:01:54 |
| 194.26.29.121 | attack | Feb 12 21:06:52 h2177944 kernel: \[4735993.813174\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.26.29.121 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=177 ID=29966 PROTO=TCP SPT=56444 DPT=3307 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 12 21:06:52 h2177944 kernel: \[4735993.813190\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.26.29.121 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=177 ID=29966 PROTO=TCP SPT=56444 DPT=3307 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 12 21:15:02 h2177944 kernel: \[4736483.533925\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.26.29.121 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=176 ID=8504 PROTO=TCP SPT=56444 DPT=3312 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 12 21:15:02 h2177944 kernel: \[4736483.533940\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.26.29.121 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=176 ID=8504 PROTO=TCP SPT=56444 DPT=3312 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 12 21:58:12 h2177944 kernel: \[4739073.601992\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.26.29.121 DST=85.214.117.9 L |
2020-02-13 05:00:30 |
| 89.151.134.154 | attackspam | DATE:2020-02-12 14:38:49, IP:89.151.134.154, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq) |
2020-02-13 04:48:42 |
| 27.66.124.110 | attackspam | 23/tcp 23/tcp 23/tcp... [2020-01-13/02-12]5pkt,1pt.(tcp) |
2020-02-13 04:34:50 |
| 134.209.181.90 | attackbotsspam | As always with digital ocean |
2020-02-13 04:48:26 |
| 175.143.127.73 | attack | Feb 12 20:50:59 srv01 sshd[26491]: Invalid user admin from 175.143.127.73 port 47393 Feb 12 20:50:59 srv01 sshd[26491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.143.127.73 Feb 12 20:50:59 srv01 sshd[26491]: Invalid user admin from 175.143.127.73 port 47393 Feb 12 20:51:00 srv01 sshd[26491]: Failed password for invalid user admin from 175.143.127.73 port 47393 ssh2 Feb 12 20:54:11 srv01 sshd[26675]: Invalid user ckodhek from 175.143.127.73 port 60708 ... |
2020-02-13 05:04:17 |