City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.64.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49022
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.64.0.1. IN A
;; AUTHORITY SECTION:
. 142 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023112203 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 23 10:16:22 CST 2023
;; MSG SIZE rcvd: 1031.0.64.104.in-addr.arpa domain name pointer a104-64-0-1.deploy.static.akamaitechnologies.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
1.0.64.104.in-addr.arpa name = a104-64-0-1.deploy.static.akamaitechnologies.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 54.38.241.171 | attack | prod3 ... |
2020-04-10 21:26:04 |
| 111.231.81.72 | attack | SSH brute force attempt |
2020-04-10 21:25:36 |
| 175.24.72.167 | attackspam | (sshd) Failed SSH login from 175.24.72.167 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 10 13:55:49 amsweb01 sshd[19130]: Invalid user ubuntu from 175.24.72.167 port 45248 Apr 10 13:55:50 amsweb01 sshd[19130]: Failed password for invalid user ubuntu from 175.24.72.167 port 45248 ssh2 Apr 10 14:07:34 amsweb01 sshd[20930]: Invalid user server from 175.24.72.167 port 42214 Apr 10 14:07:36 amsweb01 sshd[20930]: Failed password for invalid user server from 175.24.72.167 port 42214 ssh2 Apr 10 14:10:38 amsweb01 sshd[21375]: Invalid user erika from 175.24.72.167 port 58561 |
2020-04-10 21:47:13 |
| 106.12.91.102 | attack | Apr 10 02:23:22 web1 sshd\[10734\]: Invalid user test from 106.12.91.102 Apr 10 02:23:22 web1 sshd\[10734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.91.102 Apr 10 02:23:25 web1 sshd\[10734\]: Failed password for invalid user test from 106.12.91.102 port 57212 ssh2 Apr 10 02:27:53 web1 sshd\[11161\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.91.102 user=root Apr 10 02:27:55 web1 sshd\[11161\]: Failed password for root from 106.12.91.102 port 58970 ssh2 |
2020-04-10 22:08:39 |
| 176.113.115.210 | attack | 04/10/2020-08:11:06.006518 176.113.115.210 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-04-10 21:22:49 |
| 88.157.229.59 | attackspam | Apr 10 15:23:42 minden010 sshd[20103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.157.229.59 Apr 10 15:23:45 minden010 sshd[20103]: Failed password for invalid user postgres from 88.157.229.59 port 52878 ssh2 Apr 10 15:27:32 minden010 sshd[21384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.157.229.59 ... |
2020-04-10 21:29:42 |
| 2607:5300:60:797f:: | attack | Automatically reported by fail2ban report script (mx1) |
2020-04-10 21:35:10 |
| 81.17.20.10 | attackspambots | 4 attempts against mh-modsecurity-ban on sun |
2020-04-10 21:48:14 |
| 15.206.94.149 | attackbotsspam | Apr 10 09:16:18 NPSTNNYC01T sshd[21917]: Failed password for root from 15.206.94.149 port 13520 ssh2 Apr 10 09:20:50 NPSTNNYC01T sshd[22302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=15.206.94.149 Apr 10 09:20:51 NPSTNNYC01T sshd[22302]: Failed password for invalid user students from 15.206.94.149 port 28024 ssh2 ... |
2020-04-10 22:05:38 |
| 181.55.188.187 | attack | Apr 10 12:06:16 localhost sshd[837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.55.188.187 user=root Apr 10 12:06:17 localhost sshd[837]: Failed password for root from 181.55.188.187 port 60896 ssh2 Apr 10 12:10:34 localhost sshd[1298]: Invalid user user from 181.55.188.187 port 36978 Apr 10 12:10:34 localhost sshd[1298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.55.188.187 Apr 10 12:10:34 localhost sshd[1298]: Invalid user user from 181.55.188.187 port 36978 Apr 10 12:10:35 localhost sshd[1298]: Failed password for invalid user user from 181.55.188.187 port 36978 ssh2 ... |
2020-04-10 21:50:41 |
| 138.197.173.210 | attack | Apr 10 02:54:43 netserv300 sshd[27384]: Connection from 138.197.173.210 port 43452 on 178.63.236.21 port 22 Apr 10 02:54:48 netserv300 sshd[27385]: Connection from 138.197.173.210 port 47652 on 178.63.236.21 port 22 Apr 10 02:54:53 netserv300 sshd[27389]: Connection from 138.197.173.210 port 55880 on 178.63.236.21 port 22 Apr 10 02:54:59 netserv300 sshd[27391]: Connection from 138.197.173.210 port 35866 on 178.63.236.21 port 22 Apr 10 02:55:04 netserv300 sshd[27395]: Connection from 138.197.173.210 port 44080 on 178.63.236.21 port 22 Apr 10 02:55:10 netserv300 sshd[27399]: Connection from 138.197.173.210 port 52326 on 178.63.236.21 port 22 Apr 10 02:55:16 netserv300 sshd[27401]: Connection from 138.197.173.210 port 60528 on 178.63.236.21 port 22 Apr 10 02:55:22 netserv300 sshd[27405]: Connection from 138.197.173.210 port 40532 on 178.63.236.21 port 22 Apr 10 02:55:27 netserv300 sshd[27407]: Connection from 138.197.173.210 port 48766 on 178.63.236.21 port 22 Apr 10 02:55:........ ------------------------------ |
2020-04-10 21:45:04 |
| 167.71.106.196 | attackspambots | SSH invalid-user multiple login try |
2020-04-10 21:25:07 |
| 104.40.197.196 | attackbots | Apr 10 08:21:40 Tower sshd[3810]: Connection from 104.40.197.196 port 42132 on 192.168.10.220 port 22 rdomain "" Apr 10 08:21:41 Tower sshd[3810]: Invalid user linuxacademy from 104.40.197.196 port 42132 Apr 10 08:21:41 Tower sshd[3810]: error: Could not get shadow information for NOUSER Apr 10 08:21:41 Tower sshd[3810]: Failed password for invalid user linuxacademy from 104.40.197.196 port 42132 ssh2 Apr 10 08:21:41 Tower sshd[3810]: Received disconnect from 104.40.197.196 port 42132:11: Bye Bye [preauth] Apr 10 08:21:41 Tower sshd[3810]: Disconnected from invalid user linuxacademy 104.40.197.196 port 42132 [preauth] |
2020-04-10 21:34:09 |
| 118.24.161.205 | attackspam | Apr 10 06:04:05 server1 sshd\[842\]: Failed password for invalid user juan from 118.24.161.205 port 39674 ssh2 Apr 10 06:07:29 server1 sshd\[1880\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.161.205 user=root Apr 10 06:07:31 server1 sshd\[1880\]: Failed password for root from 118.24.161.205 port 49156 ssh2 Apr 10 06:10:47 server1 sshd\[2918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.161.205 user=postgres Apr 10 06:10:48 server1 sshd\[2918\]: Failed password for postgres from 118.24.161.205 port 58640 ssh2 ... |
2020-04-10 21:40:08 |
| 210.175.50.124 | attack | Apr 10 10:04:12 vps46666688 sshd[6345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.175.50.124 Apr 10 10:04:14 vps46666688 sshd[6345]: Failed password for invalid user admin from 210.175.50.124 port 26016 ssh2 ... |
2020-04-10 21:33:06 |