City: Central
Region: Central and Western Hong Kong Island
Country: Hong Kong
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.79.104.61
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19151
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.79.104.61. IN A
;; AUTHORITY SECTION:
. 421 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023020701 1800 900 604800 86400
;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 08 12:53:27 CST 2023
;; MSG SIZE rcvd: 10661.104.79.104.in-addr.arpa domain name pointer a104-79-104-61.deploy.static.akamaitechnologies.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
61.104.79.104.in-addr.arpa name = a104-79-104-61.deploy.static.akamaitechnologies.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 75.103.66.8 | attack | xmlrpc attack |
2019-09-14 02:21:08 |
| 103.243.252.244 | attackbotsspam | Invalid user steamcmd from 103.243.252.244 port 40962 |
2019-09-14 01:30:55 |
| 138.94.193.43 | attack | SPF Fail sender not permitted to send mail for @agtnet.com.br / Sent mail to target address hacked/leaked from abandonia in 2016 |
2019-09-14 01:43:45 |
| 115.159.216.187 | attack | Sep 13 16:10:01 markkoudstaal sshd[28098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.216.187 Sep 13 16:10:03 markkoudstaal sshd[28098]: Failed password for invalid user 1234 from 115.159.216.187 port 58524 ssh2 Sep 13 16:16:09 markkoudstaal sshd[28800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.216.187 |
2019-09-14 01:44:55 |
| 37.59.37.69 | attack | Sep 13 14:37:59 lnxmysql61 sshd[27386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.37.69 |
2019-09-14 02:06:04 |
| 110.182.83.155 | attackspam | " " |
2019-09-14 01:22:59 |
| 222.186.42.241 | attackspambots | 2019-09-14T01:07:47.625353enmeeting.mahidol.ac.th sshd\[8993\]: User root from 222.186.42.241 not allowed because not listed in AllowUsers 2019-09-14T01:07:48.001610enmeeting.mahidol.ac.th sshd\[8993\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.241 user=root 2019-09-14T01:07:50.329046enmeeting.mahidol.ac.th sshd\[8993\]: Failed password for invalid user root from 222.186.42.241 port 28966 ssh2 ... |
2019-09-14 02:13:19 |
| 195.211.162.91 | attackspam | port scan and connect, tcp 8081 (blackice-icecap) |
2019-09-14 01:50:22 |
| 157.230.248.65 | attackbotsspam | Sep 13 16:02:07 web8 sshd\[14841\]: Invalid user team from 157.230.248.65 Sep 13 16:02:07 web8 sshd\[14841\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.248.65 Sep 13 16:02:09 web8 sshd\[14841\]: Failed password for invalid user team from 157.230.248.65 port 20817 ssh2 Sep 13 16:07:31 web8 sshd\[17396\]: Invalid user user01 from 157.230.248.65 Sep 13 16:07:31 web8 sshd\[17396\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.248.65 |
2019-09-14 01:28:28 |
| 121.12.151.250 | attackspam | Invalid user mes from 121.12.151.250 port 53066 |
2019-09-14 01:51:25 |
| 138.197.162.28 | attackbots | Sep 13 01:45:04 hcbb sshd\[14120\]: Invalid user 1qaz2wsx from 138.197.162.28 Sep 13 01:45:04 hcbb sshd\[14120\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.162.28 Sep 13 01:45:06 hcbb sshd\[14120\]: Failed password for invalid user 1qaz2wsx from 138.197.162.28 port 40262 ssh2 Sep 13 01:49:32 hcbb sshd\[14499\]: Invalid user bots from 138.197.162.28 Sep 13 01:49:32 hcbb sshd\[14499\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.162.28 |
2019-09-14 01:59:22 |
| 125.227.236.60 | attackspambots | detected by Fail2Ban |
2019-09-14 02:00:30 |
| 14.34.28.131 | attack | Sep 13 16:51:41 lenivpn01 kernel: \[619097.764894\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=14.34.28.131 DST=195.201.121.15 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=13790 DF PROTO=TCP SPT=34500 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 Sep 13 16:51:42 lenivpn01 kernel: \[619098.807111\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=14.34.28.131 DST=195.201.121.15 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=13791 DF PROTO=TCP SPT=34500 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 Sep 13 16:51:44 lenivpn01 kernel: \[619100.888059\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=14.34.28.131 DST=195.201.121.15 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=13792 DF PROTO=TCP SPT=34500 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 ... |
2019-09-14 01:33:32 |
| 60.191.140.134 | attackbots | Sep 13 15:48:02 hb sshd\[30938\]: Invalid user appuser from 60.191.140.134 Sep 13 15:48:02 hb sshd\[30938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.191.140.134 Sep 13 15:48:04 hb sshd\[30938\]: Failed password for invalid user appuser from 60.191.140.134 port 38962 ssh2 Sep 13 15:52:46 hb sshd\[31319\]: Invalid user user from 60.191.140.134 Sep 13 15:52:46 hb sshd\[31319\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.191.140.134 |
2019-09-14 02:22:10 |
| 185.173.35.1 | attack | Honeypot hit. |
2019-09-14 02:08:56 |