City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.89.241.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52302
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.89.241.242. IN A
;; AUTHORITY SECTION:
. 519 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023112203 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 23 10:34:25 CST 2023
;; MSG SIZE rcvd: 107242.241.89.104.in-addr.arpa domain name pointer a104-89-241-242.deploy.static.akamaitechnologies.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
242.241.89.104.in-addr.arpa name = a104-89-241-242.deploy.static.akamaitechnologies.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 62.210.157.140 | attackbotsspam | Oct 10 20:33:20 sachi sshd\[32057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62-210-157-140.rev.poneytelecom.eu user=root Oct 10 20:33:23 sachi sshd\[32057\]: Failed password for root from 62.210.157.140 port 52794 ssh2 Oct 10 20:37:09 sachi sshd\[32390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62-210-157-140.rev.poneytelecom.eu user=root Oct 10 20:37:11 sachi sshd\[32390\]: Failed password for root from 62.210.157.140 port 44010 ssh2 Oct 10 20:40:54 sachi sshd\[339\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62-210-157-140.rev.poneytelecom.eu user=root |
2019-10-11 16:04:10 |
| 80.211.158.23 | attack | Oct 6 06:32:30 shadeyouvpn sshd[15778]: Address 80.211.158.23 maps to jbwastats.pl, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 6 06:32:30 shadeyouvpn sshd[15778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.158.23 user=r.r Oct 6 06:32:32 shadeyouvpn sshd[15778]: Failed password for r.r from 80.211.158.23 port 40772 ssh2 Oct 6 06:32:32 shadeyouvpn sshd[15778]: Received disconnect from 80.211.158.23: 11: Bye Bye [preauth] Oct 6 06:36:29 shadeyouvpn sshd[19024]: Address 80.211.158.23 maps to jbwastats.pl, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 6 06:36:29 shadeyouvpn sshd[19024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.158.23 user=r.r Oct 6 06:36:31 shadeyouv .... truncated .... Oct 6 06:32:30 shadeyouvpn sshd[15778]: Address 80.211.158.23 maps to jbwastats.pl, but this does not map back to ........ ------------------------------- |
2019-10-11 16:43:26 |
| 85.167.32.224 | attackspam | 2019-10-11T06:02:34.003617abusebot-5.cloudsearch.cf sshd\[7042\]: Invalid user robert from 85.167.32.224 port 35986 |
2019-10-11 16:06:53 |
| 80.211.110.91 | attack | Oct 11 09:47:03 mail sshd[14719]: Failed password for root from 80.211.110.91 port 57474 ssh2 Oct 11 09:51:10 mail sshd[15929]: Failed password for root from 80.211.110.91 port 40858 ssh2 |
2019-10-11 16:29:50 |
| 114.46.63.21 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/114.46.63.21/ TW - 1H : (318) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TW NAME ASN : ASN3462 IP : 114.46.63.21 CIDR : 114.46.0.0/16 PREFIX COUNT : 390 UNIQUE IP COUNT : 12267520 WYKRYTE ATAKI Z ASN3462 : 1H - 25 3H - 45 6H - 83 12H - 157 24H - 309 DateTime : 2019-10-11 05:51:34 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-11 16:41:53 |
| 37.120.33.30 | attackbots | Oct 11 09:00:45 mail sshd[29260]: Failed password for root from 37.120.33.30 port 46138 ssh2 Oct 11 09:04:52 mail sshd[30525]: Failed password for root from 37.120.33.30 port 37573 ssh2 |
2019-10-11 16:30:25 |
| 119.29.52.46 | attackspam | Oct 11 09:20:32 microserver sshd[38741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.52.46 user=root Oct 11 09:20:34 microserver sshd[38741]: Failed password for root from 119.29.52.46 port 41068 ssh2 Oct 11 09:25:35 microserver sshd[39446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.52.46 user=root Oct 11 09:25:39 microserver sshd[39446]: Failed password for root from 119.29.52.46 port 44040 ssh2 Oct 11 09:29:54 microserver sshd[39750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.52.46 user=root Oct 11 09:42:52 microserver sshd[41739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.52.46 user=root Oct 11 09:42:55 microserver sshd[41739]: Failed password for root from 119.29.52.46 port 55756 ssh2 Oct 11 09:47:24 microserver sshd[42449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty= |
2019-10-11 16:03:39 |
| 77.247.110.225 | attackspambots | \[2019-10-11 03:40:41\] SECURITY\[1898\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-11T03:40:41.599-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="1632601148825681012",SessionID="0x7fc3ac35d378",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.225/61260",ACLName="no_extension_match" \[2019-10-11 03:41:18\] SECURITY\[1898\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-11T03:41:18.965-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="1178201148236518005",SessionID="0x7fc3ad578188",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.225/57991",ACLName="no_extension_match" \[2019-10-11 03:41:43\] SECURITY\[1898\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-11T03:41:43.477-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="1632701148825681012",SessionID="0x7fc3ac5226d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.225/58627", |
2019-10-11 16:03:52 |
| 91.121.205.83 | attack | Oct 10 18:48:48 sachi sshd\[22723\]: Invalid user Hotdog@2017 from 91.121.205.83 Oct 10 18:48:48 sachi sshd\[22723\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=telecharge5.vega5.fr Oct 10 18:48:49 sachi sshd\[22723\]: Failed password for invalid user Hotdog@2017 from 91.121.205.83 port 59808 ssh2 Oct 10 18:55:49 sachi sshd\[23322\]: Invalid user Citroen from 91.121.205.83 Oct 10 18:55:49 sachi sshd\[23322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=telecharge5.vega5.fr |
2019-10-11 16:22:56 |
| 111.242.128.246 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/111.242.128.246/ TW - 1H : (322) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TW NAME ASN : ASN3462 IP : 111.242.128.246 CIDR : 111.242.0.0/16 PREFIX COUNT : 390 UNIQUE IP COUNT : 12267520 WYKRYTE ATAKI Z ASN3462 : 1H - 29 3H - 49 6H - 87 12H - 161 24H - 313 DateTime : 2019-10-11 05:52:44 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-11 16:00:58 |
| 78.160.214.57 | attackspam | Automatic report - Port Scan Attack |
2019-10-11 16:02:14 |
| 23.94.133.72 | attackbotsspam | Oct 11 10:14:41 dedicated sshd[9680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.133.72 user=root Oct 11 10:14:43 dedicated sshd[9680]: Failed password for root from 23.94.133.72 port 60802 ssh2 |
2019-10-11 16:27:33 |
| 198.40.56.50 | attack | 10/11/2019-05:52:16.792437 198.40.56.50 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2019-10-11 16:15:51 |
| 180.96.69.215 | attack | Oct 11 05:31:55 apollo sshd\[23763\]: Failed password for root from 180.96.69.215 port 46874 ssh2Oct 11 05:47:26 apollo sshd\[23818\]: Failed password for root from 180.96.69.215 port 36940 ssh2Oct 11 05:51:56 apollo sshd\[23837\]: Failed password for root from 180.96.69.215 port 46358 ssh2 ... |
2019-10-11 16:25:35 |
| 62.234.109.155 | attackspam | Oct 11 07:08:45 www2 sshd\[12517\]: Invalid user Passwort123!@\# from 62.234.109.155Oct 11 07:08:47 www2 sshd\[12517\]: Failed password for invalid user Passwort123!@\# from 62.234.109.155 port 53016 ssh2Oct 11 07:13:04 www2 sshd\[13068\]: Invalid user Song@123 from 62.234.109.155 ... |
2019-10-11 16:11:52 |