City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.90.72.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14949
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.90.72.129. IN A
;; AUTHORITY SECTION:
. 594 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 05:11:42 CST 2022
;; MSG SIZE rcvd: 106129.72.90.104.in-addr.arpa domain name pointer a104-90-72-129.deploy.static.akamaitechnologies.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
129.72.90.104.in-addr.arpa name = a104-90-72-129.deploy.static.akamaitechnologies.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 159.203.32.174 | attackspam | 2019-11-29T08:13:21.715958homeassistant sshd[24164]: Invalid user admin from 159.203.32.174 port 53548 2019-11-29T08:13:21.722042homeassistant sshd[24164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.32.174 ... |
2019-11-29 18:55:23 |
| 181.41.216.135 | attack | [portscan] tcp/25 [smtp] [scan/connect: 58 time(s)] in blocklist.de:'listed [mail]' in sorbs:'listed [spam]' in gbudb.net:'listed' *(RWIN=7300)(11291316) |
2019-11-29 19:03:59 |
| 181.40.122.2 | attackspam | Nov 29 11:55:38 sd-53420 sshd\[18058\]: User mysql from 181.40.122.2 not allowed because none of user's groups are listed in AllowGroups Nov 29 11:55:38 sd-53420 sshd\[18058\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.40.122.2 user=mysql Nov 29 11:55:40 sd-53420 sshd\[18058\]: Failed password for invalid user mysql from 181.40.122.2 port 45868 ssh2 Nov 29 11:59:38 sd-53420 sshd\[18653\]: User root from 181.40.122.2 not allowed because none of user's groups are listed in AllowGroups Nov 29 11:59:38 sd-53420 sshd\[18653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.40.122.2 user=root ... |
2019-11-29 19:13:29 |
| 51.255.35.58 | attackspam | Nov 29 11:56:09 server sshd\[1299\]: Invalid user remple from 51.255.35.58 Nov 29 11:56:09 server sshd\[1299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.ip-51-255-35.eu Nov 29 11:56:11 server sshd\[1299\]: Failed password for invalid user remple from 51.255.35.58 port 59354 ssh2 Nov 29 12:26:41 server sshd\[9203\]: Invalid user musiz from 51.255.35.58 Nov 29 12:26:41 server sshd\[9203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.ip-51-255-35.eu ... |
2019-11-29 19:11:18 |
| 183.16.100.12 | attack | Nov 29 07:21:55 mail kernel: [28262.803251] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=183.16.100.12 DST=91.205.173.180 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=8020 DF PROTO=TCP SPT=58122 DPT=4899 WINDOW=8192 RES=0x00 SYN URGP=0 Nov 29 07:21:58 mail kernel: [28265.803095] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=183.16.100.12 DST=91.205.173.180 LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=8021 DF PROTO=TCP SPT=58122 DPT=4899 WINDOW=8192 RES=0x00 SYN URGP=0 Nov 29 07:22:04 mail kernel: [28271.803489] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=183.16.100.12 DST=91.205.173.180 LEN=48 TOS=0x00 PREC=0x00 TTL=117 ID=8024 DF PROTO=TCP SPT=58122 DPT=4899 WINDOW=8192 RES=0x00 SYN URGP=0 |
2019-11-29 19:28:52 |
| 112.64.170.178 | attack | 2019-11-29T11:35:15.666637vps751288.ovh.net sshd\[6618\]: Invalid user romito from 112.64.170.178 port 29046 2019-11-29T11:35:15.675144vps751288.ovh.net sshd\[6618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.170.178 2019-11-29T11:35:17.742201vps751288.ovh.net sshd\[6618\]: Failed password for invalid user romito from 112.64.170.178 port 29046 ssh2 2019-11-29T11:43:19.430043vps751288.ovh.net sshd\[6620\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.170.178 user=root 2019-11-29T11:43:21.276169vps751288.ovh.net sshd\[6620\]: Failed password for root from 112.64.170.178 port 3539 ssh2 |
2019-11-29 18:57:18 |
| 120.78.152.19 | attack | Automatic report - Port Scan |
2019-11-29 19:06:29 |
| 115.238.59.165 | attackspambots | Nov 29 13:17:45 itv-usvr-01 sshd[19243]: Invalid user yoyo from 115.238.59.165 Nov 29 13:17:45 itv-usvr-01 sshd[19243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.59.165 Nov 29 13:17:45 itv-usvr-01 sshd[19243]: Invalid user yoyo from 115.238.59.165 Nov 29 13:17:46 itv-usvr-01 sshd[19243]: Failed password for invalid user yoyo from 115.238.59.165 port 35224 ssh2 Nov 29 13:22:16 itv-usvr-01 sshd[19426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.59.165 user=root Nov 29 13:22:19 itv-usvr-01 sshd[19426]: Failed password for root from 115.238.59.165 port 42662 ssh2 |
2019-11-29 19:19:25 |
| 187.116.101.222 | attackbots | Unauthorised access (Nov 29) SRC=187.116.101.222 LEN=44 TOS=0x10 PREC=0x40 TTL=238 ID=50066 TCP DPT=1433 WINDOW=1024 SYN |
2019-11-29 18:52:08 |
| 213.32.18.25 | attack | Nov 29 11:57:45 markkoudstaal sshd[26087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.18.25 Nov 29 11:57:47 markkoudstaal sshd[26087]: Failed password for invalid user spark04 from 213.32.18.25 port 47624 ssh2 Nov 29 12:00:51 markkoudstaal sshd[26420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.18.25 |
2019-11-29 19:12:55 |
| 115.74.72.136 | attackspam | Port 1433 Scan |
2019-11-29 19:12:38 |
| 18.200.210.70 | attackspam | xmlrpc attack |
2019-11-29 19:08:54 |
| 160.238.236.94 | attackspam | Automatic report - Port Scan Attack |
2019-11-29 19:07:23 |
| 218.92.0.191 | attackbots | Nov 29 12:16:01 dcd-gentoo sshd[29811]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Nov 29 12:16:01 dcd-gentoo sshd[29811]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Nov 29 12:16:05 dcd-gentoo sshd[29811]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Nov 29 12:16:01 dcd-gentoo sshd[29811]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Nov 29 12:16:05 dcd-gentoo sshd[29811]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Nov 29 12:16:05 dcd-gentoo sshd[29811]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 63678 ssh2 ... |
2019-11-29 19:26:25 |
| 49.232.35.211 | attack | $f2bV_matches |
2019-11-29 19:14:15 |