City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.95.16.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56110
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.95.16.243. IN A
;; AUTHORITY SECTION:
. 313 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023112203 1800 900 604800 86400
;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 23 10:36:48 CST 2023
;; MSG SIZE rcvd: 106
243.16.95.104.in-addr.arpa domain name pointer a104-95-16-243.deploy.static.akamaitechnologies.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
243.16.95.104.in-addr.arpa name = a104-95-16-243.deploy.static.akamaitechnologies.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 46.105.253.50 | attackspambots | IP: 46.105.253.50
Ports affected
Simple Mail Transfer (25)
Abuse Confidence rating 19%
ASN Details
AS16276 OVH SAS
France (FR)
CIDR 46.105.0.0/16
Log Date: 8/09/2020 7:03:02 AM UTC |
2020-09-09 02:53:31 |
| 42.194.137.87 | attackbotsspam | Invalid user postmaster from 42.194.137.87 port 56688 |
2020-09-09 02:37:51 |
| 62.102.148.69 | attackspam | RDP Bruteforce |
2020-09-09 02:55:26 |
| 111.229.48.141 | attackspambots | (sshd) Failed SSH login from 111.229.48.141 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 8 02:18:28 server5 sshd[32308]: Invalid user public from 111.229.48.141 Sep 8 02:18:28 server5 sshd[32308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.48.141 Sep 8 02:18:30 server5 sshd[32308]: Failed password for invalid user public from 111.229.48.141 port 39644 ssh2 Sep 8 02:34:13 server5 sshd[9228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.48.141 user=root Sep 8 02:34:15 server5 sshd[9228]: Failed password for root from 111.229.48.141 port 44968 ssh2 |
2020-09-09 02:56:20 |
| 51.83.33.202 | attack | Sep 8 16:05:02 rush sshd[14523]: Failed password for root from 51.83.33.202 port 37600 ssh2 Sep 8 16:11:49 rush sshd[14681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.33.202 Sep 8 16:11:51 rush sshd[14681]: Failed password for invalid user guest from 51.83.33.202 port 42612 ssh2 ... |
2020-09-09 02:28:04 |
| 211.197.238.7 | attackbotsspam | port scan and connect, tcp 1433 (ms-sql-s) |
2020-09-09 02:49:54 |
| 210.195.6.6 | attack | Sep 7 16:46:37 instance-2 sshd[15137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.195.6.6 Sep 7 16:46:39 instance-2 sshd[15137]: Failed password for invalid user nagios from 210.195.6.6 port 56097 ssh2 Sep 7 16:48:45 instance-2 sshd[15206]: Failed password for root from 210.195.6.6 port 57871 ssh2 |
2020-09-09 02:21:25 |
| 220.244.58.58 | attackbots | 220.244.58.58 (AU/Australia/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 8 18:40:53 server sshd[8432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.145.192.205 user=root Sep 8 18:40:55 server sshd[8432]: Failed password for root from 212.145.192.205 port 48308 ssh2 Sep 8 18:30:53 server sshd[7016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.189.0 user=root Sep 8 18:30:55 server sshd[7016]: Failed password for root from 51.158.189.0 port 53102 ssh2 Sep 8 18:47:08 server sshd[9267]: Failed password for root from 220.244.58.58 port 59568 ssh2 Sep 8 18:49:47 server sshd[9589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.5.157.124 user=root IP Addresses Blocked: 212.145.192.205 (ES/Spain/-) 51.158.189.0 (FR/France/-) |
2020-09-09 02:54:17 |
| 176.59.142.212 | attackspambots | SMB Server BruteForce Attack |
2020-09-09 02:37:35 |
| 192.241.228.110 | attack | Icarus honeypot on github |
2020-09-09 02:54:44 |
| 139.99.148.4 | attackspambots | Automatic report - XMLRPC Attack |
2020-09-09 02:41:56 |
| 218.92.0.207 | attack | 2020-09-08T11:07:53.124789abusebot-7.cloudsearch.cf sshd[23939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.207 user=root 2020-09-08T11:07:55.105091abusebot-7.cloudsearch.cf sshd[23939]: Failed password for root from 218.92.0.207 port 34536 ssh2 2020-09-08T11:07:58.161514abusebot-7.cloudsearch.cf sshd[23939]: Failed password for root from 218.92.0.207 port 34536 ssh2 2020-09-08T11:07:53.124789abusebot-7.cloudsearch.cf sshd[23939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.207 user=root 2020-09-08T11:07:55.105091abusebot-7.cloudsearch.cf sshd[23939]: Failed password for root from 218.92.0.207 port 34536 ssh2 2020-09-08T11:07:58.161514abusebot-7.cloudsearch.cf sshd[23939]: Failed password for root from 218.92.0.207 port 34536 ssh2 2020-09-08T11:07:53.124789abusebot-7.cloudsearch.cf sshd[23939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rho ... |
2020-09-09 02:29:54 |
| 52.251.95.38 | attackspambots | Brute forcing email accounts |
2020-09-09 02:43:42 |
| 45.125.44.209 | attack | DATE:2020-09-07 18:47:03, IP:45.125.44.209, PORT:1433 MSSQL brute force auth on honeypot server (epe-honey1-hq) |
2020-09-09 02:43:54 |
| 31.40.129.106 | attackspam | Icarus honeypot on github |
2020-09-09 02:28:35 |