City: unknown
Region: unknown
Country: unknown
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.12.92.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21504
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;121.12.92.99. IN A
;; AUTHORITY SECTION:
. 577 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030900 1800 900 604800 86400
;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 19:33:43 CST 2022
;; MSG SIZE rcvd: 105Host 99.92.12.121.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 99.92.12.121.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.86.10.42 | attackspambots | postfix |
2019-11-05 19:03:03 |
| 49.204.229.134 | attackspambots | Honeypot attack, port: 445, PTR: broadband.actcorp.in. |
2019-11-05 19:26:18 |
| 103.194.242.254 | attack | postfix (unknown user, SPF fail or relay access denied) |
2019-11-05 19:20:42 |
| 81.22.45.148 | attackspambots | Port scan on 6 port(s): 5057 5104 5105 5150 5242 5321 |
2019-11-05 19:16:43 |
| 134.175.229.28 | attack | Nov 5 05:27:57 h2040555 sshd[15646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.229.28 user=r.r Nov 5 05:27:59 h2040555 sshd[15646]: Failed password for r.r from 134.175.229.28 port 53468 ssh2 Nov 5 05:27:59 h2040555 sshd[15646]: Received disconnect from 134.175.229.28: 11: Bye Bye [preauth] Nov 5 05:50:23 h2040555 sshd[15903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.229.28 user=r.r Nov 5 05:50:25 h2040555 sshd[15903]: Failed password for r.r from 134.175.229.28 port 59350 ssh2 Nov 5 05:50:25 h2040555 sshd[15903]: Received disconnect from 134.175.229.28: 11: Bye Bye [preauth] Nov 5 05:55:06 h2040555 sshd[15947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.229.28 user=r.r Nov 5 05:55:08 h2040555 sshd[15947]: Failed password for r.r from 134.175.229.28 port 39506 ssh2 Nov 5 05:55:09 h2040555 sshd[15947........ ------------------------------- |
2019-11-05 19:05:43 |
| 42.58.24.2 | attackbotsspam | Honeypot attack, port: 23, PTR: PTR record not found |
2019-11-05 19:08:49 |
| 93.43.76.70 | attackspambots | Nov 4 21:55:12 server2 sshd[17722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93-43-76-70.ip91.fastwebnet.hostname user=r.r Nov 4 21:55:14 server2 sshd[17722]: Failed password for r.r from 93.43.76.70 port 45252 ssh2 Nov 4 21:55:14 server2 sshd[17722]: Received disconnect from 93.43.76.70: 11: Bye Bye [preauth] Nov 4 22:25:22 server2 sshd[20948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93-43-76-70.ip91.fastwebnet.hostname user=r.r Nov 4 22:25:24 server2 sshd[20948]: Failed password for r.r from 93.43.76.70 port 45968 ssh2 Nov 4 22:25:24 server2 sshd[20948]: Received disconnect from 93.43.76.70: 11: Bye Bye [preauth] Nov 4 22:43:53 server2 sshd[22278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93-43-76-70.ip91.fastwebnet.hostname user=r.r Nov 4 22:43:55 server2 sshd[22278]: Failed password for r.r from 93.43.76.70 port 380........ ------------------------------- |
2019-11-05 19:20:58 |
| 177.107.201.202 | attackbotsspam | Trying to (more than 3 packets) bruteforce (not open) Samba/Microsoft-DS port 445 |
2019-11-05 18:50:05 |
| 81.169.143.234 | attackspam | Nov 5 07:42:54 SilenceServices sshd[7228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.169.143.234 Nov 5 07:42:56 SilenceServices sshd[7228]: Failed password for invalid user untimely from 81.169.143.234 port 47621 ssh2 Nov 5 07:47:07 SilenceServices sshd[8456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.169.143.234 |
2019-11-05 18:53:14 |
| 195.230.141.68 | attack | postfix (unknown user, SPF fail or relay access denied) |
2019-11-05 19:26:01 |
| 106.38.76.156 | attackbots | Nov 5 07:24:16 nextcloud sshd\[19983\]: Invalid user Ionutz from 106.38.76.156 Nov 5 07:24:16 nextcloud sshd\[19983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.38.76.156 Nov 5 07:24:18 nextcloud sshd\[19983\]: Failed password for invalid user Ionutz from 106.38.76.156 port 41515 ssh2 ... |
2019-11-05 19:10:55 |
| 114.107.128.86 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/114.107.128.86/ CN - 1H : (642) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4134 IP : 114.107.128.86 CIDR : 114.104.0.0/14 PREFIX COUNT : 5430 UNIQUE IP COUNT : 106919680 ATTACKS DETECTED ASN4134 : 1H - 17 3H - 43 6H - 86 12H - 151 24H - 294 DateTime : 2019-11-05 07:24:18 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-05 19:10:26 |
| 123.51.152.54 | attackspambots | ssh brute force |
2019-11-05 19:10:07 |
| 183.223.25.96 | attack | Nov 5 10:43:08 MK-Soft-VM4 sshd[19193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.223.25.96 Nov 5 10:43:09 MK-Soft-VM4 sshd[19193]: Failed password for invalid user percy from 183.223.25.96 port 36460 ssh2 ... |
2019-11-05 19:22:33 |
| 104.27.142.162 | attackproxy | Faken stealitte |
2019-11-05 19:05:31 |