City: unknown
Region: unknown
Country: Netherlands
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.94.9.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60868
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;145.94.9.121. IN A
;; AUTHORITY SECTION:
. 215 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011000 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 10 23:06:08 CST 2022
;; MSG SIZE rcvd: 105121.9.94.145.in-addr.arpa domain name pointer x009121.lr-s.tudelft.nl.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
121.9.94.145.in-addr.arpa name = x009121.lr-s.tudelft.nl.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.129.33.80 | attack | ET DROP Dshield Block Listed Source group 1 - port: 5303 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-13 12:15:28 |
| 104.248.45.204 | attack | (sshd) Failed SSH login from 104.248.45.204 (DE/Germany/-): 5 in the last 3600 secs |
2020-10-13 12:54:21 |
| 45.129.33.121 | attackspam | =Multiport scan 444 ports : 500 506 509 516 523 524 527 538 544 546 552 562 565 574 575 577 580 583 620 622 625 634 638 661 666 667 673 681 683 685 687 689 691 693 694 706 708 710 711 724 736 737 745 749 755 760 761 765 766 768 774 786 789 792 798 802 803 805 807 809 817 839 840 843 845 847 851 858 861 876 878 890 892 894 902 904 912 928 930 935 942 947 960 961 963 964 966 967 968 975 982 984 986 989 991 993 998 999 2512 2517 2524 2525 2539 2540 2542 2548 2553 2564 2569 2573 2574 2583 2585 2595 2599 2604 2606 2616 2620 2621 2635 2650 2654 2669 2673 2675 2679 2682 2690 2692 2694 2699 2704 2719 2721 2723 2729 2738 2740 2743 2756 2757 2769 2778 2779 2785 2787 2789 2793 2794 2797 2799 2800 2802 2811 2812 2814 2823 2827 2829 2833 2840 2842 2843 2852 2854 2866 2868 2869 2871 2884 2887 2904 2907 2911 2915 2917 2918 2922 2927 2929 2935 2944 2945 2950 2951 2954 2955 2956 2960 2962 2973 2983 2984 2985 2987 2994 3000 18004 18006 18008 18009 18016 18020 18023 18031 18037 18046 18047 18063 18066 180.... |
2020-10-13 12:28:50 |
| 138.68.81.162 | attackbotsspam | Oct 13 02:03:02 web-main sshd[3402804]: Failed password for invalid user victor from 138.68.81.162 port 48810 ssh2 Oct 13 02:17:56 web-main sshd[3404657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.81.162 user=root Oct 13 02:17:59 web-main sshd[3404657]: Failed password for root from 138.68.81.162 port 54682 ssh2 |
2020-10-13 12:22:30 |
| 161.35.174.168 | attackspam | Oct 12 17:36:20 ny01 sshd[29909]: Failed password for root from 161.35.174.168 port 43314 ssh2 Oct 12 17:39:46 ny01 sshd[30348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.174.168 Oct 12 17:39:49 ny01 sshd[30348]: Failed password for invalid user ruiz from 161.35.174.168 port 40314 ssh2 |
2020-10-13 12:48:20 |
| 45.134.26.227 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 28 - port: 44269 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-13 12:28:33 |
| 45.129.33.82 | attackbotsspam | ET DROP Dshield Block Listed Source group 1 - port: 6606 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-13 12:29:15 |
| 206.81.8.136 | attack | Invalid user admin from 206.81.8.136 port 33130 |
2020-10-13 12:42:21 |
| 112.21.191.10 | attack | Oct 13 03:22:31 sip sshd[1920717]: Failed password for invalid user hatton from 112.21.191.10 port 43068 ssh2 Oct 13 03:25:24 sip sshd[1920764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.21.191.10 user=root Oct 13 03:25:26 sip sshd[1920764]: Failed password for root from 112.21.191.10 port 56368 ssh2 ... |
2020-10-13 12:23:20 |
| 73.13.104.201 | attackbots | Oct 13 15:20:44 localhost sshd[742906]: Invalid user sammy from 73.13.104.201 port 54356 ... |
2020-10-13 12:40:09 |
| 106.13.199.185 | attack | Lines containing failures of 106.13.199.185 Oct 13 01:27:52 kmh-vmh-003-fsn07 sshd[25840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.199.185 user=r.r Oct 13 01:27:53 kmh-vmh-003-fsn07 sshd[25840]: Failed password for r.r from 106.13.199.185 port 35652 ssh2 Oct 13 01:27:55 kmh-vmh-003-fsn07 sshd[25840]: Received disconnect from 106.13.199.185 port 35652:11: Bye Bye [preauth] Oct 13 01:27:55 kmh-vmh-003-fsn07 sshd[25840]: Disconnected from authenticating user r.r 106.13.199.185 port 35652 [preauth] Oct 13 01:45:36 kmh-vmh-003-fsn07 sshd[28116]: Invalid user evelyn from 106.13.199.185 port 39580 Oct 13 01:45:36 kmh-vmh-003-fsn07 sshd[28116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.199.185 Oct 13 01:45:38 kmh-vmh-003-fsn07 sshd[28116]: Failed password for invalid user evelyn from 106.13.199.185 port 39580 ssh2 Oct 13 01:45:40 kmh-vmh-003-fsn07 sshd[28116]: Received d........ ------------------------------ |
2020-10-13 12:53:50 |
| 51.75.123.107 | attack | SSH login attempts. |
2020-10-13 12:28:02 |
| 104.248.130.10 | attackspam | $f2bV_matches |
2020-10-13 12:48:46 |
| 97.127.248.42 | attackbots | SSH Brute Force |
2020-10-13 12:38:53 |
| 218.89.222.16 | attackbots | (sshd) Failed SSH login from 218.89.222.16 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 13 04:08:48 server2 sshd[6759]: Invalid user ralf from 218.89.222.16 port 10470 Oct 13 04:08:50 server2 sshd[6759]: Failed password for invalid user ralf from 218.89.222.16 port 10470 ssh2 Oct 13 04:29:08 server2 sshd[10122]: Invalid user jan from 218.89.222.16 port 10547 Oct 13 04:29:10 server2 sshd[10122]: Failed password for invalid user jan from 218.89.222.16 port 10547 ssh2 Oct 13 04:33:57 server2 sshd[10879]: Invalid user notice from 218.89.222.16 port 10565 |
2020-10-13 12:41:43 |