City: unknown
Region: unknown
Country: Mexico
Internet Service Provider: unknown
Hostname: unknown
Organization: Uninet S.A. de C.V.
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 201.99.90.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41555
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;201.99.90.252. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019053100 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri May 31 19:56:30 CST 2019
;; MSG SIZE rcvd: 117
252.90.99.201.in-addr.arpa domain name pointer dsl-201-99-90-252-sta.prod-empresarial.com.mx.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
252.90.99.201.in-addr.arpa name = dsl-201-99-90-252-sta.prod-empresarial.com.mx.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 129.146.149.185 | attack | Sep 28 14:21:17 gw1 sshd[27218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.149.185 Sep 28 14:21:20 gw1 sshd[27218]: Failed password for invalid user ts3musicbot from 129.146.149.185 port 40182 ssh2 ... |
2019-09-28 17:30:39 |
| 134.209.232.72 | attack | Port scan attempt detected by AWS-CCS, CTS, India |
2019-09-28 17:14:08 |
| 104.236.252.162 | attackspambots | Sep 28 09:42:59 vmd17057 sshd\[28958\]: Invalid user smkim from 104.236.252.162 port 43488 Sep 28 09:42:59 vmd17057 sshd\[28958\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.252.162 Sep 28 09:43:01 vmd17057 sshd\[28958\]: Failed password for invalid user smkim from 104.236.252.162 port 43488 ssh2 ... |
2019-09-28 17:18:01 |
| 164.68.122.164 | attack | /var/log/messages:Sep 27 14:15:59 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1569593759.431:52006): pid=15381 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=15382 suid=74 rport=34506 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=164.68.122.164 terminal=? res=success' /var/log/messages:Sep 27 14:15:59 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1569593759.435:52007): pid=15381 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=15382 suid=74 rport=34506 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=164.68.122.164 terminal=? res=success' /var/log/messages:Sep 27 14:16:00 sanyalnet-cloud-vps fail2ban.filter[1378]: INFO [sshd] Fou........ ------------------------------- |
2019-09-28 17:32:12 |
| 93.78.238.94 | attackbots | Chat Spam |
2019-09-28 17:20:53 |
| 60.29.241.2 | attackspambots | Sep 28 04:02:50 ws19vmsma01 sshd[130644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.29.241.2 Sep 28 04:02:51 ws19vmsma01 sshd[130644]: Failed password for invalid user pass from 60.29.241.2 port 54381 ssh2 ... |
2019-09-28 17:23:49 |
| 112.15.115.83 | attackspam | Sep 28 10:59:58 MK-Soft-Root1 sshd[15924]: Failed password for root from 112.15.115.83 port 35946 ssh2 Sep 28 11:00:03 MK-Soft-Root1 sshd[15924]: Failed password for root from 112.15.115.83 port 35946 ssh2 ... |
2019-09-28 17:16:32 |
| 51.83.74.158 | attackspam | Sep 28 08:53:06 vpn01 sshd[995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.74.158 Sep 28 08:53:08 vpn01 sshd[995]: Failed password for invalid user ubnt from 51.83.74.158 port 50897 ssh2 ... |
2019-09-28 17:43:10 |
| 71.189.47.10 | attackspam | Invalid user cic from 71.189.47.10 port 51489 |
2019-09-28 17:22:12 |
| 95.154.203.137 | attack | Sep 28 07:05:33 www2 sshd\[27358\]: Invalid user sole from 95.154.203.137Sep 28 07:05:35 www2 sshd\[27358\]: Failed password for invalid user sole from 95.154.203.137 port 37892 ssh2Sep 28 07:09:27 www2 sshd\[27692\]: Invalid user ventas from 95.154.203.137 ... |
2019-09-28 17:37:04 |
| 114.236.7.200 | attackspam | 2222/tcp 22/tcp... [2019-09-08/27]13pkt,2pt.(tcp) |
2019-09-28 17:15:44 |
| 159.89.153.54 | attack | Sep 28 02:05:10 aat-srv002 sshd[3377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.153.54 Sep 28 02:05:12 aat-srv002 sshd[3377]: Failed password for invalid user nagios from 159.89.153.54 port 47942 ssh2 Sep 28 02:09:31 aat-srv002 sshd[3506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.153.54 Sep 28 02:09:33 aat-srv002 sshd[3506]: Failed password for invalid user wisconsin from 159.89.153.54 port 59538 ssh2 ... |
2019-09-28 17:11:43 |
| 80.211.239.102 | attack | Sep 28 07:57:53 sshgateway sshd\[24631\]: Invalid user ftpprod from 80.211.239.102 Sep 28 07:57:53 sshgateway sshd\[24631\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.239.102 Sep 28 07:57:55 sshgateway sshd\[24631\]: Failed password for invalid user ftpprod from 80.211.239.102 port 46936 ssh2 |
2019-09-28 17:40:47 |
| 195.154.43.44 | attackbots | 445/tcp 445/tcp 445/tcp... [2019-08-13/09-28]6pkt,1pt.(tcp) |
2019-09-28 17:31:52 |
| 106.12.125.27 | attack | Sep 28 07:42:00 XXX sshd[2335]: Invalid user parker from 106.12.125.27 port 53206 |
2019-09-28 17:17:16 |