City: Moreno Valley
Region: California
Country: United States
Internet Service Provider: Kings County Office of Education
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 204.100.85.125
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26843
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;204.100.85.125. IN A
;; AUTHORITY SECTION:
. 284 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023051701 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 18 09:13:43 CST 2023
;; MSG SIZE rcvd: 107Host 125.85.100.204.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 125.85.100.204.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.199.100.51 | attack | Sep 29 07:06:27 site3 sshd\[137108\]: Invalid user map from 139.199.100.51 Sep 29 07:06:27 site3 sshd\[137108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.100.51 Sep 29 07:06:29 site3 sshd\[137108\]: Failed password for invalid user map from 139.199.100.51 port 61497 ssh2 Sep 29 07:11:08 site3 sshd\[137264\]: Invalid user 12345 from 139.199.100.51 Sep 29 07:11:08 site3 sshd\[137264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.100.51 ... |
2019-09-29 15:16:30 |
| 211.195.12.33 | attack | Sep 28 21:00:48 php1 sshd\[28576\]: Invalid user brett123 from 211.195.12.33 Sep 28 21:00:49 php1 sshd\[28576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.195.12.33 Sep 28 21:00:51 php1 sshd\[28576\]: Failed password for invalid user brett123 from 211.195.12.33 port 49739 ssh2 Sep 28 21:05:36 php1 sshd\[29022\]: Invalid user 123456 from 211.195.12.33 Sep 28 21:05:36 php1 sshd\[29022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.195.12.33 |
2019-09-29 15:36:47 |
| 151.80.140.166 | attack | Sep 29 07:45:34 SilenceServices sshd[19493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.140.166 Sep 29 07:45:36 SilenceServices sshd[19493]: Failed password for invalid user administrador from 151.80.140.166 port 48884 ssh2 Sep 29 07:49:22 SilenceServices sshd[20574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.140.166 |
2019-09-29 15:03:57 |
| 35.229.86.127 | attack | Automated report (2019-09-29T03:52:25+00:00). Misbehaving bot detected at this address. |
2019-09-29 15:15:00 |
| 106.13.140.52 | attackbotsspam | Sep 29 08:26:48 markkoudstaal sshd[28305]: Failed password for root from 106.13.140.52 port 51876 ssh2 Sep 29 08:31:53 markkoudstaal sshd[28716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.140.52 Sep 29 08:31:55 markkoudstaal sshd[28716]: Failed password for invalid user iFan from 106.13.140.52 port 34770 ssh2 |
2019-09-29 15:03:29 |
| 123.138.18.35 | attackspambots | Sep 28 19:21:09 friendsofhawaii sshd\[27299\]: Invalid user alex from 123.138.18.35 Sep 28 19:21:09 friendsofhawaii sshd\[27299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.138.18.35 Sep 28 19:21:11 friendsofhawaii sshd\[27299\]: Failed password for invalid user alex from 123.138.18.35 port 36949 ssh2 Sep 28 19:24:38 friendsofhawaii sshd\[27689\]: Invalid user samanvaya from 123.138.18.35 Sep 28 19:24:38 friendsofhawaii sshd\[27689\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.138.18.35 |
2019-09-29 15:32:37 |
| 5.196.7.123 | attackbotsspam | Sep 28 18:04:26 hpm sshd\[29454\]: Invalid user sqsysop from 5.196.7.123 Sep 28 18:04:26 hpm sshd\[29454\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.ip-5-196-7.eu Sep 28 18:04:28 hpm sshd\[29454\]: Failed password for invalid user sqsysop from 5.196.7.123 port 49906 ssh2 Sep 28 18:08:31 hpm sshd\[29808\]: Invalid user grassi from 5.196.7.123 Sep 28 18:08:31 hpm sshd\[29808\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.ip-5-196-7.eu |
2019-09-29 15:24:52 |
| 92.119.160.52 | attackbots | Sep 29 05:42:13 mc1 kernel: \[1014962.887270\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.52 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=957 PROTO=TCP SPT=52658 DPT=61800 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 29 05:50:19 mc1 kernel: \[1015449.563360\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.52 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=21599 PROTO=TCP SPT=52658 DPT=34265 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 29 05:51:50 mc1 kernel: \[1015540.727638\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.52 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=20189 PROTO=TCP SPT=52658 DPT=52025 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-29 15:38:30 |
| 186.156.177.115 | attack | Sep 29 07:16:06 lnxded64 sshd[11382]: Failed password for root from 186.156.177.115 port 50594 ssh2 Sep 29 07:16:06 lnxded64 sshd[11382]: Failed password for root from 186.156.177.115 port 50594 ssh2 |
2019-09-29 15:12:12 |
| 37.52.11.12 | attackbots | SASL Brute Force |
2019-09-29 15:26:19 |
| 103.47.83.18 | attackspam | Sep 29 02:48:25 ny01 sshd[15203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.47.83.18 Sep 29 02:48:27 ny01 sshd[15203]: Failed password for invalid user production from 103.47.83.18 port 45370 ssh2 Sep 29 02:53:57 ny01 sshd[16589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.47.83.18 |
2019-09-29 15:02:49 |
| 173.212.224.157 | attack | Automatic report - Banned IP Access |
2019-09-29 15:46:24 |
| 222.186.173.119 | attackbots | Sep 29 09:28:04 MK-Soft-Root1 sshd[13545]: Failed password for root from 222.186.173.119 port 14742 ssh2 Sep 29 09:28:07 MK-Soft-Root1 sshd[13545]: Failed password for root from 222.186.173.119 port 14742 ssh2 ... |
2019-09-29 15:29:18 |
| 206.189.165.94 | attack | Invalid user TEST5 from 206.189.165.94 port 44574 |
2019-09-29 15:16:03 |
| 118.24.101.182 | attackspam | Sep 29 10:16:16 server sshd\[6844\]: Invalid user sw from 118.24.101.182 port 43438 Sep 29 10:16:16 server sshd\[6844\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.101.182 Sep 29 10:16:18 server sshd\[6844\]: Failed password for invalid user sw from 118.24.101.182 port 43438 ssh2 Sep 29 10:22:02 server sshd\[1669\]: Invalid user sales2 from 118.24.101.182 port 54360 Sep 29 10:22:02 server sshd\[1669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.101.182 |
2019-09-29 15:26:44 |