City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 4.81.100.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18691
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;4.81.100.53. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 14:12:36 CST 2025
;; MSG SIZE rcvd: 104Host 53.100.81.4.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 53.100.81.4.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 113.89.98.133 | attackbots | Sep 29 22:52:44 bouncer sshd\[14479\]: Invalid user kids from 113.89.98.133 port 18820 Sep 29 22:52:44 bouncer sshd\[14479\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.89.98.133 Sep 29 22:52:46 bouncer sshd\[14479\]: Failed password for invalid user kids from 113.89.98.133 port 18820 ssh2 ... |
2019-09-30 05:19:51 |
| 110.138.150.182 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/110.138.150.182/ ID - 1H : (173) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : ID NAME ASN : ASN7713 IP : 110.138.150.182 CIDR : 110.138.150.0/24 PREFIX COUNT : 2255 UNIQUE IP COUNT : 2765312 WYKRYTE ATAKI Z ASN7713 : 1H - 1 3H - 6 6H - 11 12H - 19 24H - 37 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-09-30 05:59:02 |
| 211.193.13.111 | attack | Sep 29 23:36:59 localhost sshd\[907\]: Invalid user qwerty from 211.193.13.111 port 42988 Sep 29 23:36:59 localhost sshd\[907\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.193.13.111 Sep 29 23:37:00 localhost sshd\[907\]: Failed password for invalid user qwerty from 211.193.13.111 port 42988 ssh2 |
2019-09-30 05:50:32 |
| 173.212.208.2 | attackbotsspam | 22/tcp [2019-09-29]1pkt |
2019-09-30 05:32:32 |
| 159.89.231.172 | attack | 09/29/2019-16:57:22.597684 159.89.231.172 Protocol: 6 ET COMPROMISED Known Compromised or Hostile Host Traffic group 12 |
2019-09-30 05:19:29 |
| 107.152.254.92 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/107.152.254.92/ US - 1H : (1538) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN55286 IP : 107.152.254.92 CIDR : 107.152.240.0/20 PREFIX COUNT : 475 UNIQUE IP COUNT : 511744 WYKRYTE ATAKI Z ASN55286 : 1H - 3 3H - 5 6H - 12 12H - 18 24H - 35 INFO : Looking for resource vulnerabilities 403 Detected and Blocked by ADMIN - data recovery |
2019-09-30 05:25:54 |
| 222.186.173.180 | attackbotsspam | 2019-09-30T04:39:24.544775enmeeting.mahidol.ac.th sshd\[18157\]: User root from 222.186.173.180 not allowed because not listed in AllowUsers 2019-09-30T04:39:25.832807enmeeting.mahidol.ac.th sshd\[18157\]: Failed none for invalid user root from 222.186.173.180 port 35660 ssh2 2019-09-30T04:39:27.229035enmeeting.mahidol.ac.th sshd\[18157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.180 user=root ... |
2019-09-30 05:44:11 |
| 52.14.230.95 | attack | 2019-09-30T03:52:05.692255enmeeting.mahidol.ac.th sshd\[17635\]: Invalid user NetLinx from 52.14.230.95 port 59112 2019-09-30T03:52:05.707095enmeeting.mahidol.ac.th sshd\[17635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-52-14-230-95.us-east-2.compute.amazonaws.com 2019-09-30T03:52:07.546007enmeeting.mahidol.ac.th sshd\[17635\]: Failed password for invalid user NetLinx from 52.14.230.95 port 59112 ssh2 ... |
2019-09-30 05:48:36 |
| 80.67.172.162 | attackbots | 09/29/2019-23:07:54.941000 80.67.172.162 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 80 |
2019-09-30 05:29:32 |
| 171.36.204.44 | attackbots | 22/tcp 22/tcp [2019-09-27/28]2pkt |
2019-09-30 05:20:50 |
| 103.27.238.202 | attackbotsspam | Sep 29 23:23:04 mail sshd\[23013\]: Invalid user ve from 103.27.238.202 port 36966 Sep 29 23:23:04 mail sshd\[23013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.27.238.202 Sep 29 23:23:05 mail sshd\[23013\]: Failed password for invalid user ve from 103.27.238.202 port 36966 ssh2 Sep 29 23:29:11 mail sshd\[23596\]: Invalid user ene from 103.27.238.202 port 48584 Sep 29 23:29:11 mail sshd\[23596\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.27.238.202 |
2019-09-30 05:43:50 |
| 206.189.148.39 | attackbots | 2019-09-29T17:00:38.7731431495-001 sshd\[45819\]: Invalid user transfer from 206.189.148.39 port 53868 2019-09-29T17:00:38.7805511495-001 sshd\[45819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.148.39 2019-09-29T17:00:40.6411001495-001 sshd\[45819\]: Failed password for invalid user transfer from 206.189.148.39 port 53868 ssh2 2019-09-29T17:04:51.7115091495-001 sshd\[46156\]: Invalid user vyatta from 206.189.148.39 port 34910 2019-09-29T17:04:51.7213071495-001 sshd\[46156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.148.39 2019-09-29T17:04:54.3147041495-001 sshd\[46156\]: Failed password for invalid user vyatta from 206.189.148.39 port 34910 ssh2 ... |
2019-09-30 05:24:14 |
| 120.71.99.116 | attackbotsspam | 2323/tcp [2019-09-29]1pkt |
2019-09-30 05:37:41 |
| 51.91.212.79 | attackspambots | 09/29/2019-22:55:16.780476 51.91.212.79 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 53 |
2019-09-30 05:20:18 |
| 222.186.175.167 | attackspambots | 2019-09-27 10:52:01 -> 2019-09-29 17:27:36 : 51 login attempts (222.186.175.167) |
2019-09-30 05:21:13 |