78.99.98.92 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Slovakia

Internet Service Provider: Slovak Telecom A. S.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	(sshd) Failed SSH login from 78.99.98.92 (SK/Slovakia/adsl-dyn92.78-99-98.t-com.sk): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 26 03:24:36 ubnt-55d23 sshd[13074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.99.98.92 user=root May 26 03:24:39 ubnt-55d23 sshd[13074]: Failed password for root from 78.99.98.92 port 52818 ssh2	2020-05-26 11:54:01

Type

Details

Datetime

attackspam

(sshd) Failed SSH login from 78.99.98.92 (SK/Slovakia/adsl-dyn92.78-99-98.t-com.sk): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 26 03:24:36 ubnt-55d23 sshd[13074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.99.98.92  user=root
May 26 03:24:39 ubnt-55d23 sshd[13074]: Failed password for root from 78.99.98.92 port 52818 ssh2

2020-05-26 11:54:01

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 78.99.98.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36071
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;78.99.98.92.			IN	A

;; AUTHORITY SECTION:
.			524	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052501 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue May 26 11:53:57 CST 2020
;; MSG SIZE  rcvd: 115

Host info

92.98.99.78.in-addr.arpa domain name pointer adsl-dyn92.78-99-98.t-com.sk.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
92.98.99.78.in-addr.arpa	name = adsl-dyn92.78-99-98.t-com.sk.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
218.241.134.34	attackbotsspam	Aug 28 15:25:59 lcdev sshd\[7967\]: Invalid user tillid from 218.241.134.34 Aug 28 15:25:59 lcdev sshd\[7967\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.241.134.34 Aug 28 15:26:01 lcdev sshd\[7967\]: Failed password for invalid user tillid from 218.241.134.34 port 34744 ssh2 Aug 28 15:29:53 lcdev sshd\[8378\]: Invalid user roberto from 218.241.134.34 Aug 28 15:29:53 lcdev sshd\[8378\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.241.134.34	2019-08-29 16:38:19
218.4.169.82	attack	$f2bV_matches	2019-08-29 16:44:33
202.91.86.100	attack	Aug 29 03:43:02 debian sshd\[2305\]: Invalid user track from 202.91.86.100 port 44366 Aug 29 03:43:02 debian sshd\[2305\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.91.86.100 ...	2019-08-29 16:34:15
212.83.170.21	attackspam	\[2019-08-29 04:37:17\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '212.83.170.21:2819' - Wrong password \[2019-08-29 04:37:17\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-29T04:37:17.610-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1626",SessionID="0x7f7b30db7498",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.170.21/64403",Challenge="56de52eb",ReceivedChallenge="56de52eb",ReceivedHash="2ead7c5955e6281d101040754d11cb18" \[2019-08-29 04:39:01\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '212.83.170.21:2969' - Wrong password \[2019-08-29 04:39:01\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-29T04:39:01.888-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2141",SessionID="0x7f7b30be0af8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.170.	2019-08-29 16:49:20
148.70.59.43	attackspambots	Aug 29 04:08:59 dedicated sshd[32588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.59.43 user=backup Aug 29 04:09:01 dedicated sshd[32588]: Failed password for backup from 148.70.59.43 port 57220 ssh2	2019-08-29 16:09:23
79.7.207.99	attackbotsspam	Aug 28 19:06:16 kapalua sshd\[31746\]: Invalid user no1 from 79.7.207.99 Aug 28 19:06:16 kapalua sshd\[31746\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host99-207-static.7-79-b.business.telecomitalia.it Aug 28 19:06:18 kapalua sshd\[31746\]: Failed password for invalid user no1 from 79.7.207.99 port 55270 ssh2 Aug 28 19:10:38 kapalua sshd\[32291\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host99-207-static.7-79-b.business.telecomitalia.it user=root Aug 28 19:10:40 kapalua sshd\[32291\]: Failed password for root from 79.7.207.99 port 60603 ssh2	2019-08-29 16:38:36
190.98.228.54	attackspam	Aug 29 10:28:01 SilenceServices sshd[24663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.98.228.54 Aug 29 10:28:02 SilenceServices sshd[24663]: Failed password for invalid user libuuid from 190.98.228.54 port 40600 ssh2 Aug 29 10:33:23 SilenceServices sshd[26720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.98.228.54	2019-08-29 16:43:37
46.101.165.90	attackbotsspam	NAME : EU-DIGITALOCEAN-DE1 + e-mail abuse : abuse@digitalocean.com CIDR : 46.101.128.0/17 SYN Flood DDoS Attack DE - block certain countries :) IP: 46.101.165.90 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl	2019-08-29 16:07:44
106.12.148.155	attackspambots	$f2bV_matches	2019-08-29 16:44:58
165.227.211.13	attackbots	Aug 29 07:22:25 host sshd\[20880\]: Invalid user nayala from 165.227.211.13 port 46098 Aug 29 07:22:25 host sshd\[20880\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.211.13 ...	2019-08-29 16:05:20
46.229.182.110	attackspam	SSH Bruteforce attempt	2019-08-29 16:48:27
178.33.67.12	attackbotsspam	Aug 28 14:13:21 hcbb sshd\[27057\]: Invalid user rob from 178.33.67.12 Aug 28 14:13:21 hcbb sshd\[27057\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vps2.d3soft.ma Aug 28 14:13:23 hcbb sshd\[27057\]: Failed password for invalid user rob from 178.33.67.12 port 51798 ssh2 Aug 28 14:17:31 hcbb sshd\[27373\]: Invalid user site from 178.33.67.12 Aug 28 14:17:31 hcbb sshd\[27373\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vps2.d3soft.ma	2019-08-29 16:15:29
103.96.75.176	attack	Aug 29 09:33:42 host sshd\[30724\]: Invalid user admin from 103.96.75.176 port 43114 Aug 29 09:33:42 host sshd\[30724\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.96.75.176 ...	2019-08-29 16:13:58
95.38.211.68	attackbotsspam	Sent mail to address hacked/leaked from Dailymotion	2019-08-29 16:27:57
138.68.20.158	attackbotsspam	Aug 29 07:35:44 ip-172-31-1-72 sshd\[22373\]: Invalid user admin from 138.68.20.158 Aug 29 07:35:44 ip-172-31-1-72 sshd\[22373\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.20.158 Aug 29 07:35:45 ip-172-31-1-72 sshd\[22373\]: Failed password for invalid user admin from 138.68.20.158 port 54968 ssh2 Aug 29 07:40:52 ip-172-31-1-72 sshd\[22551\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.20.158 user=root Aug 29 07:40:54 ip-172-31-1-72 sshd\[22551\]: Failed password for root from 138.68.20.158 port 42036 ssh2	2019-08-29 16:22:55

Recently Reported IPs

46.239.18.62	103.220.214.30	74.80.172.136	172.104.100.33
190.213.201.36	184.168.46.180	191.31.17.90	196.12.203.10
201.124.58.156	49.233.12.222	84.17.48.187	190.96.156.2
91.215.46.52	170.80.44.135	113.107.111.117	91.223.20.199
103.131.71.195	36.226.51.5	178.173.143.20	46.35.130.66