City: unknown
Region: unknown
Country: Belgium
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.111.145.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48815
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.111.145.20.			IN	A
;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020300 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 03 15:37:27 CST 2025
;; MSG SIZE  rcvd: 10620.145.111.94.in-addr.arpa domain name pointer cust-20-145-111-94.dyn.as47377.net.Server:		183.60.83.19
Address:	183.60.83.19#53
Non-authoritative answer:
20.145.111.94.in-addr.arpa	name = cust-20-145-111-94.dyn.as47377.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime | 
|---|---|---|---|
| 196.188.42.130 | attack | Unauthorized connection attempt detected from IP address 196.188.42.130 to port 2220 [J] | 2020-01-21 05:19:38 | 
| 78.128.113.88 | attack | Jan 20 11:49:06 xzibhostname postfix/smtpd[4119]: warning: hostname ip-113-88.4vendeta.com does not resolve to address 78.128.113.88: Name or service not known Jan 20 11:49:06 xzibhostname postfix/smtpd[4119]: connect from unknown[78.128.113.88] Jan 20 11:49:11 xzibhostname postfix/smtpd[4119]: warning: unknown[78.128.113.88]: SASL PLAIN authentication failed: authentication failure Jan 20 11:49:12 xzibhostname postfix/smtpd[4119]: lost connection after AUTH from unknown[78.128.113.88] Jan 20 11:49:12 xzibhostname postfix/smtpd[4119]: disconnect from unknown[78.128.113.88] Jan 20 11:49:12 xzibhostname postfix/smtpd[7371]: warning: hostname ip-113-88.4vendeta.com does not resolve to address 78.128.113.88: Name or service not known Jan 20 11:49:12 xzibhostname postfix/smtpd[7371]: connect from unknown[78.128.113.88] Jan 20 11:49:14 xzibhostname postfix/smtpd[7371]: warning: unknown[78.128.113.88]: SASL PLAIN authentication failed: authentication failure Jan 20 11:49:15 xz........ ------------------------------- | 2020-01-21 05:08:57 | 
| 209.17.97.122 | attackspam | Automatic report - Banned IP Access | 2020-01-21 05:42:22 | 
| 188.254.0.183 | attackbots | 2020-01-02T19:32:06.776703suse-nuc sshd[27321]: Invalid user juliejung from 188.254.0.183 port 35968 ... | 2020-01-21 05:35:12 | 
| 218.92.0.191 | attack | Jan 20 22:12:01 dcd-gentoo sshd[25176]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Jan 20 22:12:03 dcd-gentoo sshd[25176]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Jan 20 22:12:01 dcd-gentoo sshd[25176]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Jan 20 22:12:03 dcd-gentoo sshd[25176]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Jan 20 22:12:01 dcd-gentoo sshd[25176]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Jan 20 22:12:03 dcd-gentoo sshd[25176]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Jan 20 22:12:03 dcd-gentoo sshd[25176]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 23849 ssh2 ... | 2020-01-21 05:21:14 | 
| 189.163.142.209 | attackspambots | Automatic report - Port Scan Attack | 2020-01-21 05:39:55 | 
| 118.126.64.165 | attack | Jan 20 22:11:43 woltan sshd[29487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.126.64.165 | 2020-01-21 05:48:40 | 
| 139.59.180.53 | attackbots | Jan 20 21:11:11 web8 sshd\[23910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.180.53 user=root Jan 20 21:11:12 web8 sshd\[23910\]: Failed password for root from 139.59.180.53 port 46922 ssh2 Jan 20 21:12:04 web8 sshd\[24322\]: Invalid user backuppc from 139.59.180.53 Jan 20 21:12:04 web8 sshd\[24322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.180.53 Jan 20 21:12:06 web8 sshd\[24322\]: Failed password for invalid user backuppc from 139.59.180.53 port 56912 ssh2 | 2020-01-21 05:20:56 | 
| 188.92.77.12 | attackbots | 2019-09-28T01:44:05.065550suse-nuc sshd[12932]: Invalid user 0 from 188.92.77.12 port 50312 ... | 2020-01-21 05:31:57 | 
| 62.4.52.21 | attackspam | Unauthorized connection attempt detected from IP address 62.4.52.21 to port 23 [J] | 2020-01-21 05:10:39 | 
| 106.12.33.174 | attackspambots | Invalid user qm from 106.12.33.174 | 2020-01-21 05:13:41 | 
| 82.147.73.211 | attackspambots | Unauthorized connection attempt detected from IP address 82.147.73.211 to port 2220 [J] | 2020-01-21 05:13:23 | 
| 188.226.250.69 | attackspam | 2019-12-11T04:34:43.063982suse-nuc sshd[17637]: Invalid user edusada from 188.226.250.69 port 52602 ... | 2020-01-21 05:43:23 | 
| 118.143.232.4 | attack | 2020-01-07T23:22:34.479227suse-nuc sshd[3619]: Invalid user jacsom from 118.143.232.4 port 57316 ... | 2020-01-21 05:12:24 | 
| 188.226.250.187 | attack | 2019-09-30T13:08:15.193601suse-nuc sshd[20537]: Invalid user postgres from 188.226.250.187 port 36876 ... | 2020-01-21 05:42:52 |