City: St Petersburg
Region: St.-Petersburg
Country: Russia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.19.95.63
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6200
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.19.95.63. IN A
;; AUTHORITY SECTION:
. 483 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019102501 1800 900 604800 86400
;; Query time: 135 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 26 03:00:38 CST 2019
;; MSG SIZE rcvd: 11563.95.19.94.in-addr.arpa domain name pointer 94.19.95.63.pool.sknt.ru.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
63.95.19.94.in-addr.arpa name = 94.19.95.63.pool.sknt.ru.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.67.82.236 | attackspam | Hits on port : 8000 |
2020-04-05 08:34:38 |
| 149.129.91.82 | attackspam | Hits on port : 443 2375 |
2020-04-05 08:20:37 |
| 222.186.175.220 | attackbots | Apr 5 00:27:53 IngegnereFirenze sshd[29846]: User root from 222.186.175.220 not allowed because not listed in AllowUsers ... |
2020-04-05 08:28:13 |
| 89.223.92.202 | attackbots | Apr 5 00:40:47 lock-38 sshd[569767]: Failed password for root from 89.223.92.202 port 56930 ssh2 Apr 5 00:45:42 lock-38 sshd[569910]: Failed password for root from 89.223.92.202 port 36640 ssh2 Apr 5 00:49:57 lock-38 sshd[570012]: Failed password for root from 89.223.92.202 port 41413 ssh2 Apr 5 00:54:00 lock-38 sshd[570163]: Failed password for root from 89.223.92.202 port 46186 ssh2 Apr 5 00:58:03 lock-38 sshd[570312]: Failed password for root from 89.223.92.202 port 50960 ssh2 ... |
2020-04-05 08:30:01 |
| 140.143.56.61 | attackspam | Apr 4 23:23:15 game-panel sshd[2040]: Failed password for root from 140.143.56.61 port 59664 ssh2 Apr 4 23:26:09 game-panel sshd[2143]: Failed password for root from 140.143.56.61 port 35864 ssh2 |
2020-04-05 08:16:08 |
| 162.243.129.119 | attack | Hits on port : 4840 |
2020-04-05 08:13:12 |
| 106.12.107.78 | attackbotsspam | 2020-04-05T00:46:49.788238ns386461 sshd\[17936\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.107.78 user=root 2020-04-05T00:46:52.068519ns386461 sshd\[17936\]: Failed password for root from 106.12.107.78 port 50364 ssh2 2020-04-05T00:55:18.939199ns386461 sshd\[26169\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.107.78 user=root 2020-04-05T00:55:21.094360ns386461 sshd\[26169\]: Failed password for root from 106.12.107.78 port 60842 ssh2 2020-04-05T01:07:21.641708ns386461 sshd\[4602\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.107.78 user=root ... |
2020-04-05 08:21:44 |
| 162.243.130.66 | attack | " " |
2020-04-05 08:12:01 |
| 189.216.57.249 | attack | Email rejected due to spam filtering |
2020-04-05 07:54:13 |
| 162.243.130.185 | attackbotsspam | Hits on port : 5903 |
2020-04-05 08:11:34 |
| 106.52.119.85 | attackspam | Apr 5 01:51:57 nextcloud sshd\[22169\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.119.85 user=root Apr 5 01:51:59 nextcloud sshd\[22169\]: Failed password for root from 106.52.119.85 port 55526 ssh2 Apr 5 01:56:13 nextcloud sshd\[26322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.119.85 user=root |
2020-04-05 07:59:35 |
| 223.166.32.212 | attackbots | Unauthorized connection attempt detected from IP address 223.166.32.212 to port 1443 |
2020-04-05 08:32:02 |
| 198.143.178.169 | attackbotsspam | $f2bV_matches |
2020-04-05 08:08:13 |
| 139.162.113.212 | attackbotsspam | IP: 139.162.113.212
Ports affected
Simple Mail Transfer (25)
Abuse Confidence rating 100%
Found in DNSBL('s)
ASN Details
AS63949 Linode LLC
Japan (JP)
CIDR 139.162.0.0/16
Log Date: 4/04/2020 11:24:37 PM UTC |
2020-04-05 08:26:39 |
| 51.138.3.202 | attackspambots | Brute force VPN server |
2020-04-05 08:32:48 |