City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 96.34.30.84
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38539
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;96.34.30.84. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023052400 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 24 15:33:05 CST 2023
;; MSG SIZE rcvd: 10484.30.34.96.in-addr.arpa domain name pointer lag-63.dtr01splsmn.netops.charter.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
84.30.34.96.in-addr.arpa name = lag-63.dtr01splsmn.netops.charter.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 107.170.239.24 | attack | Unauthorized SSH login attempts |
2019-07-22 14:48:19 |
| 159.65.127.70 | attack | Jul 21 23:43:00 srv00 sshd[37847]: fatal: Unable to negotiate whostnameh 159.65.127.70 port 53558: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Jul 21 23:43:37 srv00 sshd[37849]: fatal: Unable to negotiate whostnameh 159.65.127.70 port 58344: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Jul 21 23:44:15 srv00 sshd[37864]: fatal: Unable to negotiate whostnameh 159.65.127.70 port 34856: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Jul 21 23:44:55 srv00 sshd[37867]: fatal: Unable to negotiate whostnameh 159.65.127.70 port 39614: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-gro........ ------------------------------ |
2019-07-22 14:49:44 |
| 173.239.139.38 | attackspambots | 2019-07-22T13:14:16.406610enmeeting.mahidol.ac.th sshd\[17382\]: Invalid user sales from 173.239.139.38 port 53091 2019-07-22T13:14:16.422445enmeeting.mahidol.ac.th sshd\[17382\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.239.139.38 2019-07-22T13:14:18.473265enmeeting.mahidol.ac.th sshd\[17382\]: Failed password for invalid user sales from 173.239.139.38 port 53091 ssh2 ... |
2019-07-22 14:37:16 |
| 54.213.173.233 | attackbots | Jul 22 07:19:14 debian sshd\[29106\]: Invalid user db2inst1 from 54.213.173.233 port 40494 Jul 22 07:19:14 debian sshd\[29106\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.213.173.233 ... |
2019-07-22 14:26:48 |
| 89.100.21.40 | attackbots | Jul 22 07:59:15 OPSO sshd\[24758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.100.21.40 user=admin Jul 22 07:59:17 OPSO sshd\[24758\]: Failed password for admin from 89.100.21.40 port 53734 ssh2 Jul 22 08:04:04 OPSO sshd\[25622\]: Invalid user alex from 89.100.21.40 port 49918 Jul 22 08:04:04 OPSO sshd\[25622\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.100.21.40 Jul 22 08:04:06 OPSO sshd\[25622\]: Failed password for invalid user alex from 89.100.21.40 port 49918 ssh2 |
2019-07-22 14:19:36 |
| 112.186.77.126 | attack | Jul 22 05:32:57 [munged] sshd[3116]: Invalid user farah from 112.186.77.126 port 40338 Jul 22 05:32:57 [munged] sshd[3116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.186.77.126 |
2019-07-22 14:49:15 |
| 104.236.142.200 | attack | 2019-07-22T06:54:53.393806abusebot-6.cloudsearch.cf sshd\[28240\]: Invalid user co from 104.236.142.200 port 40864 |
2019-07-22 15:08:15 |
| 190.197.15.184 | attackspam | Jul 22 12:37:03 our-server-hostname postfix/smtpd[21310]: connect from unknown[190.197.15.184] Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=190.197.15.184 |
2019-07-22 14:42:56 |
| 46.3.96.67 | attackspam | 22.07.2019 06:03:40 Connection to port 9566 blocked by firewall |
2019-07-22 14:15:11 |
| 125.161.70.30 | attackbots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-20 12:28:46,978 INFO [shellcode_manager] (125.161.70.30) no match, writing hexdump (13f16ff6c8a932d966bd0cde32bb9510 :2192623) - MS17010 (EternalBlue) |
2019-07-22 14:33:55 |
| 174.103.170.160 | attackspam | Invalid user temp from 174.103.170.160 port 37390 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.103.170.160 Failed password for invalid user temp from 174.103.170.160 port 37390 ssh2 Invalid user drricardokacowicz from 174.103.170.160 port 33488 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.103.170.160 |
2019-07-22 14:46:31 |
| 1.2.244.254 | attackspambots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-22 01:37:41,889 INFO [shellcode_manager] (1.2.244.254) no match, writing hexdump (0f8c0a04a62204100214acd661255247 :2127642) - MS17010 (EternalBlue) |
2019-07-22 14:18:32 |
| 121.151.153.108 | attackspambots | Jul 22 06:16:44 unicornsoft sshd\[14739\]: Invalid user adminftp from 121.151.153.108 Jul 22 06:16:44 unicornsoft sshd\[14739\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.151.153.108 Jul 22 06:16:46 unicornsoft sshd\[14739\]: Failed password for invalid user adminftp from 121.151.153.108 port 53500 ssh2 |
2019-07-22 14:46:00 |
| 177.44.25.62 | attackspam | failed_logins |
2019-07-22 14:43:46 |
| 85.99.126.21 | attack | port scan and connect, tcp 23 (telnet) |
2019-07-22 14:20:36 |