City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 99.1.74.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22759
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;99.1.74.245. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012201 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 12:42:29 CST 2025
;; MSG SIZE rcvd: 104245.74.1.99.in-addr.arpa domain name pointer adsl-99-1-74-245.dsl.pltn13.sbcglobal.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
245.74.1.99.in-addr.arpa name = adsl-99-1-74-245.dsl.pltn13.sbcglobal.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 77.28.215.46 | attackspambots | xmlrpc attack |
2020-04-06 00:44:32 |
| 67.225.222.34 | attackbots | Apr 5 20:47:43 our-server-hostname postfix/smtpd[13237]: connect from unknown[67.225.222.34] Apr 5 20:47:44 our-server-hostname postfix/smtpd[13237]: SSL_accept error from unknown[67.225.222.34]: -1 Apr 5 20:47:44 our-server-hostname postfix/smtpd[13237]: lost connection after STARTTLS from unknown[67.225.222.34] Apr 5 20:47:44 our-server-hostname postfix/smtpd[13237]: disconnect from unknown[67.225.222.34] Apr 5 20:47:44 our-server-hostname postfix/smtpd[12809]: connect from unknown[67.225.222.34] Apr x@x Apr 5 20:47:45 our-server-hostname postfix/smtpd[12809]: disconnect from unknown[67.225.222.34] Apr 5 20:54:53 our-server-hostname postfix/smtpd[12865]: connect from unknown[67.225.222.34] Apr 5 20:54:54 our-server-hostname postfix/smtpd[12865]: SSL_accept error from unknown[67.225.222.34]: -1 Apr 5 20:54:54 our-server-hostname postfix/smtpd[12865]: lost connection after STARTTLS from unknown[67.225.222.34] Apr 5 20:54:54 our-server-hostname postfix/smtpd[12........ ------------------------------- |
2020-04-06 00:20:36 |
| 222.186.175.220 | attackbots | DATE:2020-04-05 18:07:34, IP:222.186.175.220, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq) |
2020-04-06 00:18:28 |
| 116.196.123.92 | attackbots | 2020-04-05T15:57:25.825542shield sshd\[13038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.123.92 user=root 2020-04-05T15:57:27.441865shield sshd\[13038\]: Failed password for root from 116.196.123.92 port 53482 ssh2 2020-04-05T15:59:30.682996shield sshd\[13655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.123.92 user=root 2020-04-05T15:59:32.796836shield sshd\[13655\]: Failed password for root from 116.196.123.92 port 48570 ssh2 2020-04-05T16:01:38.798852shield sshd\[14289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.123.92 user=root |
2020-04-06 00:43:25 |
| 137.226.113.56 | attackbots | " " |
2020-04-06 00:29:43 |
| 123.24.175.42 | attack | Apr 5 14:41:47 ns382633 sshd\[3164\]: Invalid user admin from 123.24.175.42 port 45130 Apr 5 14:41:47 ns382633 sshd\[3164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.24.175.42 Apr 5 14:41:49 ns382633 sshd\[3164\]: Failed password for invalid user admin from 123.24.175.42 port 45130 ssh2 Apr 5 14:41:53 ns382633 sshd\[3187\]: Invalid user admin from 123.24.175.42 port 45147 Apr 5 14:41:53 ns382633 sshd\[3187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.24.175.42 |
2020-04-06 01:01:29 |
| 116.98.252.163 | attack | Email rejected due to spam filtering |
2020-04-06 00:32:39 |
| 104.238.220.49 | attackspam | IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking. |
2020-04-06 00:19:40 |
| 222.186.31.204 | attackbots | Apr 5 18:59:00 plex sshd[19316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.204 user=root Apr 5 18:59:02 plex sshd[19316]: Failed password for root from 222.186.31.204 port 24994 ssh2 |
2020-04-06 01:08:00 |
| 176.235.160.42 | attackspambots | SSH bruteforce |
2020-04-06 00:36:32 |
| 222.186.175.150 | attackspambots | detected by Fail2Ban |
2020-04-06 00:39:35 |
| 188.106.146.142 | attackbotsspam | Apr 5 11:41:00 UTC__SANYALnet-Labs__lste sshd[3427]: Connection from 188.106.146.142 port 35397 on 192.168.1.10 port 22 Apr 5 11:41:02 UTC__SANYALnet-Labs__lste sshd[3427]: User r.r from 188.106.146.142 not allowed because not listed in AllowUsers Apr 5 11:41:02 UTC__SANYALnet-Labs__lste sshd[3427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.106.146.142 user=r.r Apr 5 11:41:04 UTC__SANYALnet-Labs__lste sshd[3427]: Failed password for invalid user r.r from 188.106.146.142 port 35397 ssh2 Apr 5 11:41:04 UTC__SANYALnet-Labs__lste sshd[3427]: Received disconnect from 188.106.146.142 port 35397:11: Bye Bye [preauth] Apr 5 11:41:04 UTC__SANYALnet-Labs__lste sshd[3427]: Disconnected from 188.106.146.142 port 35397 [preauth] Apr 5 11:52:05 UTC__SANYALnet-Labs__lste sshd[3955]: Connection from 188.106.146.142 port 7608 on 192.168.1.10 port 22 Apr 5 11:52:39 UTC__SANYALnet-Labs__lste sshd[3955]: User r.r from 188.106.146.1........ ------------------------------- |
2020-04-06 00:39:52 |
| 140.238.224.56 | attackbotsspam | 140.238.224.56 was recorded 6 times by 6 hosts attempting to connect to the following ports: 30120. Incident counter (4h, 24h, all-time): 6, 6, 15 |
2020-04-06 01:06:30 |
| 120.210.134.49 | attack | Apr 5 15:21:28 DAAP sshd[8046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.210.134.49 user=root Apr 5 15:21:30 DAAP sshd[8046]: Failed password for root from 120.210.134.49 port 52874 ssh2 Apr 5 15:25:18 DAAP sshd[8152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.210.134.49 user=root Apr 5 15:25:20 DAAP sshd[8152]: Failed password for root from 120.210.134.49 port 39442 ssh2 Apr 5 15:29:09 DAAP sshd[8203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.210.134.49 user=root Apr 5 15:29:12 DAAP sshd[8203]: Failed password for root from 120.210.134.49 port 54258 ssh2 ... |
2020-04-06 00:51:50 |
| 54.37.205.162 | attackspambots | Brute-force attempt banned |
2020-04-06 00:56:33 |