City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 99.105.139.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9852
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;99.105.139.105. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012801 1800 900 604800 86400
;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 02:42:49 CST 2025
;; MSG SIZE rcvd: 107
Host 105.139.105.99.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 105.139.105.99.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 88.99.240.38 | attackbotsspam | Automatic report - XMLRPC Attack |
2020-09-05 13:27:22 |
| 157.55.39.197 | attack | Automatic report - Banned IP Access |
2020-09-05 13:11:45 |
| 122.51.186.17 | attack | SSH auth scanning - multiple failed logins |
2020-09-05 13:19:11 |
| 167.172.196.255 | attackbotsspam | Sep 5 05:23:40 haigwepa sshd[18175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.196.255 Sep 5 05:23:42 haigwepa sshd[18175]: Failed password for invalid user postgres from 167.172.196.255 port 25580 ssh2 ... |
2020-09-05 13:18:00 |
| 111.161.74.121 | attackspam | Sep 4 18:49:17 vm1 sshd[10841]: Failed password for root from 111.161.74.121 port 58483 ssh2 ... |
2020-09-05 13:28:06 |
| 71.43.31.237 | attackspam | 71.43.31.237 - - [05/Sep/2020:04:42:25 +0000] "POST /wp-login.php HTTP/1.1" 200 2077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 71.43.31.237 - - [05/Sep/2020:04:42:28 +0000] "POST /wp-login.php HTTP/1.1" 200 2076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 71.43.31.237 - - [05/Sep/2020:04:42:31 +0000] "POST /wp-login.php HTTP/1.1" 200 2070 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 71.43.31.237 - - [05/Sep/2020:04:42:34 +0000] "POST /wp-login.php HTTP/1.1" 200 2072 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 71.43.31.237 - - [05/Sep/2020:04:42:35 +0000] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" |
2020-09-05 13:05:32 |
| 1.245.61.144 | attack | 2020-09-05T07:09:14.331709galaxy.wi.uni-potsdam.de sshd[5730]: Invalid user tarcisio from 1.245.61.144 port 32745 2020-09-05T07:09:14.333642galaxy.wi.uni-potsdam.de sshd[5730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.245.61.144 2020-09-05T07:09:14.331709galaxy.wi.uni-potsdam.de sshd[5730]: Invalid user tarcisio from 1.245.61.144 port 32745 2020-09-05T07:09:16.488159galaxy.wi.uni-potsdam.de sshd[5730]: Failed password for invalid user tarcisio from 1.245.61.144 port 32745 ssh2 2020-09-05T07:12:10.443192galaxy.wi.uni-potsdam.de sshd[6102]: Invalid user techsupport from 1.245.61.144 port 31853 2020-09-05T07:12:10.445140galaxy.wi.uni-potsdam.de sshd[6102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.245.61.144 2020-09-05T07:12:10.443192galaxy.wi.uni-potsdam.de sshd[6102]: Invalid user techsupport from 1.245.61.144 port 31853 2020-09-05T07:12:12.093018galaxy.wi.uni-potsdam.de sshd[6102]: Failed p ... |
2020-09-05 13:22:03 |
| 37.59.54.36 | attackspambots | Many_bad_calls |
2020-09-05 13:18:40 |
| 61.177.172.168 | attackbots | Sep 5 07:05:41 dev0-dcde-rnet sshd[13509]: Failed password for root from 61.177.172.168 port 26583 ssh2 Sep 5 07:05:54 dev0-dcde-rnet sshd[13509]: error: maximum authentication attempts exceeded for root from 61.177.172.168 port 26583 ssh2 [preauth] Sep 5 07:05:59 dev0-dcde-rnet sshd[13511]: Failed password for root from 61.177.172.168 port 51373 ssh2 |
2020-09-05 13:13:33 |
| 83.148.89.71 | attackspam | IP 83.148.89.71 attacked honeypot on port: 5000 at 9/4/2020 9:52:17 AM |
2020-09-05 13:02:48 |
| 13.70.123.42 | attackspambots | MAIL: User Login Brute Force Attempt |
2020-09-05 13:00:58 |
| 104.250.184.141 | attackspambots | TCP Port Scanning |
2020-09-05 12:49:31 |
| 45.142.120.20 | attack | (smtpauth) Failed SMTP AUTH login from 45.142.120.20 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-09-05 01:14:47 dovecot_login authenticator failed for (User) [45.142.120.20]:56692: 535 Incorrect authentication data (set_id=administrator@xeoserver.com) 2020-09-05 01:14:56 dovecot_login authenticator failed for (User) [45.142.120.20]:38362: 535 Incorrect authentication data (set_id=administrator@xeoserver.com) 2020-09-05 01:14:58 dovecot_login authenticator failed for (User) [45.142.120.20]:11600: 535 Incorrect authentication data (set_id=administrator@xeoserver.com) 2020-09-05 01:15:00 dovecot_login authenticator failed for (User) [45.142.120.20]:57168: 535 Incorrect authentication data (set_id=administrator@xeoserver.com) 2020-09-05 01:15:06 dovecot_login authenticator failed for (User) [45.142.120.20]:18682: 535 Incorrect authentication data (set_id=administrator@xeoserver.com) |
2020-09-05 13:18:25 |
| 121.58.212.102 | attackbots | Honeypot attack, port: 445, PTR: 102.212.58.121.-rev.convergeict.com. |
2020-09-05 13:08:56 |
| 106.203.144.36 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-09-05 13:02:18 |