City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 99.16.214.205
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41261
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;99.16.214.205. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 07:17:10 CST 2025
;; MSG SIZE rcvd: 106
205.214.16.99.in-addr.arpa domain name pointer 99-16-214-205.lightspeed.mlfrct.sbcglobal.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
205.214.16.99.in-addr.arpa name = 99-16-214-205.lightspeed.mlfrct.sbcglobal.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.175.23 | attackspam | 2020-08-18T00:34:42.561263vps773228.ovh.net sshd[5907]: Failed password for root from 222.186.175.23 port 42786 ssh2 2020-08-18T00:34:45.062558vps773228.ovh.net sshd[5907]: Failed password for root from 222.186.175.23 port 42786 ssh2 2020-08-18T00:34:47.597235vps773228.ovh.net sshd[5907]: Failed password for root from 222.186.175.23 port 42786 ssh2 2020-08-18T00:34:49.556284vps773228.ovh.net sshd[5909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.23 user=root 2020-08-18T00:34:52.045489vps773228.ovh.net sshd[5909]: Failed password for root from 222.186.175.23 port 36308 ssh2 ... |
2020-08-18 06:38:23 |
| 103.39.30.248 | attack | Aug 17 22:07:34 mxgate1 postfix/postscreen[26787]: CONNECT from [103.39.30.248]:26798 to [176.31.12.44]:25 Aug 17 22:07:34 mxgate1 postfix/dnsblog[26806]: addr 103.39.30.248 listed by domain zen.spamhaus.org as 127.0.0.11 Aug 17 22:07:34 mxgate1 postfix/dnsblog[26806]: addr 103.39.30.248 listed by domain zen.spamhaus.org as 127.0.0.4 Aug 17 22:07:34 mxgate1 postfix/dnsblog[26806]: addr 103.39.30.248 listed by domain zen.spamhaus.org as 127.0.0.3 Aug 17 22:07:34 mxgate1 postfix/dnsblog[26804]: addr 103.39.30.248 listed by domain cbl.abuseat.org as 127.0.0.2 Aug 17 22:07:34 mxgate1 postfix/dnsblog[26808]: addr 103.39.30.248 listed by domain bl.spamcop.net as 127.0.0.2 Aug 17 22:07:34 mxgate1 postfix/dnsblog[26807]: addr 103.39.30.248 listed by domain b.barracudacentral.org as 127.0.0.2 Aug 17 22:07:40 mxgate1 postfix/postscreen[26787]: DNSBL rank 5 for [103.39.30.248]:26798 Aug x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=103.39.30.248 |
2020-08-18 06:36:20 |
| 111.67.199.130 | attackbots | Aug 18 00:41:50 lukav-desktop sshd\[29194\]: Invalid user ts3 from 111.67.199.130 Aug 18 00:41:50 lukav-desktop sshd\[29194\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.199.130 Aug 18 00:41:52 lukav-desktop sshd\[29194\]: Failed password for invalid user ts3 from 111.67.199.130 port 44004 ssh2 Aug 18 00:47:07 lukav-desktop sshd\[1334\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.199.130 user=root Aug 18 00:47:09 lukav-desktop sshd\[1334\]: Failed password for root from 111.67.199.130 port 50740 ssh2 |
2020-08-18 06:49:47 |
| 82.79.174.94 | attackbotsspam | Automatic report - XMLRPC Attack |
2020-08-18 06:59:50 |
| 104.131.97.47 | attackbotsspam | 2020-08-17T21:50:04.987810shield sshd\[17251\]: Invalid user csx from 104.131.97.47 port 47914 2020-08-17T21:50:04.996771shield sshd\[17251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.97.47 2020-08-17T21:50:06.879177shield sshd\[17251\]: Failed password for invalid user csx from 104.131.97.47 port 47914 ssh2 2020-08-17T21:53:43.399428shield sshd\[17587\]: Invalid user administrador from 104.131.97.47 port 56940 2020-08-17T21:53:43.410068shield sshd\[17587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.97.47 |
2020-08-18 06:58:52 |
| 106.12.156.236 | attackbots | Aug 17 22:37:02 inter-technics sshd[18664]: Invalid user it from 106.12.156.236 port 59730 Aug 17 22:37:02 inter-technics sshd[18664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.156.236 Aug 17 22:37:02 inter-technics sshd[18664]: Invalid user it from 106.12.156.236 port 59730 Aug 17 22:37:04 inter-technics sshd[18664]: Failed password for invalid user it from 106.12.156.236 port 59730 ssh2 Aug 17 22:42:35 inter-technics sshd[19116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.156.236 user=ts3 Aug 17 22:42:37 inter-technics sshd[19116]: Failed password for ts3 from 106.12.156.236 port 38756 ssh2 ... |
2020-08-18 06:26:29 |
| 137.26.29.118 | attack | Aug 17 22:17:21 plex-server sshd[2900391]: Invalid user visitor from 137.26.29.118 port 46156 Aug 17 22:17:21 plex-server sshd[2900391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.26.29.118 Aug 17 22:17:21 plex-server sshd[2900391]: Invalid user visitor from 137.26.29.118 port 46156 Aug 17 22:17:23 plex-server sshd[2900391]: Failed password for invalid user visitor from 137.26.29.118 port 46156 ssh2 Aug 17 22:21:10 plex-server sshd[2901950]: Invalid user virl from 137.26.29.118 port 55934 ... |
2020-08-18 06:39:16 |
| 185.220.102.252 | attackspambots | Aug 18 00:56:26 santamaria sshd\[4186\]: Invalid user admin from 185.220.102.252 Aug 18 00:56:27 santamaria sshd\[4186\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.102.252 Aug 18 00:56:29 santamaria sshd\[4186\]: Failed password for invalid user admin from 185.220.102.252 port 27442 ssh2 ... |
2020-08-18 06:56:53 |
| 104.131.91.148 | attackbotsspam | Bruteforce detected by fail2ban |
2020-08-18 06:45:11 |
| 144.91.65.110 | attackspam | Auto Fail2Ban report, multiple SSH login attempts. |
2020-08-18 06:28:17 |
| 149.90.122.148 | attack | *Port Scan* detected from 149.90.122.148 (PT/Portugal/148.122.90.149.rev.vodafone.pt). 7 hits in the last 225 seconds |
2020-08-18 06:49:07 |
| 91.238.104.144 | attack | 2020-08-17T21:54:33.179025mta02.zg01.4s-zg.intra x@x 2020-08-17T21:57:06.109329mta02.zg01.4s-zg.intra x@x 2020-08-17T21:57:19.844162mta02.zg01.4s-zg.intra x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=91.238.104.144 |
2020-08-18 06:28:41 |
| 18.176.206.232 | attackspambots | 18.176.206.232 - - [17/Aug/2020:13:33:42 -0700] "GET /test/wp-login.php HTTP/1.1" 301 575 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-18 06:24:26 |
| 178.121.67.47 | attackspambots | 178.121.67.47 - - \[17/Aug/2020:23:25:55 +0300\] "POST /xmlrpc.php HTTP/1.1" 200 428 "-" "Mozilla/5.0 \(Windows NT 6.1\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/59.0.3071.109 Safari/537.36" "-" 178.121.67.47 - - \[17/Aug/2020:23:25:59 +0300\] "POST /xmlrpc.php HTTP/1.1" 200 428 "-" "Mozilla/5.0 \(Windows NT 6.1\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/59.0.3071.109 Safari/537.36" "-" ... |
2020-08-18 06:44:06 |
| 167.172.133.221 | attack | $f2bV_matches |
2020-08-18 06:44:31 |