City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 99.194.106.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1545
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;99.194.106.85. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 04:10:51 CST 2025
;; MSG SIZE rcvd: 106
85.106.194.99.in-addr.arpa domain name pointer 99-194-106-85.dyn.centurytel.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
85.106.194.99.in-addr.arpa name = 99-194-106-85.dyn.centurytel.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 213.153.177.98 | attackbotsspam | Brute force attempt |
2019-09-15 03:11:27 |
| 167.71.48.4 | attack | 167.71.48.4 - - [14/Sep/2019:20:22:34 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.48.4 - - [14/Sep/2019:20:22:34 +0200] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.48.4 - - [14/Sep/2019:20:22:35 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.48.4 - - [14/Sep/2019:20:22:35 +0200] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.48.4 - - [14/Sep/2019:20:22:35 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.48.4 - - [14/Sep/2019:20:22:35 +0200] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-09-15 03:22:33 |
| 76.72.8.136 | attackspam | Sep 14 08:53:08 web1 sshd\[28022\]: Invalid user database from 76.72.8.136 Sep 14 08:53:08 web1 sshd\[28022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.72.8.136 Sep 14 08:53:10 web1 sshd\[28022\]: Failed password for invalid user database from 76.72.8.136 port 49632 ssh2 Sep 14 08:57:32 web1 sshd\[28421\]: Invalid user nodes from 76.72.8.136 Sep 14 08:57:32 web1 sshd\[28421\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.72.8.136 |
2019-09-15 03:13:15 |
| 188.131.179.87 | attack | Sep 14 21:19:24 meumeu sshd[16322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.179.87 Sep 14 21:19:27 meumeu sshd[16322]: Failed password for invalid user bailey from 188.131.179.87 port 39129 ssh2 Sep 14 21:23:12 meumeu sshd[16885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.179.87 ... |
2019-09-15 03:28:07 |
| 124.47.14.14 | attackbots | Sep 14 09:21:55 php1 sshd\[14140\]: Invalid user ftpuser2 from 124.47.14.14 Sep 14 09:21:55 php1 sshd\[14140\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.47.14.14 Sep 14 09:21:58 php1 sshd\[14140\]: Failed password for invalid user ftpuser2 from 124.47.14.14 port 54344 ssh2 Sep 14 09:25:11 php1 sshd\[14424\]: Invalid user corky from 124.47.14.14 Sep 14 09:25:11 php1 sshd\[14424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.47.14.14 |
2019-09-15 03:32:52 |
| 79.173.249.15 | attackspam | port scan and connect, tcp 81 (hosts2-ns) |
2019-09-15 03:22:15 |
| 91.194.211.40 | attack | Sep 14 21:13:50 microserver sshd[38129]: Invalid user akers from 91.194.211.40 port 46634 Sep 14 21:13:50 microserver sshd[38129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.194.211.40 Sep 14 21:13:52 microserver sshd[38129]: Failed password for invalid user akers from 91.194.211.40 port 46634 ssh2 Sep 14 21:17:12 microserver sshd[38739]: Invalid user pedro from 91.194.211.40 port 49532 Sep 14 21:17:12 microserver sshd[38739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.194.211.40 Sep 14 21:30:08 microserver sshd[40464]: Invalid user mx from 91.194.211.40 port 32860 Sep 14 21:30:08 microserver sshd[40464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.194.211.40 Sep 14 21:30:10 microserver sshd[40464]: Failed password for invalid user mx from 91.194.211.40 port 32860 ssh2 Sep 14 21:33:25 microserver sshd[40964]: pam_unix(sshd:auth): authentication failure; logname= uid=0 |
2019-09-15 03:45:02 |
| 81.45.139.249 | attackbotsspam | Sep 14 21:23:57 v22019058497090703 sshd[10797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249 Sep 14 21:23:59 v22019058497090703 sshd[10797]: Failed password for invalid user user from 81.45.139.249 port 48712 ssh2 Sep 14 21:28:27 v22019058497090703 sshd[11103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.45.139.249 ... |
2019-09-15 03:42:06 |
| 5.178.232.60 | attackspambots | Port 1433 Scan |
2019-09-15 03:38:33 |
| 222.137.91.84 | attack | Unauthorised access (Sep 14) SRC=222.137.91.84 LEN=40 TTL=50 ID=8028 TCP DPT=23 WINDOW=39624 SYN |
2019-09-15 03:39:26 |
| 183.157.174.128 | attackspambots | Sep 14 08:22:49 lcprod sshd\[17767\]: Invalid user admin from 183.157.174.128 Sep 14 08:22:49 lcprod sshd\[17767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.157.174.128 Sep 14 08:22:50 lcprod sshd\[17767\]: Failed password for invalid user admin from 183.157.174.128 port 29338 ssh2 Sep 14 08:22:54 lcprod sshd\[17767\]: Failed password for invalid user admin from 183.157.174.128 port 29338 ssh2 Sep 14 08:22:57 lcprod sshd\[17767\]: Failed password for invalid user admin from 183.157.174.128 port 29338 ssh2 |
2019-09-15 03:09:38 |
| 45.227.253.117 | attack | Sep 14 21:03:27 relay postfix/smtpd\[10813\]: warning: unknown\[45.227.253.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 14 21:15:39 relay postfix/smtpd\[21415\]: warning: unknown\[45.227.253.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 14 21:15:49 relay postfix/smtpd\[19171\]: warning: unknown\[45.227.253.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 14 21:19:16 relay postfix/smtpd\[14355\]: warning: unknown\[45.227.253.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 14 21:19:26 relay postfix/smtpd\[21970\]: warning: unknown\[45.227.253.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-09-15 03:22:50 |
| 131.0.8.49 | attackbots | Sep 15 00:40:52 areeb-Workstation sshd[12062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=131.0.8.49 Sep 15 00:40:54 areeb-Workstation sshd[12062]: Failed password for invalid user yx from 131.0.8.49 port 37439 ssh2 ... |
2019-09-15 03:23:49 |
| 202.83.17.89 | attackbotsspam | 2019-09-14T19:26:58.050925abusebot-2.cloudsearch.cf sshd\[15172\]: Invalid user student from 202.83.17.89 port 56198 |
2019-09-15 03:29:15 |
| 183.131.82.99 | attack | Automated report - ssh fail2ban: Sep 14 20:40:25 wrong password, user=root, port=11754, ssh2 Sep 14 20:40:28 wrong password, user=root, port=11754, ssh2 Sep 14 20:40:30 wrong password, user=root, port=11754, ssh2 |
2019-09-15 03:17:46 |