City: Shawnee
Region: Kansas
Country: United States
Internet Service Provider: AT&T
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 99.68.53.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5949
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;99.68.53.93. IN A
;; AUTHORITY SECTION:
. 569 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019112201 1800 900 604800 86400
;; Query time: 97 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 23 02:42:13 CST 2019
;; MSG SIZE rcvd: 11593.53.68.99.in-addr.arpa domain name pointer 99-68-53-93.lightspeed.mssnks.sbcglobal.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
93.53.68.99.in-addr.arpa name = 99-68-53-93.lightspeed.mssnks.sbcglobal.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 129.28.45.70 | attackspambots | Aug 24 12:08:22 nxxxxxxx sshd[16730]: Invalid user win from 129.28.45.70 Aug 24 12:08:22 nxxxxxxx sshd[16730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.45.70 Aug 24 12:08:24 nxxxxxxx sshd[16730]: Failed password for invalid user win from 129.28.45.70 port 56698 ssh2 Aug 24 12:08:24 nxxxxxxx sshd[16730]: Received disconnect from 129.28.45.70: 11: Bye Bye [preauth] Aug 24 12:13:18 nxxxxxxx sshd[17212]: Connection closed by 129.28.45.70 [preauth] Aug 24 12:15:07 nxxxxxxx sshd[17366]: Invalid user dev from 129.28.45.70 Aug 24 12:15:07 nxxxxxxx sshd[17366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.45.70 Aug 24 12:15:09 nxxxxxxx sshd[17366]: Failed password for invalid user dev from 129.28.45.70 port 35280 ssh2 Aug 24 12:15:09 nxxxxxxx sshd[17366]: Received disconnect from 129.28.45.70: 11: Bye Bye [preauth] Aug 24 12:17:00 nxxxxxxx sshd[17508]: Invalid user a from 12........ ------------------------------- |
2020-08-27 15:39:54 |
| 193.148.71.225 | attackbots | Here more information about 193.148.71.225 info: [Romania] 44220 Parfumuri Femei.com SRL Connected: 3 servere(s) Reason: ssh Ports: 23 Services: telnet servere: Europe/Moscow (UTC+3) Found at blocklist: blocklist.de, abuseat.org, zen.spamhaus.org, spfbl.net, abuseIPDB.com myIP:* [2020-08-25 09:04:49] (tcp) myIP:23 <- 193.148.71.225:23988 [2020-08-26 05:20:09] (tcp) myIP:23 <- 193.148.71.225:39740 [2020-08-26 05:26:59] (tcp) myIP:23 <- 193.148.71.225:50251 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=193.148.71.225 |
2020-08-27 15:56:02 |
| 106.13.233.4 | attack | Failed password for invalid user vnc from 106.13.233.4 port 45644 ssh2 |
2020-08-27 15:48:33 |
| 218.92.0.175 | attackbotsspam | Aug 26 19:04:09 wbs sshd\[27316\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.175 user=root Aug 26 19:04:11 wbs sshd\[27316\]: Failed password for root from 218.92.0.175 port 21325 ssh2 Aug 26 19:04:14 wbs sshd\[27316\]: Failed password for root from 218.92.0.175 port 21325 ssh2 Aug 26 19:04:28 wbs sshd\[27332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.175 user=root Aug 26 19:04:30 wbs sshd\[27332\]: Failed password for root from 218.92.0.175 port 35285 ssh2 |
2020-08-27 16:00:51 |
| 115.166.134.236 | attack | Unauthorised access (Aug 27) SRC=115.166.134.236 LEN=52 TTL=112 ID=2009 DF TCP DPT=445 WINDOW=8192 SYN |
2020-08-27 16:20:15 |
| 182.148.179.234 | attackspambots | Invalid user mona from 182.148.179.234 port 45462 |
2020-08-27 16:18:29 |
| 46.229.168.140 | attack | Unauthorized access detected from black listed ip! |
2020-08-27 15:59:07 |
| 77.117.147.96 | attackspam | Aug 26 14:43:59 vh1 sshd[8021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.117.147.96.wireless.dyn.drei.com user=r.r Aug 26 14:44:01 vh1 sshd[8021]: Failed password for r.r from 77.117.147.96 port 58948 ssh2 Aug 26 14:44:01 vh1 sshd[8022]: Received disconnect from 77.117.147.96: 11: Bye Bye Aug 26 14:52:49 vh1 sshd[9192]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.117.147.96.wireless.dyn.drei.com user=r.r Aug 26 14:52:50 vh1 sshd[9192]: Failed password for r.r from 77.117.147.96 port 54058 ssh2 Aug 26 14:52:50 vh1 sshd[9193]: Received disconnect from 77.117.147.96: 11: Bye Bye ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=77.117.147.96 |
2020-08-27 15:52:50 |
| 112.140.185.64 | attackspam | 2020-08-27T07:10:39.809543mail.standpoint.com.ua sshd[29672]: Invalid user web94p2 from 112.140.185.64 port 56828 2020-08-27T07:10:39.812107mail.standpoint.com.ua sshd[29672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.140.185.64 2020-08-27T07:10:39.809543mail.standpoint.com.ua sshd[29672]: Invalid user web94p2 from 112.140.185.64 port 56828 2020-08-27T07:10:41.480606mail.standpoint.com.ua sshd[29672]: Failed password for invalid user web94p2 from 112.140.185.64 port 56828 ssh2 2020-08-27T07:11:46.596982mail.standpoint.com.ua sshd[29799]: Invalid user xerox from 112.140.185.64 port 46034 ... |
2020-08-27 15:42:33 |
| 112.85.42.94 | attack | 2020-08-27T06:48:38.069418vps751288.ovh.net sshd\[9340\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.94 user=root 2020-08-27T06:48:39.938491vps751288.ovh.net sshd\[9340\]: Failed password for root from 112.85.42.94 port 34174 ssh2 2020-08-27T06:48:42.517314vps751288.ovh.net sshd\[9340\]: Failed password for root from 112.85.42.94 port 34174 ssh2 2020-08-27T06:48:44.377412vps751288.ovh.net sshd\[9340\]: Failed password for root from 112.85.42.94 port 34174 ssh2 2020-08-27T06:50:54.522164vps751288.ovh.net sshd\[9343\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.94 user=root |
2020-08-27 16:09:25 |
| 45.142.120.74 | attack | 2020-08-27 07:29:08 dovecot_login authenticator failed for \(User\) \[45.142.120.74\]: 535 Incorrect authentication data \(set_id=microsoftonline-p@no-server.de\) 2020-08-27 07:29:22 dovecot_login authenticator failed for \(User\) \[45.142.120.74\]: 535 Incorrect authentication data \(set_id=figaro1@no-server.de\) 2020-08-27 07:29:37 dovecot_login authenticator failed for \(User\) \[45.142.120.74\]: 535 Incorrect authentication data \(set_id=figaro1@no-server.de\) 2020-08-27 07:29:40 dovecot_login authenticator failed for \(User\) \[45.142.120.74\]: 535 Incorrect authentication data \(set_id=figaro1@no-server.de\) 2020-08-27 07:29:54 dovecot_login authenticator failed for \(User\) \[45.142.120.74\]: 535 Incorrect authentication data \(set_id=figaro1@no-server.de\) ... |
2020-08-27 15:56:34 |
| 118.27.11.79 | attack | Firewall Dropped Connection |
2020-08-27 15:45:44 |
| 106.75.141.48 | attackspambots | 2020-08-26 13:40:37 unexpected disconnection while reading SMTP command from online-mails.com [106.75.141.48]:34000 I=[10.100.18.25]:25 2020-08-26 14:11:16 unexpected disconnection while reading SMTP command from online-mails.com [106.75.141.48]:51844 I=[10.100.18.25]:25 2020-08-26 14:52:10 unexpected disconnection while reading SMTP command from online-mails.com [106.75.141.48]:47470 I=[10.100.18.25]:25 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=106.75.141.48 |
2020-08-27 16:20:46 |
| 54.38.212.160 | attack | 54.38.212.160 - - [27/Aug/2020:07:11:56 +0200] "POST /wp-login.php HTTP/1.1" 200 5677 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.38.212.160 - - [27/Aug/2020:07:11:57 +0200] "POST /wp-login.php HTTP/1.1" 200 5684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.38.212.160 - - [27/Aug/2020:07:11:59 +0200] "POST /wp-login.php HTTP/1.1" 200 5682 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.38.212.160 - - [27/Aug/2020:07:15:07 +0200] "POST /wp-login.php HTTP/1.1" 200 5703 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.38.212.160 - - [27/Aug/2020:07:15:08 +0200] "POST /wp-login.php HTTP/1.1" 200 5694 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-27 16:17:06 |
| 197.63.234.140 | attackbotsspam | Tried our host z. |
2020-08-27 16:04:20 |