City: Brea
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.172.57.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25374
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.172.57.195. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 14:29:12 CST 2025
;; MSG SIZE rcvd: 107195.57.172.104.in-addr.arpa domain name pointer syn-104-172-057-195.res.spectrum.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
195.57.172.104.in-addr.arpa name = syn-104-172-057-195.res.spectrum.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 207.154.194.145 | attackbots | 2019-08-11 01:40:17,312 fail2ban.actions [791]: NOTICE [sshd] Ban 207.154.194.145 2019-08-11 04:49:30,238 fail2ban.actions [791]: NOTICE [sshd] Ban 207.154.194.145 2019-08-11 07:59:30,151 fail2ban.actions [791]: NOTICE [sshd] Ban 207.154.194.145 ... |
2019-08-16 02:37:56 |
| 114.207.154.2 | attack | SSH invalid-user multiple login try |
2019-08-16 02:39:18 |
| 46.30.45.82 | attack | xmlrpc attack |
2019-08-16 02:10:52 |
| 118.24.101.182 | attackbotsspam | Aug 15 14:27:02 srv-4 sshd\[18653\]: Invalid user keith from 118.24.101.182 Aug 15 14:27:02 srv-4 sshd\[18653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.101.182 Aug 15 14:27:04 srv-4 sshd\[18653\]: Failed password for invalid user keith from 118.24.101.182 port 49828 ssh2 ... |
2019-08-16 01:53:50 |
| 103.228.112.192 | attack | Automatic report - Banned IP Access |
2019-08-16 02:13:17 |
| 89.185.8.121 | attackspambots | $f2bV_matches_ltvn |
2019-08-16 01:49:36 |
| 68.183.94.194 | attack | Aug 15 11:12:49 xtremcommunity sshd\[19402\]: Invalid user riley from 68.183.94.194 port 46924 Aug 15 11:12:49 xtremcommunity sshd\[19402\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.94.194 Aug 15 11:12:51 xtremcommunity sshd\[19402\]: Failed password for invalid user riley from 68.183.94.194 port 46924 ssh2 Aug 15 11:18:24 xtremcommunity sshd\[19657\]: Invalid user ivo from 68.183.94.194 port 41034 Aug 15 11:18:24 xtremcommunity sshd\[19657\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.94.194 ... |
2019-08-16 02:07:44 |
| 67.129.196.218 | attack | Hits on port 445 (x3) |
2019-08-16 02:00:42 |
| 123.206.177.145 | attack | $f2bV_matches |
2019-08-16 02:15:11 |
| 51.158.178.133 | attack | Port Scan: TCP/445 |
2019-08-16 02:27:48 |
| 178.213.249.106 | attackbots | [portscan] Port scan |
2019-08-16 01:55:02 |
| 94.102.56.252 | attack | Aug 15 19:33:42 h2177944 kernel: \[4214137.216168\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.102.56.252 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=54310 PROTO=TCP SPT=49803 DPT=9243 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 15 19:34:29 h2177944 kernel: \[4214184.011433\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.102.56.252 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=2692 PROTO=TCP SPT=49868 DPT=9632 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 15 19:35:53 h2177944 kernel: \[4214267.555964\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.102.56.252 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=8571 PROTO=TCP SPT=49868 DPT=9679 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 15 19:36:43 h2177944 kernel: \[4214317.588489\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.102.56.252 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=41010 PROTO=TCP SPT=49823 DPT=9465 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 15 19:37:05 h2177944 kernel: \[4214340.379042\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=94.102.56.252 DST=85.214.117.9 L |
2019-08-16 01:58:35 |
| 124.160.17.98 | attackbotsspam | RDP Scan |
2019-08-16 02:40:01 |
| 134.209.170.90 | attackbots | Aug 15 07:32:08 hpm sshd\[23758\]: Invalid user saturday from 134.209.170.90 Aug 15 07:32:08 hpm sshd\[23758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.170.90 Aug 15 07:32:10 hpm sshd\[23758\]: Failed password for invalid user saturday from 134.209.170.90 port 52240 ssh2 Aug 15 07:36:44 hpm sshd\[24154\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.170.90 user=root Aug 15 07:36:46 hpm sshd\[24154\]: Failed password for root from 134.209.170.90 port 45674 ssh2 |
2019-08-16 01:52:15 |
| 67.207.94.61 | attack | Automatic report - Banned IP Access |
2019-08-16 02:08:49 |