City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.244.159.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62772
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.244.159.140. IN A
;; AUTHORITY SECTION:
. 426 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 20:21:55 CST 2022
;; MSG SIZE rcvd: 108140.159.244.104.in-addr.arpa domain name pointer 104-244-159-140.rdns.owned-networks.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
140.159.244.104.in-addr.arpa name = 104-244-159-140.rdns.owned-networks.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 178.128.209.113 | attackspam | xmlrpc attack |
2019-09-28 12:33:51 |
| 176.96.94.87 | attackspambots | A spam was sent from this SMTP server. It passed the SPF authentication check. This kind of spams used ns177.change-d.net and ns177-02 as the name servers for the domains of its email addresses and URLs (ex. iyye667.com). |
2019-09-28 12:34:22 |
| 140.246.207.140 | attackbots | Sep 27 18:29:43 sachi sshd\[26975\]: Invalid user hall from 140.246.207.140 Sep 27 18:29:43 sachi sshd\[26975\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.207.140 Sep 27 18:29:46 sachi sshd\[26975\]: Failed password for invalid user hall from 140.246.207.140 port 40006 ssh2 Sep 27 18:34:32 sachi sshd\[27358\]: Invalid user 1234 from 140.246.207.140 Sep 27 18:34:32 sachi sshd\[27358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.207.140 |
2019-09-28 12:50:55 |
| 149.129.173.223 | attack | Sep 28 06:47:28 vps647732 sshd[8609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.129.173.223 Sep 28 06:47:30 vps647732 sshd[8609]: Failed password for invalid user rr from 149.129.173.223 port 46662 ssh2 ... |
2019-09-28 12:48:56 |
| 182.52.52.21 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 28-09-2019 04:56:12. |
2019-09-28 12:46:26 |
| 106.75.122.81 | attackspam | Sep 28 06:57:33 www4 sshd\[5822\]: Invalid user cacti from 106.75.122.81 Sep 28 06:57:33 www4 sshd\[5822\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.122.81 Sep 28 06:57:35 www4 sshd\[5822\]: Failed password for invalid user cacti from 106.75.122.81 port 48430 ssh2 ... |
2019-09-28 12:09:43 |
| 171.237.193.101 | attackbotsspam | Unauthorised access (Sep 28) SRC=171.237.193.101 LEN=52 TTL=109 ID=15841 DF TCP DPT=445 WINDOW=8192 SYN |
2019-09-28 12:44:26 |
| 45.236.244.130 | attackbots | Sep 28 06:56:14 taivassalofi sshd[223699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.236.244.130 Sep 28 06:56:17 taivassalofi sshd[223699]: Failed password for invalid user oracle from 45.236.244.130 port 57242 ssh2 ... |
2019-09-28 12:41:22 |
| 223.72.90.107 | attackspambots | 2019-09-28T03:55:06.949804abusebot-8.cloudsearch.cf sshd\[12300\]: Invalid user postgres from 223.72.90.107 port 3002 |
2019-09-28 12:35:12 |
| 159.65.12.183 | attack | Sep 27 18:10:23 hcbb sshd\[25884\]: Invalid user ding from 159.65.12.183 Sep 27 18:10:23 hcbb sshd\[25884\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.12.183 Sep 27 18:10:25 hcbb sshd\[25884\]: Failed password for invalid user ding from 159.65.12.183 port 41204 ssh2 Sep 27 18:15:15 hcbb sshd\[26275\]: Invalid user user from 159.65.12.183 Sep 27 18:15:16 hcbb sshd\[26275\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.12.183 |
2019-09-28 12:24:19 |
| 176.96.94.104 | attackspam | A spam was sent from this SMTP server. It passed the SPF authentication check. This kind of spams used ns177.change-d.net and ns177-02 as the name servers for the domains of its email addresses and URLs (ex. iyye667.com). |
2019-09-28 12:01:21 |
| 117.27.151.104 | attackspambots | MultiHost/MultiPort Probe, Scan, Hack - |
2019-09-28 12:45:48 |
| 141.98.213.186 | attackspam | Invalid user pz from 141.98.213.186 port 56442 |
2019-09-28 13:01:05 |
| 51.68.70.72 | attackbotsspam | Sep 28 06:24:27 vps691689 sshd[6093]: Failed password for ubuntu from 51.68.70.72 port 39278 ssh2 Sep 28 06:28:33 vps691689 sshd[6426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.70.72 ... |
2019-09-28 12:34:41 |
| 199.195.249.6 | attack | Sep 28 04:24:21 venus sshd\[10040\]: Invalid user postgres from 199.195.249.6 port 45612 Sep 28 04:24:21 venus sshd\[10040\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.195.249.6 Sep 28 04:24:23 venus sshd\[10040\]: Failed password for invalid user postgres from 199.195.249.6 port 45612 ssh2 ... |
2019-09-28 12:33:00 |