City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
        ; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.13.168.162
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21250
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;107.13.168.162.			IN	A
;; AUTHORITY SECTION:
.			297	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022800 1800 900 604800 86400
;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 14:46:44 CST 2022
;; MSG SIZE  rcvd: 107
        162.168.13.107.in-addr.arpa domain name pointer mta-107-13-168-162.nc.rr.com.
        Server:		183.60.83.19
Address:	183.60.83.19#53
Non-authoritative answer:
162.168.13.107.in-addr.arpa	name = mta-107-13-168-162.nc.rr.com.
Authoritative answers can be found from:
        | IP | Type | Details | Datetime | 
|---|---|---|---|
| 49.232.111.165 | attackspam | Sep 5 10:57:18 root sshd[16669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.111.165 Sep 5 10:57:21 root sshd[16669]: Failed password for invalid user owen from 49.232.111.165 port 37010 ssh2 Sep 5 11:09:27 root sshd[18165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.111.165 ...  | 
                    2020-09-05 19:56:21 | 
| 54.37.14.3 | attackspam | Invalid user oracle from 54.37.14.3 port 47988  | 
                    2020-09-05 20:05:52 | 
| 182.122.71.22 | attack | Lines containing failures of 182.122.71.22 Sep 3 15:08:18 newdogma sshd[5379]: Invalid user ftp from 182.122.71.22 port 12972 Sep 3 15:08:18 newdogma sshd[5379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.122.71.22 Sep 3 15:08:20 newdogma sshd[5379]: Failed password for invalid user ftp from 182.122.71.22 port 12972 ssh2 Sep 3 15:08:21 newdogma sshd[5379]: Received disconnect from 182.122.71.22 port 12972:11: Bye Bye [preauth] Sep 3 15:08:21 newdogma sshd[5379]: Disconnected from invalid user ftp 182.122.71.22 port 12972 [preauth] Sep 3 15:19:11 newdogma sshd[7549]: Invalid user status from 182.122.71.22 port 60650 Sep 3 15:19:11 newdogma sshd[7549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.122.71.22 Sep 3 15:19:13 newdogma sshd[7549]: Failed password for invalid user status from 182.122.71.22 port 60650 ssh2 Sep 3 15:19:13 newdogma sshd[7549]: Received disconne........ ------------------------------  | 
                    2020-09-05 19:48:14 | 
| 51.77.135.89 | attack | 2020-09-05T12:07:59.393042shield sshd\[24551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns31066279.ip-51-77-135.eu user=root 2020-09-05T12:08:01.114270shield sshd\[24551\]: Failed password for root from 51.77.135.89 port 42230 ssh2 2020-09-05T12:08:03.386015shield sshd\[24551\]: Failed password for root from 51.77.135.89 port 42230 ssh2 2020-09-05T12:08:05.563399shield sshd\[24551\]: Failed password for root from 51.77.135.89 port 42230 ssh2 2020-09-05T12:08:07.734026shield sshd\[24551\]: Failed password for root from 51.77.135.89 port 42230 ssh2  | 
                    2020-09-05 20:15:23 | 
| 217.23.12.117 | attackspambots | Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-05T07:21:42Z and 2020-09-05T08:51:39Z  | 
                    2020-09-05 19:49:21 | 
| 51.210.0.25 | attack | Automatic report - Banned IP Access  | 
                    2020-09-05 20:13:32 | 
| 61.136.184.75 | attackbots | ET CINS Active Threat Intelligence Poor Reputation IP group 51 - port: 28424 proto: tcp cat: Misc Attackbytes: 60  | 
                    2020-09-05 19:50:09 | 
| 105.112.101.250 | attackspambots | Unauthorized connection attempt from IP address 105.112.101.250 on Port 445(SMB)  | 
                    2020-09-05 19:43:58 | 
| 202.191.124.203 | attackbotsspam | Unauthorized connection attempt from IP address 202.191.124.203 on Port 445(SMB)  | 
                    2020-09-05 19:37:36 | 
| 118.70.67.23 | attack | 1599238433 - 09/04/2020 18:53:53 Host: 118.70.67.23/118.70.67.23 Port: 445 TCP Blocked  | 
                    2020-09-05 20:19:27 | 
| 117.50.137.36 | attack | Port Scan/VNC login attempt ...  | 
                    2020-09-05 19:43:34 | 
| 162.241.158.42 | attack | Automatic report - Banned IP Access  | 
                    2020-09-05 20:20:58 | 
| 203.81.78.180 | attackspambots | Sep 5 13:52:47 inter-technics sshd[25567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.81.78.180 user=root Sep 5 13:52:48 inter-technics sshd[25567]: Failed password for root from 203.81.78.180 port 36172 ssh2 Sep 5 13:55:40 inter-technics sshd[25728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.81.78.180 user=root Sep 5 13:55:42 inter-technics sshd[25728]: Failed password for root from 203.81.78.180 port 57438 ssh2 Sep 5 13:58:32 inter-technics sshd[25907]: Invalid user naman from 203.81.78.180 port 50460 ...  | 
                    2020-09-05 20:00:21 | 
| 72.12.99.140 | attack | Invalid user admin from 72.12.99.140 port 33142  | 
                    2020-09-05 19:53:12 | 
| 51.68.139.151 | attack | 2020-09-05T12:14:48.868861shield sshd\[25425\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.ip-51-68-139.eu user=root 2020-09-05T12:14:51.150876shield sshd\[25425\]: Failed password for root from 51.68.139.151 port 50406 ssh2 2020-09-05T12:14:54.436420shield sshd\[25425\]: Failed password for root from 51.68.139.151 port 50406 ssh2 2020-09-05T12:14:56.928298shield sshd\[25425\]: Failed password for root from 51.68.139.151 port 50406 ssh2 2020-09-05T12:14:59.971247shield sshd\[25425\]: Failed password for root from 51.68.139.151 port 50406 ssh2  | 
                    2020-09-05 20:16:50 |