City: Oceanside
Region: California
Country: United States
Internet Service Provider: AT&T
Hostname: unknown
Organization: AT&T Services, Inc.
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.142.155.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44578
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;107.142.155.148. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019060100 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 01 19:20:58 CST 2019
;; MSG SIZE rcvd: 119
148.155.142.107.in-addr.arpa domain name pointer 107-142-155-148.lightspeed.sndgca.sbcglobal.net.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
148.155.142.107.in-addr.arpa name = 107-142-155-148.lightspeed.sndgca.sbcglobal.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 159.203.179.230 | attackbots | Nov 11 10:55:36 ip-172-31-62-245 sshd\[22496\]: Invalid user nfs from 159.203.179.230\ Nov 11 10:55:38 ip-172-31-62-245 sshd\[22496\]: Failed password for invalid user nfs from 159.203.179.230 port 60680 ssh2\ Nov 11 10:59:06 ip-172-31-62-245 sshd\[22527\]: Invalid user jw from 159.203.179.230\ Nov 11 10:59:08 ip-172-31-62-245 sshd\[22527\]: Failed password for invalid user jw from 159.203.179.230 port 40894 ssh2\ Nov 11 11:02:30 ip-172-31-62-245 sshd\[22538\]: Failed password for news from 159.203.179.230 port 49468 ssh2\ |
2019-11-11 19:51:48 |
| 202.137.142.68 | attack | Nov 11 16:31:32 our-server-hostname postfix/smtpd[27863]: connect from unknown[202.137.142.68] Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=202.137.142.68 |
2019-11-11 19:46:58 |
| 198.50.197.217 | attackspam | Nov 11 07:41:09 SilenceServices sshd[23247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.50.197.217 Nov 11 07:41:11 SilenceServices sshd[23247]: Failed password for invalid user anwenderschnittstelle from 198.50.197.217 port 46130 ssh2 Nov 11 07:44:47 SilenceServices sshd[24276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.50.197.217 |
2019-11-11 19:23:09 |
| 68.183.233.171 | attackspam | Repeated brute force against a port |
2019-11-11 19:46:05 |
| 95.84.45.146 | attack | Chat Spam |
2019-11-11 19:34:30 |
| 192.163.207.48 | attack | Nov 11 06:45:39 venus sshd\[13980\]: Invalid user wrest from 192.163.207.48 port 41806 Nov 11 06:45:39 venus sshd\[13980\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.163.207.48 Nov 11 06:45:41 venus sshd\[13980\]: Failed password for invalid user wrest from 192.163.207.48 port 41806 ssh2 ... |
2019-11-11 19:28:34 |
| 117.55.241.178 | attackspambots | 2019-11-11T12:03:17.338253scmdmz1 sshd\[11186\]: Invalid user hstings from 117.55.241.178 port 55772 2019-11-11T12:03:17.340760scmdmz1 sshd\[11186\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.55.241.178 2019-11-11T12:03:19.442526scmdmz1 sshd\[11186\]: Failed password for invalid user hstings from 117.55.241.178 port 55772 ssh2 ... |
2019-11-11 19:20:18 |
| 150.223.21.177 | attackspambots | 2019-11-10T23:59:11.1536401495-001 sshd\[5382\]: Failed password for invalid user dave from 150.223.21.177 port 53983 ssh2 2019-11-11T01:03:42.6662831495-001 sshd\[7909\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.223.21.177 user=ftp 2019-11-11T01:03:44.4494221495-001 sshd\[7909\]: Failed password for ftp from 150.223.21.177 port 37027 ssh2 2019-11-11T01:08:17.5508261495-001 sshd\[8041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.223.21.177 user=root 2019-11-11T01:08:20.0866151495-001 sshd\[8041\]: Failed password for root from 150.223.21.177 port 51944 ssh2 2019-11-11T01:12:50.4275871495-001 sshd\[8179\]: Invalid user bengt from 150.223.21.177 port 38633 2019-11-11T01:12:50.4308971495-001 sshd\[8179\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.223.21.177 ... |
2019-11-11 19:18:45 |
| 183.47.3.72 | attackbotsspam | Port 1433 Scan |
2019-11-11 19:23:41 |
| 142.93.14.190 | attack | Nov 11 09:39:35 ms-srv sshd[52318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.14.190 Nov 11 09:39:38 ms-srv sshd[52318]: Failed password for invalid user swbell from 142.93.14.190 port 39526 ssh2 |
2019-11-11 19:27:46 |
| 89.45.17.11 | attackspam | Nov 11 05:47:58 firewall sshd[19852]: Invalid user 123 from 89.45.17.11 Nov 11 05:48:00 firewall sshd[19852]: Failed password for invalid user 123 from 89.45.17.11 port 59356 ssh2 Nov 11 05:51:55 firewall sshd[19922]: Invalid user r0ot from 89.45.17.11 ... |
2019-11-11 19:46:36 |
| 2.132.84.155 | attackbotsspam | Nov 11 07:05:18 mxgate1 postfix/postscreen[31181]: CONNECT from [2.132.84.155]:48639 to [176.31.12.44]:25 Nov 11 07:05:18 mxgate1 postfix/dnsblog[31182]: addr 2.132.84.155 listed by domain zen.spamhaus.org as 127.0.0.11 Nov 11 07:05:18 mxgate1 postfix/dnsblog[31184]: addr 2.132.84.155 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 11 07:05:18 mxgate1 postfix/dnsblog[31182]: addr 2.132.84.155 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 11 07:05:18 mxgate1 postfix/dnsblog[31201]: addr 2.132.84.155 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 11 07:05:18 mxgate1 postfix/postscreen[31181]: PREGREET 21 after 0.16 from [2.132.84.155]:48639: EHLO [2.132.84.155] Nov 11 07:05:18 mxgate1 postfix/postscreen[31181]: DNSBL rank 4 for [2.132.84.155]:48639 Nov x@x Nov 11 07:05:19 mxgate1 postfix/postscreen[31181]: HANGUP after 0.56 from [2.132.84.155]:48639 in tests after SMTP handshake Nov 11 07:05:19 mxgate1 postfix/postscreen[31181]: DISCONNECT [2.132.84.155]........ ------------------------------- |
2019-11-11 19:37:42 |
| 171.221.203.185 | attackbots | Nov 11 11:13:06 debian sshd\[30523\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.221.203.185 user=root Nov 11 11:13:08 debian sshd\[30523\]: Failed password for root from 171.221.203.185 port 18672 ssh2 Nov 11 11:28:15 debian sshd\[31504\]: Invalid user com from 171.221.203.185 port 5831 Nov 11 11:28:15 debian sshd\[31504\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.221.203.185 ... |
2019-11-11 19:14:07 |
| 185.2.140.155 | attackbotsspam | 2019-11-11T11:18:47.312870abusebot-5.cloudsearch.cf sshd\[2926\]: Invalid user sourire from 185.2.140.155 port 42730 |
2019-11-11 19:48:59 |
| 106.12.187.146 | attackspambots | Nov 11 06:22:38 venus sshd\[13572\]: Invalid user admin from 106.12.187.146 port 24073 Nov 11 06:22:38 venus sshd\[13572\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.187.146 Nov 11 06:22:40 venus sshd\[13572\]: Failed password for invalid user admin from 106.12.187.146 port 24073 ssh2 ... |
2019-11-11 19:44:39 |