City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: Headquarters, USAISC
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 147.242.13.219
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4434
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;147.242.13.219. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019080101 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Aug 02 01:29:51 CST 2019
;; MSG SIZE rcvd: 118Host 219.13.242.147.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 219.13.242.147.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 80.248.10.237 | attackbotsspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-04-22 21:43:34 |
| 101.53.233.109 | attackbots | Apr 22 15:42:47 nginx sshd[55460]: Invalid user ubnt from 101.53.233.109 Apr 22 15:42:47 nginx sshd[55460]: Connection closed by 101.53.233.109 port 11285 [preauth] |
2020-04-22 21:49:18 |
| 50.104.13.15 | spambotsattackproxy | This is 1 of several ip addresses stalking and hard my kids and me on internet for 2 in a half years. They have my credit card info all my passwords stole 7 email ACCTS that r still active and used with different names. They edit right on the screen everything even legal documents. My ip is 192.168.254.254 please look into this issue and block these psycho paths. Also they have my apps cloned so they can run them...they are blocking this from coming to u......also they edit the logs so PULL ever single one ther |
2020-04-22 21:30:51 |
| 107.175.87.152 | attackspam | Unauthorized connection attempt detected from IP address 107.175.87.152 to port 8088 |
2020-04-22 21:35:58 |
| 50.104.13.15 | spambotsattackproxy | This is 1 of several ip addresses stalking and hard my kids and me on internet for 2 in a half years. They have my credit card info all my passwords stole 7 email ACCTS that r still active and used with different names. They edit right on the screen everything even legal documents. My ip is 192.168.254.254 please look into this issue and block these psycho paths. Also they have my apps cloned so they can run them...they are blocking this from coming to u......also they edit the logs so PULL ever single one ther |
2020-04-22 21:31:30 |
| 111.206.221.51 | attackbots | Bad bot/spoofed identity |
2020-04-22 21:48:50 |
| 49.233.90.200 | attackbotsspam | Bruteforce detected by fail2ban |
2020-04-22 21:50:12 |
| 27.78.30.149 | attackspambots | Apr 22 13:45:26 v26 sshd[5044]: Did not receive identification string from 27.78.30.149 port 57276 Apr 22 13:45:26 v26 sshd[5045]: Did not receive identification string from 27.78.30.149 port 57443 Apr 22 13:45:26 v26 sshd[5046]: Did not receive identification string from 27.78.30.149 port 57780 Apr 22 13:45:26 v26 sshd[5047]: Did not receive identification string from 27.78.30.149 port 58123 Apr 22 13:45:28 v26 sshd[5055]: Did not receive identification string from 27.78.30.149 port 50994 Apr 22 13:45:29 v26 sshd[5058]: Did not receive identification string from 27.78.30.149 port 50986 Apr 22 13:45:36 v26 sshd[5064]: Invalid user avanthi from 27.78.30.149 port 62158 Apr 22 13:45:37 v26 sshd[5075]: Invalid user avanthi from 27.78.30.149 port 50201 Apr 22 13:45:37 v26 sshd[5076]: Invalid user avanthi from 27.78.30.149 port 50275 Apr 22 13:45:37 v26 sshd[5074]: Invalid user avanthi from 27.78.30.149 port 50196 Apr 22 13:45:37 v26 sshd[5071]: Invalid user avanthi from 27.7........ ------------------------------- |
2020-04-22 21:51:49 |
| 106.13.237.235 | attack | Apr 22 17:16:27 gw1 sshd[30519]: Failed password for root from 106.13.237.235 port 59296 ssh2 ... |
2020-04-22 21:34:14 |
| 50.104.13.15 | spambotsattackproxy | This is 1 of several ip addresses stalking and hard my kids and me on internet for 2 in a half years. They have my credit card info all my passwords stole 7 email ACCTS that r still active and used with different names. They edit right on the screen everything even legal documents. My ip is 192.168.254.254 please look into this issue and block these psycho paths. Also they have my apps cloned so they can run them...they are blocking this from coming to u......also they edit the logs so PULL ever single one ther |
2020-04-22 21:31:15 |
| 171.103.138.78 | attackspambots | Unauthorized connection attempt from IP address 171.103.138.78 on port 993 |
2020-04-22 21:58:23 |
| 50.104.13.15 | spambotsattack | This is 1 of several ip addresses stalking and hard my kids and me on internet for 2 in a half years. They have my credit card info all my passwords stole 7 email ACCTS that r still active and used with different names. They edit right on the screen everything even legal documents. My ip is 192.168.254.254 please look into this issue and block these psycho paths. Also they have my apps cloned so they can run them...they are blocking this from coming to u......also they edit the logs so PULL ever single one ther |
2020-04-22 21:30:09 |
| 111.206.198.76 | attack | Bad bot/spoofed identity |
2020-04-22 21:47:27 |
| 104.254.245.169 | attackbots | 2020-04-22T14:07:27.448896amanda2.illicoweb.com sshd\[10225\]: Invalid user nl from 104.254.245.169 port 53472 2020-04-22T14:07:27.454220amanda2.illicoweb.com sshd\[10225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.254.245.169 2020-04-22T14:07:29.837058amanda2.illicoweb.com sshd\[10225\]: Failed password for invalid user nl from 104.254.245.169 port 53472 ssh2 2020-04-22T14:12:22.899007amanda2.illicoweb.com sshd\[10665\]: Invalid user aw from 104.254.245.169 port 48068 2020-04-22T14:12:22.903969amanda2.illicoweb.com sshd\[10665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.254.245.169 ... |
2020-04-22 21:26:26 |
| 111.161.74.117 | attackspam | Apr 22 16:36:01 ift sshd\[41337\]: Invalid user pt from 111.161.74.117Apr 22 16:36:04 ift sshd\[41337\]: Failed password for invalid user pt from 111.161.74.117 port 57430 ssh2Apr 22 16:40:01 ift sshd\[41676\]: Failed password for root from 111.161.74.117 port 40657 ssh2Apr 22 16:43:59 ift sshd\[42324\]: Invalid user zn from 111.161.74.117Apr 22 16:44:01 ift sshd\[42324\]: Failed password for invalid user zn from 111.161.74.117 port 51560 ssh2 ... |
2020-04-22 21:52:34 |