City: Boardman
Region: Oregon
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 15.200.85.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63808
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;15.200.85.212. IN A
;; AUTHORITY SECTION:
. 243 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020020201 1800 900 604800 86400
;; Query time: 48 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 03 04:48:04 CST 2020
;; MSG SIZE rcvd: 117212.85.200.15.in-addr.arpa domain name pointer ec2-15-200-85-212.us-gov-west-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
212.85.200.15.in-addr.arpa name = ec2-15-200-85-212.us-gov-west-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 77.242.76.218 | attack | Scanning random ports - tries to find possible vulnerable services |
2019-06-22 16:18:55 |
| 5.234.228.197 | attackspambots | DATE:2019-06-22_06:31:05, IP:5.234.228.197, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2019-06-22 16:30:11 |
| 93.126.25.34 | attackbotsspam | SMTP Fraud Orders |
2019-06-22 16:42:25 |
| 118.24.152.187 | attackspam | $f2bV_matches |
2019-06-22 16:32:43 |
| 41.41.10.13 | attackbots | Unauthorized connection attempt from IP address 41.41.10.13 on Port 445(SMB) |
2019-06-22 16:03:23 |
| 78.123.55.150 | attackspam | Jun 21 23:19:49 cac1d2 sshd\[6143\]: Invalid user admin from 78.123.55.150 port 51451 Jun 21 23:19:49 cac1d2 sshd\[6143\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.123.55.150 Jun 21 23:19:51 cac1d2 sshd\[6143\]: Failed password for invalid user admin from 78.123.55.150 port 51451 ssh2 ... |
2019-06-22 15:51:22 |
| 83.135.18.91 | attackbots | Unauthorized connection attempt from IP address 83.135.18.91 on Port 445(SMB) |
2019-06-22 15:38:08 |
| 119.29.67.90 | attackspam | $f2bV_matches |
2019-06-22 16:15:43 |
| 162.247.99.38 | attackbots | 701 attempts to GET/POST various PHPs |
2019-06-22 16:46:03 |
| 92.118.160.29 | attack | firewall-block, port(s): 1521/tcp |
2019-06-22 15:56:08 |
| 38.145.121.101 | attackspam | NAME : COGENT-NB-0002 CIDR : 38.112.0.0/13 | STATUS : 200 ROBOT {Looking for resource vulnerabilities} DDoS Attack USA - District Of Columbia - block certain countries :) IP: 38.145.121.101 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-06-22 15:46:40 |
| 37.49.227.12 | attack | Daily port scanning for vulnerabilities |
2019-06-22 16:18:23 |
| 213.157.50.108 | attack | Unauthorized connection attempt from IP address 213.157.50.108 on Port 445(SMB) |
2019-06-22 16:33:43 |
| 85.191.125.170 | attack | Unauthorized connection attempt from IP address 85.191.125.170 on Port 445(SMB) |
2019-06-22 16:42:50 |
| 113.161.147.105 | attackspambots | Unauthorized connection attempt from IP address 113.161.147.105 on Port 445(SMB) |
2019-06-22 16:06:48 |