City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 155.70.66.10
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56285
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;155.70.66.10. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400
;; Query time: 23 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 13:17:42 CST 2022
;; MSG SIZE rcvd: 10510.66.70.155.in-addr.arpa domain name pointer www.lumen.com.
10.66.70.155.in-addr.arpa domain name pointer lumen.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
10.66.70.155.in-addr.arpa name = www.lumen.com.
10.66.70.155.in-addr.arpa name = lumen.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.249.56.205 | attack | port scan and connect, tcp 1433 (ms-sql-s) |
2020-02-29 05:09:03 |
| 39.87.191.157 | attackbots | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-29 04:47:16 |
| 200.69.81.198 | attackspambots | Sending SPAM email |
2020-02-29 05:04:25 |
| 194.135.14.154 | attackbotsspam | Feb 28 14:25:33 h2177944 kernel: \[6094070.687762\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.135.14.154 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x20 TTL=116 ID=2665 DF PROTO=TCP SPT=56860 DPT=4899 WINDOW=8192 RES=0x00 SYN URGP=0 Feb 28 14:25:33 h2177944 kernel: \[6094070.687777\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.135.14.154 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x20 TTL=116 ID=2665 DF PROTO=TCP SPT=56860 DPT=4899 WINDOW=8192 RES=0x00 SYN URGP=0 Feb 28 14:25:36 h2177944 kernel: \[6094073.690236\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.135.14.154 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x20 TTL=116 ID=7286 DF PROTO=TCP SPT=56860 DPT=4899 WINDOW=8192 RES=0x00 SYN URGP=0 Feb 28 14:25:36 h2177944 kernel: \[6094073.690250\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.135.14.154 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x20 TTL=116 ID=7286 DF PROTO=TCP SPT=56860 DPT=4899 WINDOW=8192 RES=0x00 SYN URGP=0 Feb 28 14:25:42 h2177944 kernel: \[6094079.689977\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.135.14.154 DST |
2020-02-29 04:50:12 |
| 39.71.0.235 | attackspambots | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-29 05:01:22 |
| 111.231.143.71 | attackspambots | Feb 28 20:56:07 lcl-usvr-02 sshd[27678]: Invalid user vnc from 111.231.143.71 port 50832 Feb 28 20:56:07 lcl-usvr-02 sshd[27678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.143.71 Feb 28 20:56:07 lcl-usvr-02 sshd[27678]: Invalid user vnc from 111.231.143.71 port 50832 Feb 28 20:56:09 lcl-usvr-02 sshd[27678]: Failed password for invalid user vnc from 111.231.143.71 port 50832 ssh2 Feb 28 21:03:21 lcl-usvr-02 sshd[29280]: Invalid user bot from 111.231.143.71 port 48198 ... |
2020-02-29 05:07:22 |
| 40.81.186.110 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-29 04:44:22 |
| 61.85.218.245 | attackbots | Unauthorized connection attempt detected from IP address 61.85.218.245 to port 23 |
2020-02-29 04:40:28 |
| 222.186.190.92 | attackspambots | Feb 28 21:35:43 dedicated sshd[13612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.92 user=root Feb 28 21:35:45 dedicated sshd[13612]: Failed password for root from 222.186.190.92 port 19692 ssh2 |
2020-02-29 04:42:40 |
| 222.186.15.91 | attackspam | Feb 28 21:52:05 dcd-gentoo sshd[24921]: User root from 222.186.15.91 not allowed because none of user's groups are listed in AllowGroups Feb 28 21:52:07 dcd-gentoo sshd[24921]: error: PAM: Authentication failure for illegal user root from 222.186.15.91 Feb 28 21:52:05 dcd-gentoo sshd[24921]: User root from 222.186.15.91 not allowed because none of user's groups are listed in AllowGroups Feb 28 21:52:07 dcd-gentoo sshd[24921]: error: PAM: Authentication failure for illegal user root from 222.186.15.91 Feb 28 21:52:05 dcd-gentoo sshd[24921]: User root from 222.186.15.91 not allowed because none of user's groups are listed in AllowGroups Feb 28 21:52:07 dcd-gentoo sshd[24921]: error: PAM: Authentication failure for illegal user root from 222.186.15.91 Feb 28 21:52:07 dcd-gentoo sshd[24921]: Failed keyboard-interactive/pam for invalid user root from 222.186.15.91 port 11634 ssh2 ... |
2020-02-29 04:55:20 |
| 222.186.30.209 | attack | Tried sshing with brute force. |
2020-02-29 04:44:59 |
| 178.128.76.6 | attack | Feb 29 01:22:50 gw1 sshd[1708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.76.6 Feb 29 01:22:52 gw1 sshd[1708]: Failed password for invalid user ttest from 178.128.76.6 port 51648 ssh2 ... |
2020-02-29 04:32:01 |
| 185.247.20.89 | attack | Port probing on unauthorized port 9530 |
2020-02-29 04:56:48 |
| 86.123.50.126 | attack | suspicious action Fri, 28 Feb 2020 10:25:24 -0300 |
2020-02-29 05:01:02 |
| 51.83.69.132 | attackspambots | 51.83.69.132 - - [28/Feb/2020:23:57:51 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2" ... |
2020-02-29 04:37:54 |