City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 159.121.119.150
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27128
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;159.121.119.150. IN A
;; AUTHORITY SECTION:
. 338 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 05:08:29 CST 2022
;; MSG SIZE rcvd: 108150.119.121.159.in-addr.arpa domain name pointer prd.state.or.us.
150.119.121.159.in-addr.arpa domain name pointer stateparks.oregon.gov.
150.119.121.159.in-addr.arpa domain name pointer thewolfcreekinn.com.
150.119.121.159.in-addr.arpa domain name pointer oregonbeachparty.org.
150.119.121.159.in-addr.arpa domain name pointer historicwolfcreekinn.com.
150.119.121.159.in-addr.arpa domain name pointer store.stateparks.oregon.gov.
150.119.121.159.in-addr.arpa domain name pointer oregonmainstreet.com.
150.119.121.159.in-addr.arpa domain name pointer oregonbeachparty.com.
150.119.121.159.in-addr.arpa domain name pointer oregonmainstreet.org.
150.119.121.159.in-addr.arpa domain name pointer oregonheritage.online.
150.119.121.159.in-addr.arpa domain name pointer staging.stateparks.oregon.gov.
150.119.121.159.in-addr.arpa domain name pointer historicwolfcreekinn.org.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
150.119.121.159.in-addr.arpa name = oregonheritage.online.
150.119.121.159.in-addr.arpa name = staging.stateparks.oregon.gov.
150.119.121.159.in-addr.arpa name = historicwolfcreekinn.org.
150.119.121.159.in-addr.arpa name = prd.state.or.us.
150.119.121.159.in-addr.arpa name = stateparks.oregon.gov.
150.119.121.159.in-addr.arpa name = thewolfcreekinn.com.
150.119.121.159.in-addr.arpa name = oregonbeachparty.org.
150.119.121.159.in-addr.arpa name = historicwolfcreekinn.com.
150.119.121.159.in-addr.arpa name = store.stateparks.oregon.gov.
150.119.121.159.in-addr.arpa name = oregonmainstreet.com.
150.119.121.159.in-addr.arpa name = oregonbeachparty.com.
150.119.121.159.in-addr.arpa name = oregonmainstreet.org.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 192.95.14.196 | attackspam | Automatic report - Banned IP Access |
2019-12-14 02:15:55 |
| 45.55.142.207 | attackbots | Dec 13 19:15:57 eventyay sshd[28704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.142.207 Dec 13 19:15:59 eventyay sshd[28704]: Failed password for invalid user kkkkkkk from 45.55.142.207 port 39726 ssh2 Dec 13 19:21:08 eventyay sshd[28872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.142.207 ... |
2019-12-14 02:26:09 |
| 180.249.117.130 | attack | Unauthorized connection attempt detected from IP address 180.249.117.130 to port 445 |
2019-12-14 02:02:28 |
| 111.40.50.116 | attackbots | Dec 13 12:39:21 linuxvps sshd\[59801\]: Invalid user mataga from 111.40.50.116 Dec 13 12:39:21 linuxvps sshd\[59801\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.40.50.116 Dec 13 12:39:23 linuxvps sshd\[59801\]: Failed password for invalid user mataga from 111.40.50.116 port 39754 ssh2 Dec 13 12:45:29 linuxvps sshd\[63302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.40.50.116 user=root Dec 13 12:45:31 linuxvps sshd\[63302\]: Failed password for root from 111.40.50.116 port 53130 ssh2 |
2019-12-14 02:01:55 |
| 159.89.162.118 | attack | Dec 13 16:11:01 web8 sshd\[24758\]: Invalid user 123www from 159.89.162.118 Dec 13 16:11:01 web8 sshd\[24758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.162.118 Dec 13 16:11:03 web8 sshd\[24758\]: Failed password for invalid user 123www from 159.89.162.118 port 35584 ssh2 Dec 13 16:17:31 web8 sshd\[27882\]: Invalid user abc123 from 159.89.162.118 Dec 13 16:17:31 web8 sshd\[27882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.162.118 |
2019-12-14 02:24:33 |
| 200.54.218.82 | attack | Brute force attempt |
2019-12-14 02:14:36 |
| 123.25.115.4 | attackspam | 1576252657 - 12/13/2019 16:57:37 Host: 123.25.115.4/123.25.115.4 Port: 445 TCP Blocked |
2019-12-14 01:52:05 |
| 222.186.180.17 | attack | Dec 14 01:12:53 webhost01 sshd[22016]: Failed password for root from 222.186.180.17 port 55966 ssh2 Dec 14 01:13:07 webhost01 sshd[22016]: error: maximum authentication attempts exceeded for root from 222.186.180.17 port 55966 ssh2 [preauth] ... |
2019-12-14 02:13:47 |
| 54.37.139.235 | attackspambots | Dec 13 18:37:37 eventyay sshd[27657]: Failed password for root from 54.37.139.235 port 54868 ssh2 Dec 13 18:43:00 eventyay sshd[27798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.139.235 Dec 13 18:43:01 eventyay sshd[27798]: Failed password for invalid user konowicz from 54.37.139.235 port 35466 ssh2 ... |
2019-12-14 01:56:29 |
| 165.227.211.13 | attackspam | Dec 13 19:09:24 markkoudstaal sshd[18361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.211.13 Dec 13 19:09:27 markkoudstaal sshd[18361]: Failed password for invalid user madis from 165.227.211.13 port 39434 ssh2 Dec 13 19:15:07 markkoudstaal sshd[18929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.211.13 |
2019-12-14 02:21:33 |
| 99.242.114.107 | attackbotsspam | Dec 13 19:14:52 vps691689 sshd[26113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=99.242.114.107 Dec 13 19:14:55 vps691689 sshd[26113]: Failed password for invalid user eldon from 99.242.114.107 port 44818 ssh2 ... |
2019-12-14 02:22:24 |
| 74.122.121.120 | attackspambots | Unauthorised access (Dec 13) SRC=74.122.121.120 LEN=52 TOS=0x08 PREC=0x20 TTL=109 ID=26952 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Dec 13) SRC=74.122.121.120 LEN=52 TOS=0x08 PREC=0x20 TTL=109 ID=24842 DF TCP DPT=445 WINDOW=8192 SYN |
2019-12-14 02:02:44 |
| 208.103.75.0 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/208.103.75.0/ US - 1H : (106) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN23100 IP : 208.103.75.0 CIDR : 208.103.64.0/20 PREFIX COUNT : 12 UNIQUE IP COUNT : 48640 ATTACKS DETECTED ASN23100 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-12-13 16:58:23 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery |
2019-12-14 01:49:10 |
| 219.146.62.247 | attackbots | firewall-block, port(s): 445/tcp |
2019-12-14 02:25:23 |
| 109.237.84.155 | attackproxy | Used together with a subnet 109.237.80.0/20 to DDOS attack other computers. |
2019-12-14 01:51:49 |