City: unknown
Region: unknown
Country: United States
Internet Service Provider: Verizon
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 166.141.106.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31244
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;166.141.106.2. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012601 1800 900 604800 86400
;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 08:08:27 CST 2025
;; MSG SIZE rcvd: 1062.106.141.166.in-addr.arpa domain name pointer 2.sub-166-141-106.myvzw.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
2.106.141.166.in-addr.arpa name = 2.sub-166-141-106.myvzw.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.78.4.102 | attackspam | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: tcp cat: Potentially Bad Trafficbytes: 66 |
2020-10-13 04:52:36 |
| 216.245.209.230 | attackbotsspam | ET SCAN Sipvicious Scan - port: 5060 proto: sip cat: Attempted Information Leakbytes: 447 |
2020-10-13 04:53:06 |
| 201.91.210.130 | attackspambots | Oct 12 14:19:06 NPSTNNYC01T sshd[32741]: Failed password for root from 201.91.210.130 port 35301 ssh2 Oct 12 14:23:19 NPSTNNYC01T sshd[1155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.91.210.130 Oct 12 14:23:21 NPSTNNYC01T sshd[1155]: Failed password for invalid user freddi from 201.91.210.130 port 37375 ssh2 ... |
2020-10-13 04:48:17 |
| 222.240.228.76 | attackbots | SSH invalid-user multiple login try |
2020-10-13 05:07:33 |
| 92.63.196.23 | attackspambots | ET CINS Active Threat Intelligence Poor Reputation IP group 82 - port: 8307 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-13 04:58:08 |
| 92.63.196.47 | attackbots | ET CINS Active Threat Intelligence Poor Reputation IP group 82 - port: 8331 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-13 04:57:38 |
| 60.215.202.140 | attackspambots | Blocked by Sophos UTM Network Protection / proto=6 . srcport=9910 . dstport=23 Telnet . (3492) |
2020-10-13 04:42:20 |
| 175.123.253.220 | attack | 2020-10-12T22:42:00.388153mail0 sshd[15079]: User root from 175.123.253.220 not allowed because not listed in AllowUsers 2020-10-12T22:42:02.696010mail0 sshd[15079]: Failed password for invalid user root from 175.123.253.220 port 37286 ssh2 2020-10-12T22:45:46.257301mail0 sshd[15455]: User root from 175.123.253.220 not allowed because not listed in AllowUsers ... |
2020-10-13 04:47:31 |
| 45.129.33.48 | attackspambots | ET DROP Dshield Block Listed Source group 1 - port: 62173 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-13 05:05:53 |
| 45.129.33.9 | attack | Port-scan: detected 106 distinct ports within a 24-hour window. |
2020-10-13 05:06:09 |
| 27.254.206.238 | attack | Oct 12 22:52:59 ns381471 sshd[23538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.206.238 Oct 12 22:53:01 ns381471 sshd[23538]: Failed password for invalid user tom from 27.254.206.238 port 47440 ssh2 |
2020-10-13 05:06:57 |
| 178.33.67.12 | attack | Oct 12 22:50:03 mout sshd[6468]: Invalid user dj from 178.33.67.12 port 45020 |
2020-10-13 04:54:52 |
| 82.98.168.104 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 72 - port: 3389 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-13 05:01:20 |
| 142.93.193.63 | attack | 142.93.193.63 - - [12/Oct/2020:22:49:59 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [12/Oct/2020:22:50:00 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.193.63 - - [12/Oct/2020:22:50:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-10-13 05:11:14 |
| 69.140.168.238 | attackbotsspam | Oct 12 21:40:46 jane sshd[29200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.140.168.238 Oct 12 21:40:48 jane sshd[29200]: Failed password for invalid user cactiuser from 69.140.168.238 port 52670 ssh2 ... |
2020-10-13 04:39:28 |