City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 166.243.45.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27587
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;166.243.45.149. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400
;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 07:14:45 CST 2025
;; MSG SIZE rcvd: 107149.45.243.166.in-addr.arpa domain name pointer 149.sub-166-243-45.myvzw.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
149.45.243.166.in-addr.arpa name = 149.sub-166-243-45.myvzw.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 89.248.168.157 | attackspam | " " |
2020-02-27 01:24:39 |
| 185.175.93.104 | attack | TCP Port Scanning |
2020-02-27 01:08:25 |
| 185.175.93.78 | attackspam | ET DROP Dshield Block Listed Source group 1 - port: 38366 proto: TCP cat: Misc Attack |
2020-02-27 01:09:44 |
| 194.26.29.103 | attack | scans 39 times in preceeding hours on the ports (in chronological order) 45695 45590 45569 45519 45754 45831 45618 45948 45699 45774 45695 45845 45806 45702 45896 45723 45793 45979 45855 45704 45815 45832 45740 45613 45535 45590 45568 45741 45905 45626 45709 45773 45744 45545 45622 45918 45847 45521 45553 resulting in total of 236 scans from 194.26.29.0/24 block. |
2020-02-27 01:06:55 |
| 66.240.205.34 | attackbotsspam | ET CINS Active Threat Intelligence Poor Reputation IP group 58 - port: 7415 proto: TCP cat: Misc Attack |
2020-02-27 01:01:05 |
| 51.91.250.222 | attackspambots | 2020-02-26T17:39:09.966167vps773228.ovh.net sshd[30279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.ip-51-91-250.eu user=centos 2020-02-26T17:39:12.291958vps773228.ovh.net sshd[30279]: Failed password for centos from 51.91.250.222 port 40210 ssh2 2020-02-26T17:39:47.240331vps773228.ovh.net sshd[30281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.ip-51-91-250.eu user=centos 2020-02-26T17:39:49.781726vps773228.ovh.net sshd[30281]: Failed password for centos from 51.91.250.222 port 49240 ssh2 2020-02-26T17:40:24.353039vps773228.ovh.net sshd[30287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.ip-51-91-250.eu user=centos 2020-02-26T17:40:26.307567vps773228.ovh.net sshd[30287]: Failed password for centos from 51.91.250.222 port 58310 ssh2 2020-02-26T17:41:02.665755vps773228.ovh.net sshd[30289]: pam_unix(sshd:auth): authentication failure; logname ... |
2020-02-27 00:43:36 |
| 165.227.67.64 | attack | Feb 26 21:13:22 gw1 sshd[30772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.67.64 Feb 26 21:13:24 gw1 sshd[30772]: Failed password for invalid user admin from 165.227.67.64 port 59754 ssh2 ... |
2020-02-27 01:16:00 |
| 176.113.115.186 | attack | scans 22 times in preceeding hours on the ports (in chronological order) 17856 8339 6060 10101 33089 33898 3500 18933 7777 33995 9960 10002 7689 8003 33903 63389 13579 4004 33894 6689 33333 8866 resulting in total of 65 scans from 176.113.115.0/24 block. |
2020-02-27 01:13:16 |
| 93.174.93.195 | attack | 93.174.93.195 was recorded 24 times by 13 hosts attempting to connect to the following ports: 49500,49548,49408. Incident counter (4h, 24h, all-time): 24, 156, 6636 |
2020-02-27 01:20:37 |
| 104.244.72.54 | attack | scans 2 times in preceeding hours on the ports (in chronological order) 52869 52869 |
2020-02-27 00:56:43 |
| 104.37.191.23 | attackbotsspam | 37215/tcp 52869/tcp... [2020-01-13/02-26]3092pkt,2pt.(tcp) |
2020-02-27 00:57:11 |
| 83.97.20.49 | attackspambots | Feb 26 18:23:19 debian-2gb-nbg1-2 kernel: \[4996994.758434\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=83.97.20.49 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=34288 DPT=8377 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-02-27 01:26:45 |
| 185.175.93.3 | attack | ET DROP Dshield Block Listed Source group 1 - port: 6564 proto: TCP cat: Misc Attack |
2020-02-27 01:11:17 |
| 185.175.93.34 | attackbots | Portscan or hack attempt detected by psad/fwsnort |
2020-02-27 01:10:18 |
| 94.102.56.215 | attackspam | 94.102.56.215 was recorded 22 times by 13 hosts attempting to connect to the following ports: 40515,40673,40663. Incident counter (4h, 24h, all-time): 22, 141, 5564 |
2020-02-27 01:19:07 |