City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 170.48.10.90
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12897
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;170.48.10.90. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 15:06:52 CST 2022
;; MSG SIZE rcvd: 10590.10.48.170.in-addr.arpa domain name pointer winstonqed.com.
90.10.48.170.in-addr.arpa domain name pointer secure.cigna.com.
90.10.48.170.in-addr.arpa domain name pointer precigna.com.
90.10.48.170.in-addr.arpa domain name pointer secure-cigna-com.extwideip.cigna.com.
90.10.48.170.in-addr.arpa domain name pointer www-precigna-com.extwideip.cigna.com.
90.10.48.170.in-addr.arpa domain name pointer www-cigna-com.extwideip.cigna.com.
90.10.48.170.in-addr.arpa domain name pointer www.winstonqed.com.
90.10.48.170.in-addr.arpa domain name pointer cigna.co.za.
90.10.48.170.in-addr.arpa domain name pointer www-winstonqed-com.extwideip.cigna.com.
90.10.48.170.in-addr.arpa domain name pointer search-cignaglobal-com.extwideip.cigna.com.
90.10.48.170.in-addr.arpa domain name pointer cigna.com.
90.10.48.170.in-addr.arpa domain name pointer www.cigna.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
90.10.48.170.in-addr.arpa name = www.cigna.com.
90.10.48.170.in-addr.arpa name = winstonqed.com.
90.10.48.170.in-addr.arpa name = secure.cigna.com.
90.10.48.170.in-addr.arpa name = precigna.com.
90.10.48.170.in-addr.arpa name = secure-cigna-com.extwideip.cigna.com.
90.10.48.170.in-addr.arpa name = www-precigna-com.extwideip.cigna.com.
90.10.48.170.in-addr.arpa name = www-cigna-com.extwideip.cigna.com.
90.10.48.170.in-addr.arpa name = www.winstonqed.com.
90.10.48.170.in-addr.arpa name = cigna.co.za.
90.10.48.170.in-addr.arpa name = www-winstonqed-com.extwideip.cigna.com.
90.10.48.170.in-addr.arpa name = search-cignaglobal-com.extwideip.cigna.com.
90.10.48.170.in-addr.arpa name = cigna.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 37.28.154.68 | attackbotsspam | SSHAttack |
2019-06-29 22:45:32 |
| 81.213.153.204 | attack | firewall-block, port(s): 23/tcp |
2019-06-29 22:20:56 |
| 110.136.149.220 | attack | Unauthorized connection attempt from IP address 110.136.149.220 on Port 445(SMB) |
2019-06-29 22:41:12 |
| 31.185.104.21 | attackspambots | SSHAttack |
2019-06-29 22:46:12 |
| 185.119.81.50 | attack | Automatic report - Web App Attack |
2019-06-29 22:25:39 |
| 14.143.245.11 | attack | Unauthorized connection attempt from IP address 14.143.245.11 on Port 445(SMB) |
2019-06-29 22:46:39 |
| 115.79.213.117 | attackspambots | Unauthorized connection attempt from IP address 115.79.213.117 on Port 445(SMB) |
2019-06-29 22:51:43 |
| 180.121.148.68 | attackbotsspam | 2019-06-29T10:12:55.349768 X postfix/smtpd[19873]: warning: unknown[180.121.148.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-06-29T10:25:00.427934 X postfix/smtpd[21281]: warning: unknown[180.121.148.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-06-29T10:31:12.278263 X postfix/smtpd[22806]: warning: unknown[180.121.148.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-06-29 23:09:52 |
| 113.160.227.121 | attackbots | Unauthorized connection attempt from IP address 113.160.227.121 on Port 445(SMB) |
2019-06-29 22:24:00 |
| 68.48.240.245 | attackbotsspam | Jun 25 00:55:11 spelly sshd[3193]: Invalid user teamspeak3 from 68.48.240.245 Jun 25 00:55:11 spelly sshd[3193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-68-48-240-245.hsd1.mi.comcast.net Jun 25 00:55:13 spelly sshd[3193]: Failed password for invalid user teamspeak3 from 68.48.240.245 port 46382 ssh2 Jun 25 00:55:13 spelly sshd[3193]: Received disconnect from 68.48.240.245: 11: Bye Bye [preauth] Jun 25 00:57:39 spelly sshd[3195]: Invalid user nu from 68.48.240.245 Jun 25 00:57:39 spelly sshd[3195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-68-48-240-245.hsd1.mi.comcast.net Jun 25 00:57:42 spelly sshd[3195]: Failed password for invalid user nu from 68.48.240.245 port 46886 ssh2 Jun 25 00:57:42 spelly sshd[3195]: Received disconnect from 68.48.240.245: 11: Bye Bye [preauth] Jun 25 00:59:17 spelly sshd[3199]: Invalid user zabbix from 68.48.240.245 Jun 25 00:59:17 spelly sshd[........ ------------------------------- |
2019-06-29 22:21:31 |
| 216.244.66.196 | attackbots | 20 attempts against mh-misbehave-ban on comet.magehost.pro |
2019-06-29 22:14:32 |
| 36.73.196.42 | attackbotsspam | Unauthorized connection attempt from IP address 36.73.196.42 on Port 445(SMB) |
2019-06-29 22:17:53 |
| 113.190.242.144 | attackbotsspam | " " |
2019-06-29 22:15:30 |
| 89.248.162.168 | attack | 29.06.2019 14:08:04 Connection to port 1499 blocked by firewall |
2019-06-29 22:20:29 |
| 78.161.45.153 | attackspambots | Unauthorized connection attempt from IP address 78.161.45.153 on Port 445(SMB) |
2019-06-29 22:37:10 |