City: Yuma
Region: Arizona
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 173.42.239.51
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49566
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;173.42.239.51. IN A
;; AUTHORITY SECTION:
. 540 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023052800 1800 900 604800 86400
;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 28 14:13:55 CST 2023
;; MSG SIZE rcvd: 10651.239.42.173.in-addr.arpa domain name pointer 173-042-239-051.inf.spectrum.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
51.239.42.173.in-addr.arpa name = 173-042-239-051.inf.spectrum.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 80.82.70.140 | attack | IP 80.82.70.140 located in Seychelles is using brute force attacks in an attempt to gain access to my router. Now under investigation with client's internet provider. |
2020-07-02 17:59:50 |
| 131.100.122.182 | attack | Jun 15 16:12:39 mail.srvfarm.net postfix/smtps/smtpd[314413]: warning: unknown[131.100.122.182]: SASL PLAIN authentication failed: Jun 15 16:12:39 mail.srvfarm.net postfix/smtps/smtpd[314413]: lost connection after AUTH from unknown[131.100.122.182] Jun 15 16:14:27 mail.srvfarm.net postfix/smtps/smtpd[298599]: lost connection after CONNECT from unknown[131.100.122.182] Jun 15 16:22:18 mail.srvfarm.net postfix/smtps/smtpd[320775]: warning: unknown[131.100.122.182]: SASL PLAIN authentication failed: Jun 15 16:22:18 mail.srvfarm.net postfix/smtps/smtpd[320775]: lost connection after AUTH from unknown[131.100.122.182] |
2020-07-02 09:30:38 |
| 218.92.0.249 | attackbotsspam | 2020-07-03T08:26:29.006382uwu-server sshd[51807]: Failed password for root from 218.92.0.249 port 48236 ssh2 2020-07-03T08:26:32.492153uwu-server sshd[51807]: Failed password for root from 218.92.0.249 port 48236 ssh2 2020-07-03T08:26:37.971372uwu-server sshd[51807]: Failed password for root from 218.92.0.249 port 48236 ssh2 2020-07-03T08:26:42.186715uwu-server sshd[51807]: Failed password for root from 218.92.0.249 port 48236 ssh2 2020-07-03T08:26:47.299240uwu-server sshd[51807]: Failed password for root from 218.92.0.249 port 48236 ssh2 ... |
2020-07-03 20:31:55 |
| 106.13.93.60 | attackbots | Jul 2 20:09:02 server1 sshd\[12287\]: Failed password for invalid user admin from 106.13.93.60 port 52160 ssh2 Jul 2 20:12:06 server1 sshd\[13377\]: Invalid user iot from 106.13.93.60 Jul 2 20:12:06 server1 sshd\[13377\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.93.60 Jul 2 20:12:08 server1 sshd\[13377\]: Failed password for invalid user iot from 106.13.93.60 port 41622 ssh2 Jul 2 20:15:08 server1 sshd\[14331\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.93.60 user=root ... |
2020-07-03 20:31:26 |
| 221.207.8.251 | attackbots | Jul 3 02:20:47 *** sshd[15676]: Invalid user maxima from 221.207.8.251 |
2020-07-03 20:07:58 |
| 174.253.160.207 | attack | Here's that wish they still had the 9 |
2020-07-03 09:32:05 |
| 206.189.188.218 | attackspam | Portscan or hack attempt detected by psad/fwsnort |
2020-07-03 20:38:12 |
| 41.57.125.178 | attackspam | port scan and connect, tcp 22 (ssh) |
2020-07-03 20:17:41 |
| 222.186.175.212 | attack | $f2bV_matches |
2020-07-03 20:34:52 |
| 185.220.101.212 | attackspam | 404 NOT FOUND |
2020-07-03 20:13:20 |
| 111.90.150.204 | spambotsattackproxynormal | Saya mau diamond Ml |
2020-07-02 15:39:12 |
| 45.59.119.127 | attack | Jul 3 04:15:41 OPSO sshd\[18933\]: Invalid user socta from 45.59.119.127 port 53680 Jul 3 04:15:41 OPSO sshd\[18933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.59.119.127 Jul 3 04:15:43 OPSO sshd\[18933\]: Failed password for invalid user socta from 45.59.119.127 port 53680 ssh2 Jul 3 04:18:44 OPSO sshd\[19373\]: Invalid user pol from 45.59.119.127 port 56850 Jul 3 04:18:44 OPSO sshd\[19373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.59.119.127 |
2020-07-03 20:24:35 |
| 201.148.87.82 | attack | $f2bV_matches |
2020-07-03 20:31:11 |
| 60.174.228.88 | attack | merlin ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) merlin ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) root ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) root ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) root ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) root ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) root ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) root ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) root ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) barbara ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) barbara ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) zhanghao ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) zhanghao ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) root ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) minecraf ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) minecraf ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) root ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) gxu ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) gxu ssh:notty 60.174.228.88 Wed Jul 1 16:24 - 16:24 (00:00) ssh攻击 |
2020-07-02 16:54:49 |
| 192.35.168.236 | attackspambots | Portscan or hack attempt detected by psad/fwsnort |
2020-07-03 20:33:05 |