City: Farmington
Region: Utah
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
        ; <<>> DiG 9.10.3-P4-Ubuntu <<>> 198.91.50.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63549
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;198.91.50.21.			IN	A
;; AUTHORITY SECTION:
.			592	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 08:05:16 CST 2022
;; MSG SIZE  rcvd: 105
        21.50.91.198.in-addr.arpa domain name pointer 198.91.50.21.sumofiber.net.
        Server:		183.60.83.19
Address:	183.60.83.19#53
Non-authoritative answer:
21.50.91.198.in-addr.arpa	name = 198.91.50.21.sumofiber.net.
Authoritative answers can be found from:
        | IP | Type | Details | Datetime | 
|---|---|---|---|
| 92.63.194.47 | attackbotsspam | Sep 16 00:02:35 webhost01 sshd[18402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.47 Sep 16 00:02:36 webhost01 sshd[18402]: Failed password for invalid user admin from 92.63.194.47 port 65506 ssh2 ...  | 
                    2019-09-16 01:43:08 | 
| 145.239.15.234 | attackbots | Sep 15 16:21:08 bouncer sshd\[10779\]: Invalid user guest from 145.239.15.234 port 59400 Sep 15 16:21:08 bouncer sshd\[10779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.15.234 Sep 15 16:21:10 bouncer sshd\[10779\]: Failed password for invalid user guest from 145.239.15.234 port 59400 ssh2 ...  | 
                    2019-09-16 02:03:27 | 
| 114.108.181.139 | attackbotsspam | Sep 15 04:43:31 auw2 sshd\[2298\]: Invalid user lee from 114.108.181.139 Sep 15 04:43:31 auw2 sshd\[2298\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.108.181.139 Sep 15 04:43:34 auw2 sshd\[2298\]: Failed password for invalid user lee from 114.108.181.139 port 33927 ssh2 Sep 15 04:49:28 auw2 sshd\[2852\]: Invalid user school from 114.108.181.139 Sep 15 04:49:28 auw2 sshd\[2852\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.108.181.139  | 
                    2019-09-16 01:11:55 | 
| 181.29.211.17 | attackspambots | Sep 15 00:28:50 h2022099 sshd[15137]: reveeclipse mapping checking getaddrinfo for 17-211-29-181.fibertel.com.ar [181.29.211.17] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 15 00:28:50 h2022099 sshd[15137]: Invalid user users from 181.29.211.17 Sep 15 00:28:50 h2022099 sshd[15137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.29.211.17 Sep 15 00:28:52 h2022099 sshd[15137]: Failed password for invalid user users from 181.29.211.17 port 32789 ssh2 Sep 15 00:28:52 h2022099 sshd[15137]: Received disconnect from 181.29.211.17: 11: Bye Bye [preauth] Sep 15 00:36:49 h2022099 sshd[16477]: reveeclipse mapping checking getaddrinfo for 17-211-29-181.fibertel.com.ar [181.29.211.17] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 15 00:36:49 h2022099 sshd[16477]: Invalid user wilsonchan from 181.29.211.17 Sep 15 00:36:49 h2022099 sshd[16477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.29.211.17 Sep........ -------------------------------  | 
                    2019-09-16 01:37:03 | 
| 79.51.112.152 | attackbots | Automatic report - Port Scan Attack  | 
                    2019-09-16 01:20:33 | 
| 187.74.122.134 | attack | Sep 15 00:27:34 rb06 sshd[26591]: reveeclipse mapping checking getaddrinfo for 187-74-122-134.dsl.telesp.net.br [187.74.122.134] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 15 00:27:36 rb06 sshd[26591]: Failed password for invalid user arun from 187.74.122.134 port 45786 ssh2 Sep 15 00:27:36 rb06 sshd[26591]: Received disconnect from 187.74.122.134: 11: Bye Bye [preauth] Sep 15 00:31:45 rb06 sshd[27209]: reveeclipse mapping checking getaddrinfo for 187-74-122-134.dsl.telesp.net.br [187.74.122.134] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 15 00:31:47 rb06 sshd[27209]: Failed password for invalid user ra from 187.74.122.134 port 54294 ssh2 Sep 15 00:31:47 rb06 sshd[27209]: Received disconnect from 187.74.122.134: 11: Bye Bye [preauth] Sep 15 00:35:49 rb06 sshd[27050]: reveeclipse mapping checking getaddrinfo for 187-74-122-134.dsl.telesp.net.br [187.74.122.134] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 15 00:35:52 rb06 sshd[27050]: Failed password for invalid user matt from 187......... -------------------------------  | 
                    2019-09-16 01:28:44 | 
| 128.199.54.252 | attackbots | Sep 15 16:21:55 nextcloud sshd\[22122\]: Invalid user ubuntu from 128.199.54.252 Sep 15 16:21:55 nextcloud sshd\[22122\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.54.252 Sep 15 16:21:58 nextcloud sshd\[22122\]: Failed password for invalid user ubuntu from 128.199.54.252 port 35244 ssh2 ...  | 
                    2019-09-16 01:40:53 | 
| 159.89.13.0 | attackspam | Sep 15 19:25:08 lnxded64 sshd[27777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.13.0  | 
                    2019-09-16 02:03:55 | 
| 194.44.160.246 | attackspam | website: visum4me.com/nl/algemene-voorwaarden Email: doug.stopford@freenet.de IP: 194.44.160.246 Source: anti spam bee  | 
                    2019-09-16 01:58:17 | 
| 159.65.202.125 | attack | Sep 15 15:20:34 bouncer sshd\[9688\]: Invalid user deluge from 159.65.202.125 port 47812 Sep 15 15:20:34 bouncer sshd\[9688\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.202.125 Sep 15 15:20:36 bouncer sshd\[9688\]: Failed password for invalid user deluge from 159.65.202.125 port 47812 ssh2 ...  | 
                    2019-09-16 01:16:07 | 
| 46.101.43.224 | attackspam | Sep 15 07:37:11 lcdev sshd\[1015\]: Invalid user postmaster from 46.101.43.224 Sep 15 07:37:11 lcdev sshd\[1015\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.43.224 Sep 15 07:37:13 lcdev sshd\[1015\]: Failed password for invalid user postmaster from 46.101.43.224 port 36421 ssh2 Sep 15 07:42:14 lcdev sshd\[1525\]: Invalid user wpyan from 46.101.43.224 Sep 15 07:42:14 lcdev sshd\[1525\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.43.224  | 
                    2019-09-16 01:42:27 | 
| 51.79.68.32 | attackbots | Automatic report - Banned IP Access  | 
                    2019-09-16 01:14:44 | 
| 162.247.74.206 | attack | Sep 15 06:20:05 sachi sshd\[6864\]: Invalid user abba from 162.247.74.206 Sep 15 06:20:05 sachi sshd\[6864\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=rosaluxemburg.tor-exit.calyxinstitute.org Sep 15 06:20:07 sachi sshd\[6864\]: Failed password for invalid user abba from 162.247.74.206 port 38388 ssh2 Sep 15 06:20:09 sachi sshd\[6864\]: Failed password for invalid user abba from 162.247.74.206 port 38388 ssh2 Sep 15 06:20:12 sachi sshd\[6864\]: Failed password for invalid user abba from 162.247.74.206 port 38388 ssh2  | 
                    2019-09-16 01:38:45 | 
| 164.68.123.224 | attack | 09/15/2019-12:15:25.589974 164.68.123.224 Protocol: 17 ET SCAN Sipvicious User-Agent Detected (friendly-scanner)  | 
                    2019-09-16 01:31:59 | 
| 198.50.175.247 | attackbotsspam | $f2bV_matches  | 
                    2019-09-16 01:45:34 |