City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: USDA
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 199.158.42.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6034
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;199.158.42.45. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019080501 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Aug 06 01:42:53 CST 2019
;; MSG SIZE rcvd: 11745.42.158.199.in-addr.arpa domain name pointer 199.158.42.45.4k.usda.gov.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
45.42.158.199.in-addr.arpa name = 199.158.42.45.4k.usda.gov.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 178.176.170.163 | attackbots | Unauthorized connection attempt from IP address 178.176.170.163 on Port 445(SMB) |
2020-07-11 20:27:33 |
| 202.29.22.195 | attackspambots | [Sat Jul 11 09:00:41.368923 2020] [authz_core:error] [pid 12762] [client 202.29.22.195:36326] AH01630: client denied by server configuration: /usr/lib/cgi-bin/php [Sat Jul 11 09:00:41.753600 2020] [authz_core:error] [pid 12762] [client 202.29.22.195:36326] AH01630: client denied by server configuration: /usr/lib/cgi-bin/php5 [Sat Jul 11 09:00:42.137997 2020] [authz_core:error] [pid 12762] [client 202.29.22.195:36326] AH01630: client denied by server configuration: /usr/lib/cgi-bin/php-cgi ... |
2020-07-11 20:37:26 |
| 88.249.185.165 | attackbotsspam | Unauthorized connection attempt from IP address 88.249.185.165 on Port 445(SMB) |
2020-07-11 20:27:01 |
| 168.138.221.133 | attackspambots | 2020-07-11T14:01:52+0200 Failed SSH Authentication/Brute Force Attack. (Server 5) |
2020-07-11 20:28:40 |
| 186.38.26.5 | attackbotsspam | Jul 11 12:17:20 plex-server sshd[257115]: Invalid user zumlot from 186.38.26.5 port 56030 Jul 11 12:17:20 plex-server sshd[257115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.38.26.5 Jul 11 12:17:20 plex-server sshd[257115]: Invalid user zumlot from 186.38.26.5 port 56030 Jul 11 12:17:22 plex-server sshd[257115]: Failed password for invalid user zumlot from 186.38.26.5 port 56030 ssh2 Jul 11 12:21:32 plex-server sshd[257374]: Invalid user rig from 186.38.26.5 port 52846 ... |
2020-07-11 20:29:22 |
| 169.130.47.234 | attackbotsspam | Unauthorized connection attempt from IP address 169.130.47.234 on Port 445(SMB) |
2020-07-11 20:29:59 |
| 117.221.195.111 | attackspam | Unauthorized connection attempt from IP address 117.221.195.111 on Port 445(SMB) |
2020-07-11 20:23:47 |
| 137.74.233.91 | attackspambots | 2020-07-11T10:52:51.901736abusebot-2.cloudsearch.cf sshd[31305]: Invalid user christie from 137.74.233.91 port 49912 2020-07-11T10:52:51.907534abusebot-2.cloudsearch.cf sshd[31305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.233.91 2020-07-11T10:52:51.901736abusebot-2.cloudsearch.cf sshd[31305]: Invalid user christie from 137.74.233.91 port 49912 2020-07-11T10:52:54.030677abusebot-2.cloudsearch.cf sshd[31305]: Failed password for invalid user christie from 137.74.233.91 port 49912 ssh2 2020-07-11T10:55:48.898032abusebot-2.cloudsearch.cf sshd[31312]: Invalid user vandana from 137.74.233.91 port 50624 2020-07-11T10:55:48.906091abusebot-2.cloudsearch.cf sshd[31312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.233.91 2020-07-11T10:55:48.898032abusebot-2.cloudsearch.cf sshd[31312]: Invalid user vandana from 137.74.233.91 port 50624 2020-07-11T10:55:50.326909abusebot-2.cloudsearch.cf sshd[3 ... |
2020-07-11 19:59:09 |
| 104.248.40.177 | attackspambots | Automatic report - Banned IP Access |
2020-07-11 20:05:08 |
| 106.14.114.89 | attack | port scan and connect, tcp 80 (http) |
2020-07-11 20:08:15 |
| 46.38.150.188 | attackspambots | 2020-07-11 12:04:03 auth_plain authenticator failed for (User) [46.38.150.188]: 535 Incorrect authentication data (set_id=faiz@mail.csmailer.org) 2020-07-11 12:04:53 auth_plain authenticator failed for (User) [46.38.150.188]: 535 Incorrect authentication data (set_id=medicine@mail.csmailer.org) 2020-07-11 12:05:38 auth_plain authenticator failed for (User) [46.38.150.188]: 535 Incorrect authentication data (set_id=changeme2@mail.csmailer.org) 2020-07-11 12:06:24 auth_plain authenticator failed for (User) [46.38.150.188]: 535 Incorrect authentication data (set_id=remote2@mail.csmailer.org) 2020-07-11 12:07:10 auth_plain authenticator failed for (User) [46.38.150.188]: 535 Incorrect authentication data (set_id=metric@mail.csmailer.org) ... |
2020-07-11 20:06:46 |
| 222.186.175.154 | attackbots | 2020-07-11T08:14:36.690237uwu-server sshd[1008561]: Failed password for root from 222.186.175.154 port 2706 ssh2 2020-07-11T08:14:41.048605uwu-server sshd[1008561]: Failed password for root from 222.186.175.154 port 2706 ssh2 2020-07-11T08:14:45.549966uwu-server sshd[1008561]: Failed password for root from 222.186.175.154 port 2706 ssh2 2020-07-11T08:14:50.726439uwu-server sshd[1008561]: Failed password for root from 222.186.175.154 port 2706 ssh2 2020-07-11T08:14:55.895907uwu-server sshd[1008561]: Failed password for root from 222.186.175.154 port 2706 ssh2 ... |
2020-07-11 20:19:24 |
| 193.27.228.9 | attack | 20/7/11@08:01:56: FAIL: Alarm-Intrusion address from=193.27.228.9 ... |
2020-07-11 20:24:45 |
| 35.220.220.94 | attackbots | Jul 11 14:01:46 |
2020-07-11 20:31:40 |
| 209.105.243.145 | attackspambots | Jul 11 08:01:37 Tower sshd[19211]: Connection from 209.105.243.145 port 40327 on 192.168.10.220 port 22 rdomain "" Jul 11 08:01:37 Tower sshd[19211]: Invalid user eike from 209.105.243.145 port 40327 Jul 11 08:01:37 Tower sshd[19211]: error: Could not get shadow information for NOUSER Jul 11 08:01:37 Tower sshd[19211]: Failed password for invalid user eike from 209.105.243.145 port 40327 ssh2 Jul 11 08:01:38 Tower sshd[19211]: Received disconnect from 209.105.243.145 port 40327:11: Bye Bye [preauth] Jul 11 08:01:38 Tower sshd[19211]: Disconnected from invalid user eike 209.105.243.145 port 40327 [preauth] |
2020-07-11 20:37:10 |