City: Overland Park
Region: Kansas
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 199.254.93.63
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8872
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;199.254.93.63. IN A
;; AUTHORITY SECTION:
. 152 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020202 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 03 09:31:22 CST 2022
;; MSG SIZE rcvd: 106Host 63.93.254.199.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 63.93.254.199.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 114.35.118.48 | attack | Unauthorized connection attempt from IP address 114.35.118.48 on Port 445(SMB) |
2019-11-29 08:33:40 |
| 64.190.91.203 | attackspambots | ssh intrusion attempt |
2019-11-29 07:58:56 |
| 179.124.34.8 | attack | 2019-11-29T00:48:00.637103vps751288.ovh.net sshd\[4062\]: Invalid user escalante from 179.124.34.8 port 41938 2019-11-29T00:48:00.650137vps751288.ovh.net sshd\[4062\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.124.34.8 2019-11-29T00:48:03.013155vps751288.ovh.net sshd\[4062\]: Failed password for invalid user escalante from 179.124.34.8 port 41938 ssh2 2019-11-29T00:51:47.147992vps751288.ovh.net sshd\[4066\]: Invalid user wwwadmin from 179.124.34.8 port 59968 2019-11-29T00:51:47.157701vps751288.ovh.net sshd\[4066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.124.34.8 |
2019-11-29 08:01:47 |
| 211.25.231.52 | attackbotsspam | Unauthorised access (Nov 29) SRC=211.25.231.52 LEN=52 TTL=110 ID=16416 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Nov 27) SRC=211.25.231.52 LEN=48 TTL=110 ID=624 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-29 08:30:02 |
| 170.253.40.223 | attack | $f2bV_matches |
2019-11-29 08:02:31 |
| 2.187.216.103 | attack | Unauthorized connection attempt from IP address 2.187.216.103 on Port 445(SMB) |
2019-11-29 08:29:33 |
| 185.137.234.25 | attackbotsspam | Unauthorised access (Nov 29) SRC=185.137.234.25 LEN=40 TTL=248 ID=35971 TCP DPT=3389 WINDOW=1024 SYN |
2019-11-29 08:33:28 |
| 189.170.138.210 | attackbots | Unauthorized connection attempt from IP address 189.170.138.210 on Port 445(SMB) |
2019-11-29 07:57:21 |
| 174.54.68.231 | attackbotsspam | Probably scraping – several accesses like this spread during the day, time stamps look like it's a bot: "GET / HTTP/1.1" "GET /legal HTTP/1.1" "GET /privacy HTTP/1.1" |
2019-11-29 08:00:16 |
| 58.39.208.80 | attack | Unauthorized connection attempt from IP address 58.39.208.80 on Port 445(SMB) |
2019-11-29 08:09:44 |
| 37.145.62.216 | attackbots | Unauthorised access (Nov 29) SRC=37.145.62.216 LEN=52 TTL=109 ID=1732 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-29 08:28:50 |
| 45.133.18.243 | attackspam | TCP Port Scanning |
2019-11-29 08:07:45 |
| 198.108.67.59 | attack | 1574981482 - 11/28/2019 23:51:22 Host: 198.108.67.59/198.108.67.59 Port: 2000 TCP Blocked |
2019-11-29 08:19:49 |
| 140.213.57.6 | attackbotsspam | Unauthorized connection attempt from IP address 140.213.57.6 on Port 445(SMB) |
2019-11-29 08:26:42 |
| 223.131.153.196 | attack | Nov 29 00:32:03 andromeda sshd\[29268\]: Invalid user araceli from 223.131.153.196 port 54468 Nov 29 00:32:03 andromeda sshd\[29268\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.131.153.196 Nov 29 00:32:05 andromeda sshd\[29268\]: Failed password for invalid user araceli from 223.131.153.196 port 54468 ssh2 |
2019-11-29 08:04:44 |