City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 199.73.2.75
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40480
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;199.73.2.75. IN A
;; AUTHORITY SECTION:
. 106 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 23:13:16 CST 2022
;; MSG SIZE rcvd: 10475.2.73.199.in-addr.arpa domain name pointer wstest.premera.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
75.2.73.199.in-addr.arpa name = wstest.premera.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.54.198.115 | attack | Feb 26 02:20:19 localhost sshd\[18120\]: Invalid user work from 106.54.198.115 port 59684 Feb 26 02:20:19 localhost sshd\[18120\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.198.115 Feb 26 02:20:21 localhost sshd\[18120\]: Failed password for invalid user work from 106.54.198.115 port 59684 ssh2 |
2020-02-26 09:36:04 |
| 222.186.15.158 | attackbotsspam | Feb 26 02:33:07 dcd-gentoo sshd[29675]: User root from 222.186.15.158 not allowed because none of user's groups are listed in AllowGroups Feb 26 02:33:09 dcd-gentoo sshd[29675]: error: PAM: Authentication failure for illegal user root from 222.186.15.158 Feb 26 02:33:07 dcd-gentoo sshd[29675]: User root from 222.186.15.158 not allowed because none of user's groups are listed in AllowGroups Feb 26 02:33:09 dcd-gentoo sshd[29675]: error: PAM: Authentication failure for illegal user root from 222.186.15.158 Feb 26 02:33:07 dcd-gentoo sshd[29675]: User root from 222.186.15.158 not allowed because none of user's groups are listed in AllowGroups Feb 26 02:33:09 dcd-gentoo sshd[29675]: error: PAM: Authentication failure for illegal user root from 222.186.15.158 Feb 26 02:33:09 dcd-gentoo sshd[29675]: Failed keyboard-interactive/pam for invalid user root from 222.186.15.158 port 17014 ssh2 ... |
2020-02-26 09:43:58 |
| 194.5.176.203 | attackspambots | Unauthorized connection attempt from IP address 194.5.176.203 on Port 3389(RDP) |
2020-02-26 10:04:38 |
| 14.229.186.2 | attackspambots | Unauthorized connection attempt from IP address 14.229.186.2 on Port 445(SMB) |
2020-02-26 09:56:03 |
| 106.13.111.28 | attackspambots | Feb 26 03:22:41 server sshd\[16734\]: Invalid user admin3 from 106.13.111.28 Feb 26 03:22:41 server sshd\[16734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.111.28 Feb 26 03:22:44 server sshd\[16734\]: Failed password for invalid user admin3 from 106.13.111.28 port 52640 ssh2 Feb 26 04:02:58 server sshd\[25393\]: Invalid user mtaserver from 106.13.111.28 Feb 26 04:02:58 server sshd\[25393\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.111.28 ... |
2020-02-26 09:37:26 |
| 46.119.190.88 | attackspam | Unauthorized connection attempt from IP address 46.119.190.88 on Port 445(SMB) |
2020-02-26 10:08:31 |
| 122.224.177.6 | attack | Feb 26 02:14:56 legacy sshd[13388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.224.177.6 Feb 26 02:14:59 legacy sshd[13388]: Failed password for invalid user 123456 from 122.224.177.6 port 54014 ssh2 Feb 26 02:16:40 legacy sshd[13400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.224.177.6 ... |
2020-02-26 09:29:40 |
| 138.197.32.150 | attack | Feb 26 02:49:19 minden010 sshd[15032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.32.150 Feb 26 02:49:22 minden010 sshd[15032]: Failed password for invalid user lhb from 138.197.32.150 port 56790 ssh2 Feb 26 02:57:58 minden010 sshd[18105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.32.150 ... |
2020-02-26 09:59:45 |
| 185.151.242.186 | attackbotsspam | Port scan: Attack repeated for 24 hours |
2020-02-26 09:36:30 |
| 109.127.58.206 | attackbots | Unauthorized connection attempt from IP address 109.127.58.206 on Port 445(SMB) |
2020-02-26 09:50:09 |
| 189.197.170.130 | attack | Unauthorized connection attempt from IP address 189.197.170.130 on Port 445(SMB) |
2020-02-26 09:51:55 |
| 222.186.30.248 | attack | v+ssh-bruteforce |
2020-02-26 10:07:12 |
| 62.37.160.215 | attackspam | Lines containing failures of 62.37.160.215 auth.log:Feb 26 01:36:13 omfg sshd[12742]: Connection from 62.37.160.215 port 29531 on 78.46.60.16 port 22 auth.log:Feb 26 01:36:14 omfg sshd[12742]: Did not receive identification string from 62.37.160.215 auth.log:Feb 26 01:39:50 omfg sshd[13357]: Connection from 62.37.160.215 port 29432 on 78.46.60.40 port 22 auth.log:Feb 26 01:39:50 omfg sshd[13357]: Did not receive identification string from 62.37.160.215 auth.log:Feb 26 01:39:58 omfg sshd[13428]: Connection from 62.37.160.215 port 30173 on 78.46.60.41 port 22 auth.log:Feb 26 01:39:59 omfg sshd[13428]: Did not receive identification string from 62.37.160.215 auth.log:Feb 26 01:40:07 omfg sshd[13771]: Connection from 62.37.160.215 port 30945 on 78.46.60.42 port 22 auth.log:Feb 26 01:40:07 omfg sshd[13771]: Did not receive identification string from 62.37.160.215 auth.log:Feb 26 01:41:17 omfg sshd[14499]: Connection from 62.37.160.215 port 30761 on 78.46.60.50 port 22 auth.lo........ ------------------------------ |
2020-02-26 09:38:51 |
| 46.161.27.150 | attack | firewall-block, port(s): 3389/tcp |
2020-02-26 09:43:38 |
| 91.187.102.112 | attackspam | Unauthorized connection attempt from IP address 91.187.102.112 on Port 445(SMB) |
2020-02-26 09:45:32 |