City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 199.74.58.0
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63394
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;199.74.58.0. IN A
;; AUTHORITY SECTION:
. 541 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020020901 1800 900 604800 86400
;; Query time: 188 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 04:42:05 CST 2020
;; MSG SIZE rcvd: 115Host 0.58.74.199.in-addr.arpa not found: 2(SERVFAIL)
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
*** Can't find 0.58.74.199.in-addr.arpa.: No answer
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 46.147.28.2 | attackspambots | Chat Spam |
2019-11-06 21:08:49 |
| 46.161.27.130 | attackspam | Password spraying hacking attempt via VPN |
2019-11-06 21:24:06 |
| 185.153.196.28 | attack | Nov 6 12:47:46 mc1 kernel: \[4327165.732855\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.153.196.28 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=40613 PROTO=TCP SPT=52736 DPT=1122 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 12:52:39 mc1 kernel: \[4327458.419033\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.153.196.28 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=19064 PROTO=TCP SPT=52736 DPT=27 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 12:56:23 mc1 kernel: \[4327682.492612\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.153.196.28 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=48160 PROTO=TCP SPT=52736 DPT=1255 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-06 21:11:21 |
| 209.85.166.194 | attack | Received: from tgl-28-oktober-rangga-400k-fb (221.108.226.35.bc.googleusercontent.com. [35.226.108.221]) by smtp.gmail.com with ESMTPSA id k24sm1949411ioa.3.2019.11.05.17.02.05 host 35.226.108.221 (getting name) = 221.108.226.35.bc.googleusercontent.com. 221.108.226.35.bc.googleusercontent.com is 35.226.108.221 RE: "update statement on account" = BOGUS SPAM IP 209.85.166.194 Abusive JUNK SCAM |
2019-11-06 21:17:50 |
| 142.93.218.11 | attackspam | Nov 6 15:44:10 server sshd\[26299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.218.11 user=root Nov 6 15:44:12 server sshd\[26299\]: Failed password for root from 142.93.218.11 port 34510 ssh2 Nov 6 15:57:31 server sshd\[29678\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.218.11 user=root Nov 6 15:57:33 server sshd\[29678\]: Failed password for root from 142.93.218.11 port 33430 ssh2 Nov 6 16:02:16 server sshd\[30900\]: Invalid user jimmy from 142.93.218.11 Nov 6 16:02:16 server sshd\[30900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.218.11 ... |
2019-11-06 21:44:55 |
| 151.80.155.98 | attackspam | Nov 6 16:43:39 itv-usvr-02 sshd[9818]: Invalid user riakcs from 151.80.155.98 port 60586 Nov 6 16:43:39 itv-usvr-02 sshd[9818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.155.98 Nov 6 16:43:39 itv-usvr-02 sshd[9818]: Invalid user riakcs from 151.80.155.98 port 60586 Nov 6 16:43:41 itv-usvr-02 sshd[9818]: Failed password for invalid user riakcs from 151.80.155.98 port 60586 ssh2 Nov 6 16:47:27 itv-usvr-02 sshd[9824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.155.98 user=root Nov 6 16:47:29 itv-usvr-02 sshd[9824]: Failed password for root from 151.80.155.98 port 41620 ssh2 |
2019-11-06 21:36:29 |
| 38.141.45.26 | attack | SIPVicious Scanner Detection, PTR: PTR record not found |
2019-11-06 21:48:33 |
| 222.252.16.140 | attackbots | Nov 6 01:12:55 ny01 sshd[379]: Failed password for root from 222.252.16.140 port 54512 ssh2 Nov 6 01:17:25 ny01 sshd[834]: Failed password for root from 222.252.16.140 port 36560 ssh2 |
2019-11-06 21:10:56 |
| 119.27.170.64 | attackbots | Nov 6 11:03:49 server sshd\[4561\]: User root from 119.27.170.64 not allowed because listed in DenyUsers Nov 6 11:03:49 server sshd\[4561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.27.170.64 user=root Nov 6 11:03:52 server sshd\[4561\]: Failed password for invalid user root from 119.27.170.64 port 60914 ssh2 Nov 6 11:09:05 server sshd\[22485\]: User root from 119.27.170.64 not allowed because listed in DenyUsers Nov 6 11:09:05 server sshd\[22485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.27.170.64 user=root |
2019-11-06 21:14:41 |
| 119.42.175.200 | attackspambots | $f2bV_matches |
2019-11-06 21:11:48 |
| 217.61.59.73 | attackbots | SIPVicious Scanner Detection, PTR: host73-59-61-217.serverdedicati.aruba.it. |
2019-11-06 21:45:14 |
| 92.222.75.80 | attackbots | 5x Failed Password |
2019-11-06 21:19:38 |
| 178.62.214.85 | attackbots | Nov 6 03:16:16 ny01 sshd[14718]: Failed password for root from 178.62.214.85 port 54930 ssh2 Nov 6 03:20:14 ny01 sshd[15092]: Failed password for root from 178.62.214.85 port 46048 ssh2 |
2019-11-06 21:22:25 |
| 119.188.245.178 | attack | 2019-11-06T13:15:14.803170Z 550639 [Note] Access denied for user 'root'@'119.188.245.178' (using password: NO) 2019-11-06T13:15:16.316780Z 550640 [Note] Access denied for user 'root'@'119.188.245.178' (using password: YES) 2019-11-06T13:15:17.744456Z 550641 [Note] Access denied for user 'root'@'119.188.245.178' (using password: YES) 2019-11-06T13:15:26.879466Z 550642 [Note] Access denied for user 'root'@'119.188.245.178' (using password: NO) 2019-11-06T13:15:31.457666Z 550643 [Note] Access denied for user 'root'@'119.188.245.178' (using password: YES) |
2019-11-06 21:20:22 |
| 94.191.57.62 | attackbotsspam | 2019-11-06T12:35:23.935805 sshd[24377]: Invalid user user from 94.191.57.62 port 29339 2019-11-06T12:35:23.953770 sshd[24377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.57.62 2019-11-06T12:35:23.935805 sshd[24377]: Invalid user user from 94.191.57.62 port 29339 2019-11-06T12:35:26.053349 sshd[24377]: Failed password for invalid user user from 94.191.57.62 port 29339 ssh2 2019-11-06T12:40:53.473073 sshd[24420]: Invalid user redhat from 94.191.57.62 port 10232 ... |
2019-11-06 21:49:26 |