City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 204.75.250.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60070
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;204.75.250.52. IN A
;; AUTHORITY SECTION:
. 380 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 00:52:41 CST 2022
;; MSG SIZE rcvd: 10652.250.75.204.in-addr.arpa domain name pointer www.sccollege.edu.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
52.250.75.204.in-addr.arpa name = www.sccollege.edu.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 119.187.119.146 | attackbotsspam | Unauthorized connection attempt detected from IP address 119.187.119.146 to port 2220 [J] |
2020-01-26 14:39:58 |
| 114.36.56.134 | attackspam | 1580014364 - 01/26/2020 05:52:44 Host: 114.36.56.134/114.36.56.134 Port: 445 TCP Blocked |
2020-01-26 14:32:41 |
| 187.109.165.141 | attack | Brute forcing email accounts |
2020-01-26 14:26:03 |
| 170.238.36.66 | attackbots | [Sun Jan 26 01:52:37.919570 2020] [:error] [pid 182242] [client 170.238.36.66:61000] [client 170.238.36.66] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ws24vmsma01.ufn.edu.br"] [uri "/"] [unique_id "Xi0bFR6ddwLUIbcp5HQEsAAAAAc"] ... |
2020-01-26 14:36:44 |
| 122.14.228.229 | attackbots | Invalid user andrew from 122.14.228.229 port 32930 |
2020-01-26 14:52:23 |
| 45.238.121.207 | attack | Brute forcing email accounts |
2020-01-26 14:26:32 |
| 23.94.136.50 | attackbotsspam | Jan 25 20:04:00 hanapaa sshd\[5510\]: Invalid user test1 from 23.94.136.50 Jan 25 20:04:00 hanapaa sshd\[5510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.136.50 Jan 25 20:04:02 hanapaa sshd\[5510\]: Failed password for invalid user test1 from 23.94.136.50 port 41563 ssh2 Jan 25 20:08:43 hanapaa sshd\[5863\]: Invalid user jaime from 23.94.136.50 Jan 25 20:08:43 hanapaa sshd\[5863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.136.50 |
2020-01-26 14:23:16 |
| 188.166.115.226 | attackbotsspam | Invalid user lazaro from 188.166.115.226 port 37150 |
2020-01-26 14:43:29 |
| 112.198.240.32 | attackbots | 1580014357 - 01/26/2020 05:52:37 Host: 112.198.240.32/112.198.240.32 Port: 445 TCP Blocked |
2020-01-26 14:37:07 |
| 42.247.22.66 | attack | Jan 26 06:54:51 localhost sshd\[31670\]: Invalid user ltsp from 42.247.22.66 port 59329 Jan 26 06:54:51 localhost sshd\[31670\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.247.22.66 Jan 26 06:54:53 localhost sshd\[31670\]: Failed password for invalid user ltsp from 42.247.22.66 port 59329 ssh2 |
2020-01-26 14:40:54 |
| 222.186.175.147 | attack | Jan 26 07:15:03 eventyay sshd[12193]: Failed password for root from 222.186.175.147 port 56524 ssh2 Jan 26 07:15:16 eventyay sshd[12193]: error: maximum authentication attempts exceeded for root from 222.186.175.147 port 56524 ssh2 [preauth] Jan 26 07:15:22 eventyay sshd[12195]: Failed password for root from 222.186.175.147 port 59840 ssh2 ... |
2020-01-26 14:38:18 |
| 77.81.229.207 | attackbotsspam | Unauthorized connection attempt detected from IP address 77.81.229.207 to port 2220 [J] |
2020-01-26 14:14:03 |
| 106.13.236.206 | attack | Unauthorized connection attempt detected from IP address 106.13.236.206 to port 2220 [J] |
2020-01-26 14:40:29 |
| 106.75.95.133 | attack | Unauthorized connection attempt detected from IP address 106.75.95.133 to port 2220 [J] |
2020-01-26 14:10:49 |
| 191.54.236.150 | attackbots | Brute forcing email accounts |
2020-01-26 14:21:44 |