City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 206.37.35.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53446
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;206.37.35.145. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023011200 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 12 13:44:16 CST 2023
;; MSG SIZE rcvd: 106145.35.37.206.in-addr.arpa domain name pointer dha-35-145.health.mil.
b'145.35.37.206.in-addr.arpa name = dha-35-145.health.mil.
Authoritative answers can be found from:
'| IP | Type | Details | Datetime |
|---|---|---|---|
| 61.148.10.162 | attackbots | 1433/tcp 1433/tcp 1433/tcp... [2019-11-10/2020-01-08]31pkt,1pt.(tcp) |
2020-01-10 20:05:53 |
| 118.89.215.65 | attackspambots | WordPress wp-login brute force :: 118.89.215.65 0.192 - [10/Jan/2020:09:57:50 0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 1806 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1" |
2020-01-10 20:10:59 |
| 167.114.251.107 | attack | Jan 10 03:53:10 master sshd[2081]: Failed password for root from 167.114.251.107 port 52969 ssh2 |
2020-01-10 20:15:53 |
| 47.88.168.75 | attackspambots | 1,18-11/03 [bc01/m09] PostRequest-Spammer scoring: maputo01_x2b |
2020-01-10 20:15:08 |
| 218.255.6.106 | attackbotsspam | MultiHost/MultiPort Probe, Scan, Hack - |
2020-01-10 20:20:25 |
| 71.6.233.218 | attackspam | 2086/tcp 7443/tcp 8984/tcp [2019-11-16/2020-01-10]3pkt |
2020-01-10 19:52:29 |
| 138.99.216.171 | attackspambots | IP: 138.99.216.171
Ports affected
Simple Mail Transfer (25)
http protocol over TLS/SSL (443)
Message Submission (587)
World Wide Web HTTP (80)
IMAP over TLS protocol (993)
Abuse Confidence rating 100%
Found in DNSBL('s)
ASN Details
AS43350 NForce Entertainment B.V.
Belize (BZ)
CIDR 138.99.216.0/24
Log Date: 10/01/2020 8:08:27 AM UTC |
2020-01-10 20:00:35 |
| 61.129.70.158 | attackspam | 445/tcp 1433/tcp... [2019-11-12/2020-01-10]23pkt,2pt.(tcp) |
2020-01-10 20:03:19 |
| 114.7.2.17 | attack | Unauthorized connection attempt detected from IP address 114.7.2.17 to port 445 |
2020-01-10 20:00:57 |
| 185.173.35.29 | attack | Unauthorized connection attempt detected from IP address 185.173.35.29 to port 4786 |
2020-01-10 20:05:28 |
| 123.18.161.82 | attackbots | 445/tcp 445/tcp [2020-01-08/09]2pkt |
2020-01-10 20:18:50 |
| 49.49.17.170 | attackbots | Scanning random ports - tries to find possible vulnerable services |
2020-01-10 20:20:53 |
| 223.207.217.164 | attackbotsspam | 139/tcp 445/tcp [2020-01-08]2pkt |
2020-01-10 20:17:32 |
| 169.197.108.197 | attackbots | 3389/tcp 21/tcp 6443/tcp... [2019-11-09/2020-01-10]7pkt,6pt.(tcp) |
2020-01-10 19:58:00 |
| 218.92.0.164 | attackspam | Jan 10 11:47:57 zeus sshd[12378]: Failed password for root from 218.92.0.164 port 37397 ssh2 Jan 10 11:48:02 zeus sshd[12378]: Failed password for root from 218.92.0.164 port 37397 ssh2 Jan 10 11:48:06 zeus sshd[12378]: Failed password for root from 218.92.0.164 port 37397 ssh2 Jan 10 11:48:10 zeus sshd[12378]: Failed password for root from 218.92.0.164 port 37397 ssh2 Jan 10 11:48:14 zeus sshd[12378]: Failed password for root from 218.92.0.164 port 37397 ssh2 |
2020-01-10 20:02:51 |