City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 208.42.213.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64843
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;208.42.213.121. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 23:06:07 CST 2025
;; MSG SIZE rcvd: 107121.213.42.208.in-addr.arpa domain name pointer 208-42-213-121.clec.stat.centurytel.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
121.213.42.208.in-addr.arpa name = 208-42-213-121.clec.stat.centurytel.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 165.22.8.79 | attack | DigitalOcean BotNet attack - 10s of requests to non- pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks UA removed |
2020-04-18 01:17:44 |
| 91.226.72.48 | attackbotsspam | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-04-18 00:46:21 |
| 132.145.242.238 | attackbotsspam | Apr 16 20:09:16 r.ca sshd[3074]: Failed password for root from 132.145.242.238 port 55512 ssh2 |
2020-04-18 00:43:56 |
| 200.89.174.209 | attackbots | 5x Failed Password |
2020-04-18 00:53:32 |
| 195.9.33.186 | attackbotsspam | Attempted connection to port 23. |
2020-04-18 01:18:26 |
| 36.82.96.113 | attackbots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-04-18 00:44:46 |
| 196.52.43.108 | attack | TCP port 3389: Scan and connection |
2020-04-18 01:02:20 |
| 62.55.243.3 | attackbotsspam | frenzy |
2020-04-18 01:18:02 |
| 110.159.155.167 | attackbots | IMAP brute force ... |
2020-04-18 00:45:55 |
| 189.15.171.206 | attack | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-04-18 01:15:18 |
| 1.9.46.177 | attack | Apr 17 12:24:56 localhost sshd[127372]: Invalid user ll from 1.9.46.177 port 35714 Apr 17 12:24:56 localhost sshd[127372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.9.46.177 Apr 17 12:24:56 localhost sshd[127372]: Invalid user ll from 1.9.46.177 port 35714 Apr 17 12:24:58 localhost sshd[127372]: Failed password for invalid user ll from 1.9.46.177 port 35714 ssh2 Apr 17 12:30:19 localhost sshd[127901]: Invalid user zaq1@WSX from 1.9.46.177 port 59808 ... |
2020-04-18 01:00:25 |
| 122.14.47.18 | attackbotsspam | Bruteforce detected by fail2ban |
2020-04-18 00:44:20 |
| 218.92.0.138 | attackspam | Apr 17 17:49:16 combo sshd[1026]: Failed password for root from 218.92.0.138 port 10888 ssh2 Apr 17 17:49:20 combo sshd[1026]: Failed password for root from 218.92.0.138 port 10888 ssh2 Apr 17 17:49:23 combo sshd[1026]: Failed password for root from 218.92.0.138 port 10888 ssh2 ... |
2020-04-18 00:51:57 |
| 75.31.93.181 | attackbotsspam | Apr 17 16:54:15 h2779839 sshd[17522]: Invalid user oracle from 75.31.93.181 port 54206 Apr 17 16:54:15 h2779839 sshd[17522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.31.93.181 Apr 17 16:54:15 h2779839 sshd[17522]: Invalid user oracle from 75.31.93.181 port 54206 Apr 17 16:54:17 h2779839 sshd[17522]: Failed password for invalid user oracle from 75.31.93.181 port 54206 ssh2 Apr 17 16:59:06 h2779839 sshd[17722]: Invalid user jbb from 75.31.93.181 port 60838 Apr 17 16:59:06 h2779839 sshd[17722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.31.93.181 Apr 17 16:59:06 h2779839 sshd[17722]: Invalid user jbb from 75.31.93.181 port 60838 Apr 17 16:59:08 h2779839 sshd[17722]: Failed password for invalid user jbb from 75.31.93.181 port 60838 ssh2 Apr 17 17:04:03 h2779839 sshd[17915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.31.93.181 user=root Apr 17 17 ... |
2020-04-18 00:47:09 |
| 151.80.41.64 | attack | Apr 17 17:52:38 host sshd[50499]: Invalid user admin from 151.80.41.64 port 38303 ... |
2020-04-18 00:53:59 |