City: Boardman
Region: Oregon
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 44.250.71.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56993
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;44.250.71.4. IN A
;; AUTHORITY SECTION:
. 553 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020020401 1800 900 604800 86400
;; Query time: 120 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 04:14:38 CST 2020
;; MSG SIZE rcvd: 1154.71.250.44.in-addr.arpa domain name pointer ec2-44-250-71-4.us-west-2.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
4.71.250.44.in-addr.arpa name = ec2-44-250-71-4.us-west-2.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 192.35.169.30 | attackspam | Port scan: Attack repeated for 24 hours |
2020-08-01 14:43:04 |
| 37.49.224.156 | attackbotsspam | SSH Brute Force |
2020-08-01 15:15:08 |
| 184.71.9.2 | attackspam | ssh brute force |
2020-08-01 14:39:50 |
| 178.27.139.1 | attackspambots | SSH brute-force attempt |
2020-08-01 14:37:23 |
| 37.187.16.30 | attackspambots | DATE:2020-08-01 05:53:59,IP:37.187.16.30,MATCHES:10,PORT:ssh |
2020-08-01 15:14:20 |
| 181.143.10.148 | attackspam | Invalid user server from 181.143.10.148 port 52045 |
2020-08-01 14:41:03 |
| 140.143.195.181 | attackspam | (sshd) Failed SSH login from 140.143.195.181 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 1 08:57:03 srv sshd[25958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.195.181 user=root Aug 1 08:57:05 srv sshd[25958]: Failed password for root from 140.143.195.181 port 58944 ssh2 Aug 1 09:12:39 srv sshd[26177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.195.181 user=root Aug 1 09:12:42 srv sshd[26177]: Failed password for root from 140.143.195.181 port 58186 ssh2 Aug 1 09:17:24 srv sshd[26280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.195.181 user=root |
2020-08-01 14:43:32 |
| 203.115.12.29 | attackbots | Tried our host z. |
2020-08-01 14:37:01 |
| 173.61.25.141 | attack | SSH brute-force attempt |
2020-08-01 14:56:50 |
| 200.193.220.6 | attackbots | Aug 01 01:30:31 askasleikir sshd[13520]: Failed password for root from 200.193.220.6 port 42574 ssh2 Aug 01 01:41:59 askasleikir sshd[13549]: Failed password for root from 200.193.220.6 port 49896 ssh2 Aug 01 01:36:48 askasleikir sshd[13535]: Failed password for root from 200.193.220.6 port 37974 ssh2 |
2020-08-01 15:03:31 |
| 14.241.245.179 | attackbots | Aug 1 13:21:46 itv-usvr-01 sshd[5342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.241.245.179 user=root Aug 1 13:21:47 itv-usvr-01 sshd[5342]: Failed password for root from 14.241.245.179 port 41620 ssh2 |
2020-08-01 14:50:48 |
| 193.93.62.13 | attackspam | trying to access non-authorized port |
2020-08-01 15:04:27 |
| 124.105.173.17 | attackspambots | Aug 1 08:49:12 ns37 sshd[6235]: Failed password for root from 124.105.173.17 port 60342 ssh2 Aug 1 08:53:42 ns37 sshd[6452]: Failed password for root from 124.105.173.17 port 33253 ssh2 |
2020-08-01 14:59:25 |
| 128.199.115.160 | attack | 128.199.115.160 - - [01/Aug/2020:04:54:58 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1867 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 128.199.115.160 - - [01/Aug/2020:04:55:01 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1848 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 128.199.115.160 - - [01/Aug/2020:04:55:03 +0100] "POST /wp/xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-01 14:32:19 |
| 52.178.134.11 | attackbots | Jul 31 22:30:27 propaganda sshd[5275]: Connection from 52.178.134.11 port 64047 on 10.0.0.160 port 22 rdomain "" Jul 31 22:30:27 propaganda sshd[5275]: Connection closed by 52.178.134.11 port 64047 [preauth] |
2020-08-01 14:40:38 |