City: San Antonio
Region: Texas
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.21.6.83
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22764
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.21.6.83. IN A
;; AUTHORITY SECTION:
. 433 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020060200 1800 900 604800 86400
;; Query time: 94 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 02 18:47:22 CST 2020
;; MSG SIZE rcvd: 114
83.6.21.45.in-addr.arpa domain name pointer 45-21-6-83.lightspeed.snantx.sbcglobal.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
83.6.21.45.in-addr.arpa name = 45-21-6-83.lightspeed.snantx.sbcglobal.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 3.89.227.161 | attackbots | port scan and connect, tcp 80 (http) |
2019-12-01 23:02:31 |
| 86.102.88.242 | attackbotsspam | SSH auth scanning - multiple failed logins |
2019-12-01 22:53:12 |
| 139.155.74.38 | attackspambots | Dec 1 10:00:15 ny01 sshd[29930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.38 Dec 1 10:00:18 ny01 sshd[29930]: Failed password for invalid user rpc from 139.155.74.38 port 42344 ssh2 Dec 1 10:05:05 ny01 sshd[30461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.74.38 |
2019-12-01 23:19:43 |
| 184.22.8.99 | attackbotsspam | Unauthorized connection attempt from IP address 184.22.8.99 on Port 445(SMB) |
2019-12-01 22:56:54 |
| 23.160.192.173 | attack | Honeypot hit. |
2019-12-01 23:11:39 |
| 203.166.17.122 | attackspambots | Unauthorized connection attempt from IP address 203.166.17.122 on Port 445(SMB) |
2019-12-01 23:26:24 |
| 201.149.20.162 | attack | Dec 1 15:58:25 legacy sshd[30019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.149.20.162 Dec 1 15:58:27 legacy sshd[30019]: Failed password for invalid user sarver from 201.149.20.162 port 46496 ssh2 Dec 1 16:01:45 legacy sshd[30204]: Failed password for root from 201.149.20.162 port 25288 ssh2 ... |
2019-12-01 23:16:37 |
| 78.85.39.152 | attack | Unauthorized connection attempt from IP address 78.85.39.152 on Port 445(SMB) |
2019-12-01 23:33:09 |
| 107.175.77.164 | attack | (From eric@talkwithcustomer.com) Hey, You have a website mikulachiropractic.net, right? Of course you do. I am looking at your website now. It gets traffic every day – that you’re probably spending $2 / $4 / $10 or more a click to get. Not including all of the work you put into creating social media, videos, blog posts, emails, and so on. So you’re investing seriously in getting people to that site. But how’s it working? Great? Okay? Not so much? If that answer could be better, then it’s likely you’re putting a lot of time, effort, and money into an approach that’s not paying off like it should. Now… imagine doubling your lead conversion in just minutes… In fact, I’ll go even better. You could actually get up to 100X more conversions! I’m not making this up. As Chris Smith, best-selling author of The Conversion Code says: Speed is essential - there is a 100x decrease in Leads when a Lead is contacted within 14 minutes vs being contacted within 5 minutes. He’s backed up by a |
2019-12-01 23:30:22 |
| 42.118.53.37 | attack | Unauthorized connection attempt from IP address 42.118.53.37 on Port 445(SMB) |
2019-12-01 23:37:55 |
| 103.7.43.46 | attack | 103.7.43.46 - - \[01/Dec/2019:16:29:39 +0100\] "POST /wp-login.php HTTP/1.0" 200 7411 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 103.7.43.46 - - \[01/Dec/2019:16:29:42 +0100\] "POST /wp-login.php HTTP/1.0" 200 7226 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 103.7.43.46 - - \[01/Dec/2019:16:29:45 +0100\] "POST /wp-login.php HTTP/1.0" 200 7223 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-12-01 23:36:15 |
| 218.253.240.189 | attack | [Sun Dec 01 11:45:35.736570 2019] [:error] [pid 127323] [client 218.253.240.189:48732] [client 218.253.240.189] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 18)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "127.0.0.1"] [uri "/cgi-bin/ViewLog.asp"] [unique_id "XePSD4vsLMOO7OL1RyZmLQAAAAI"] ... |
2019-12-01 23:18:24 |
| 190.248.67.123 | attack | fail2ban |
2019-12-01 23:29:35 |
| 201.24.82.11 | attackspam | Unauthorized connection attempt from IP address 201.24.82.11 on Port 445(SMB) |
2019-12-01 23:37:31 |
| 134.175.111.215 | attackspam | Dec 1 15:57:16 lnxded63 sshd[31018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.111.215 |
2019-12-01 23:32:56 |