City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.84.93.40
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19179
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;52.84.93.40. IN A
;; AUTHORITY SECTION:
. 396 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022092301 1800 900 604800 86400
;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 24 10:53:24 CST 2022
;; MSG SIZE rcvd: 104
40.93.84.52.in-addr.arpa domain name pointer server-52-84-93-40.lhr62.r.cloudfront.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
40.93.84.52.in-addr.arpa name = server-52-84-93-40.lhr62.r.cloudfront.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 47.56.106.198 | attackbots | GET /xmlrpc.php HTTP/1.1 |
2020-08-07 05:32:45 |
| 2.36.136.146 | attackspam | Aug 6 19:46:01 nextcloud sshd\[821\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.36.136.146 user=root Aug 6 19:46:03 nextcloud sshd\[821\]: Failed password for root from 2.36.136.146 port 37246 ssh2 Aug 6 19:49:55 nextcloud sshd\[5532\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.36.136.146 user=root |
2020-08-07 05:30:19 |
| 106.12.199.30 | attack | Too many connections or unauthorized access detected from Arctic banned ip |
2020-08-07 05:38:24 |
| 42.200.155.72 | attackspam | k+ssh-bruteforce |
2020-08-07 05:29:31 |
| 51.68.34.141 | attackspam | Automatic report - Banned IP Access |
2020-08-07 05:56:33 |
| 177.196.35.76 | attack | Automatic report - Port Scan Attack |
2020-08-07 05:46:01 |
| 208.109.14.122 | attack | 2020-08-06T21:46:35.934379shield sshd\[5766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-208-109-14-122.ip.secureserver.net user=root 2020-08-06T21:46:37.435566shield sshd\[5766\]: Failed password for root from 208.109.14.122 port 45496 ssh2 2020-08-06T21:51:09.320059shield sshd\[6094\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-208-109-14-122.ip.secureserver.net user=root 2020-08-06T21:51:11.432125shield sshd\[6094\]: Failed password for root from 208.109.14.122 port 56928 ssh2 2020-08-06T21:55:41.317779shield sshd\[6457\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-208-109-14-122.ip.secureserver.net user=root |
2020-08-07 06:00:04 |
| 58.233.240.94 | attackbotsspam | (sshd) Failed SSH login from 58.233.240.94 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 6 23:08:27 amsweb01 sshd[11975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.233.240.94 user=root Aug 6 23:08:30 amsweb01 sshd[11975]: Failed password for root from 58.233.240.94 port 49344 ssh2 Aug 6 23:14:25 amsweb01 sshd[12956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.233.240.94 user=root Aug 6 23:14:27 amsweb01 sshd[12956]: Failed password for root from 58.233.240.94 port 49848 ssh2 Aug 6 23:18:35 amsweb01 sshd[13569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.233.240.94 user=root |
2020-08-07 05:41:08 |
| 172.241.142.14 | attackspam | (From amanda.mulroy@onlinechatservices.com) Hi there, I am reaching out to see if you'd be interested in trying our live chat software on your website. We've helped many companies add it to better service their customers online. It is 100% free for six months with no commitment at all, and we can help install it for you too. You will be able to live chat with your customers on highlandfamilycare.com, display important messages via various popups, and send automated emails for an improved customer experience. Would you like to learn more? I can answer any questions you have and look forward to connecting! Amanda Mulroy Online Chat Services, Tyipe LLC (pronounced "type") 500 Westover Dr #15391 Sanford, NC 27330 Not interested? Feel free to opt out here http://eroutemgr.com/remove?q=highlandfamilycare.com&i=13 |
2020-08-07 05:46:17 |
| 186.4.233.17 | attackbotsspam | Too many connections or unauthorized access detected from Arctic banned ip |
2020-08-07 06:02:18 |
| 49.236.203.163 | attack | k+ssh-bruteforce |
2020-08-07 05:33:28 |
| 208.109.12.104 | attack | 2020-08-06T23:51:17.159583amanda2.illicoweb.com sshd\[17420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-208-109-12-104.ip.secureserver.net user=root 2020-08-06T23:51:19.364108amanda2.illicoweb.com sshd\[17420\]: Failed password for root from 208.109.12.104 port 60172 ssh2 2020-08-06T23:53:27.120495amanda2.illicoweb.com sshd\[17857\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-208-109-12-104.ip.secureserver.net user=root 2020-08-06T23:53:28.838169amanda2.illicoweb.com sshd\[17857\]: Failed password for root from 208.109.12.104 port 46510 ssh2 2020-08-06T23:55:31.145793amanda2.illicoweb.com sshd\[18143\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-208-109-12-104.ip.secureserver.net user=root ... |
2020-08-07 06:07:01 |
| 185.147.215.14 | attackbots | VoIP Brute Force - 185.147.215.14 - Auto Report ... |
2020-08-07 06:07:22 |
| 139.59.3.170 | attackbots | Aug 7 03:02:04 itv-usvr-02 sshd[20867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.3.170 user=root Aug 7 03:06:16 itv-usvr-02 sshd[21032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.3.170 user=root Aug 7 03:10:28 itv-usvr-02 sshd[21340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.3.170 user=root |
2020-08-07 05:35:40 |
| 61.216.36.106 | attackbotsspam | port scan and connect, tcp 23 (telnet) |
2020-08-07 05:32:19 |