City: Boardman
Region: Oregon
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.93.20.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14666
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;52.93.20.92. IN A
;; AUTHORITY SECTION:
. 518 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023053102 1800 900 604800 86400
;; Query time: 48 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 01 07:33:04 CST 2023
;; MSG SIZE rcvd: 104Host 92.20.93.52.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 92.20.93.52.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 186.236.237.27 | attackspam | Automatic report - Banned IP Access |
2020-09-30 20:22:07 |
| 188.166.177.99 | attackspam | Sep 30 13:32:32 lnxweb61 sshd[31464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.177.99 |
2020-09-30 19:38:44 |
| 150.158.181.16 | attackbots | Bruteforce detected by fail2ban |
2020-09-30 20:10:57 |
| 185.120.28.19 | attackspam | (sshd) Failed SSH login from 185.120.28.19 (-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 30 04:04:22 server1 sshd[497965]: Invalid user marketing from 185.120.28.19 Sep 30 04:04:22 server1 sshd[497965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.120.28.19 Sep 30 04:04:24 server1 sshd[497965]: Failed password for invalid user marketing from 185.120.28.19 port 60422 ssh2 Sep 30 04:13:43 server1 sshd[506797]: Invalid user oracle from 185.120.28.19 Sep 30 04:13:43 server1 sshd[506797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.120.28.19 |
2020-09-30 20:22:59 |
| 51.79.142.79 | attack | [N1.H1.VM1] Port Scanner Detected Blocked by UFW |
2020-09-30 19:34:02 |
| 64.227.45.215 | attack | (sshd) Failed SSH login from 64.227.45.215 (-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 30 05:51:44 server2 sshd[23272]: Invalid user ben from 64.227.45.215 port 43704 Sep 30 05:51:46 server2 sshd[23272]: Failed password for invalid user ben from 64.227.45.215 port 43704 ssh2 Sep 30 05:57:42 server2 sshd[26440]: Invalid user temp from 64.227.45.215 port 43928 Sep 30 05:57:44 server2 sshd[26440]: Failed password for invalid user temp from 64.227.45.215 port 43928 ssh2 Sep 30 06:01:51 server2 sshd[29323]: Invalid user master from 64.227.45.215 port 52646 |
2020-09-30 20:32:51 |
| 49.232.114.29 | attack | Invalid user jason from 49.232.114.29 port 48592 |
2020-09-30 20:23:59 |
| 59.14.204.39 | attackspambots | Automatic report - Port Scan Attack |
2020-09-30 20:16:36 |
| 167.248.133.17 | attackbots |
|
2020-09-30 20:14:22 |
| 36.155.113.40 | attackbots | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-30T10:36:25Z and 2020-09-30T10:49:34Z |
2020-09-30 20:19:24 |
| 31.128.128.108 | attack | Automatic report - Port Scan Attack |
2020-09-30 20:34:44 |
| 64.235.34.17 | attackspam | Time: Wed Sep 30 14:10:44 2020 +0200 IP: 64.235.34.17 (US/United States/ashburn-va-datacenter.serverpoint.com) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 30 13:58:12 mail-03 sshd[9772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.235.34.17 user=root Sep 30 13:58:14 mail-03 sshd[9772]: Failed password for root from 64.235.34.17 port 42195 ssh2 Sep 30 14:05:20 mail-03 sshd[9956]: Invalid user lh from 64.235.34.17 port 54391 Sep 30 14:05:22 mail-03 sshd[9956]: Failed password for invalid user lh from 64.235.34.17 port 54391 ssh2 Sep 30 14:10:37 mail-03 sshd[10080]: Invalid user amano from 64.235.34.17 port 55373 |
2020-09-30 20:21:02 |
| 103.145.13.180 | attackspambots | Brute force attempt on PBX |
2020-09-30 20:20:07 |
| 80.229.157.225 | attackspam | Invalid user ethos from 80.229.157.225 port 35378 |
2020-09-30 20:16:14 |
| 125.166.183.190 | attackspam | Unauthorized connection attempt from IP address 125.166.183.190 on Port 445(SMB) |
2020-09-30 19:37:34 |