City: Boardman
Region: Oregon
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: Amazon.com, Inc.
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.214.48.160
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16467
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;54.214.48.160. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019040400 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Thu Apr 04 19:19:42 +08 2019
;; MSG SIZE rcvd: 117
160.48.214.54.in-addr.arpa domain name pointer www.modsolar.net.
Server: 67.207.67.3
Address: 67.207.67.3#53
Non-authoritative answer:
160.48.214.54.in-addr.arpa name = www.modsolar.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 192.241.223.186 | attack | Port Scan ... |
2020-10-07 06:56:33 |
| 112.196.54.35 | attackbots | $f2bV_matches |
2020-10-07 06:47:19 |
| 222.186.42.213 | attack | Oct 6 20:13:15 shivevps sshd[1379]: Failed password for root from 222.186.42.213 port 12356 ssh2 Oct 6 20:13:22 shivevps sshd[1381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.213 user=root Oct 6 20:13:24 shivevps sshd[1381]: Failed password for root from 222.186.42.213 port 55737 ssh2 ... |
2020-10-07 07:18:20 |
| 118.121.57.64 | attack | Lines containing failures of 118.121.57.64 Oct 5 22:06:45 shared02 sshd[20842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.121.57.64 user=r.r Oct 5 22:06:47 shared02 sshd[20842]: Failed password for r.r from 118.121.57.64 port 38066 ssh2 Oct 5 22:06:47 shared02 sshd[20842]: Received disconnect from 118.121.57.64 port 38066:11: Bye Bye [preauth] Oct 5 22:06:47 shared02 sshd[20842]: Disconnected from authenticating user r.r 118.121.57.64 port 38066 [preauth] Oct 5 22:19:09 shared02 sshd[25229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.121.57.64 user=r.r Oct 5 22:19:11 shared02 sshd[25229]: Failed password for r.r from 118.121.57.64 port 53520 ssh2 Oct 5 22:19:11 shared02 sshd[25229]: Received disconnect from 118.121.57.64 port 53520:11: Bye Bye [preauth] Oct 5 22:19:11 shared02 sshd[25229]: Disconnected from authenticating user r.r 118.121.57.64 port 53520 [preauth........ ------------------------------ |
2020-10-07 06:50:32 |
| 38.21.240.216 | attack | Repeated brute force against a port |
2020-10-07 07:07:40 |
| 27.157.90.107 | attack | Oct 5 23:08:22 srv01 postfix/smtpd\[12943\]: warning: unknown\[27.157.90.107\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 5 23:22:06 srv01 postfix/smtpd\[31850\]: warning: unknown\[27.157.90.107\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 5 23:22:18 srv01 postfix/smtpd\[31850\]: warning: unknown\[27.157.90.107\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 5 23:22:34 srv01 postfix/smtpd\[31850\]: warning: unknown\[27.157.90.107\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 5 23:22:52 srv01 postfix/smtpd\[31850\]: warning: unknown\[27.157.90.107\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-10-07 06:53:12 |
| 192.162.178.41 | attack | Email server abuse |
2020-10-07 06:46:01 |
| 161.35.61.129 | attackspambots | [N3.H3.VM3] Port Scanner Detected Blocked by UFW |
2020-10-07 06:57:57 |
| 46.105.149.168 | attackspambots | Oct 7 00:03:30 vpn01 sshd[4781]: Failed password for root from 46.105.149.168 port 60568 ssh2 ... |
2020-10-07 06:49:18 |
| 222.186.30.57 | attackspam | 2020-10-06T23:01:08.396952abusebot-2.cloudsearch.cf sshd[25498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.57 user=root 2020-10-06T23:01:10.747605abusebot-2.cloudsearch.cf sshd[25498]: Failed password for root from 222.186.30.57 port 34666 ssh2 2020-10-06T23:01:12.783703abusebot-2.cloudsearch.cf sshd[25498]: Failed password for root from 222.186.30.57 port 34666 ssh2 2020-10-06T23:01:08.396952abusebot-2.cloudsearch.cf sshd[25498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.57 user=root 2020-10-06T23:01:10.747605abusebot-2.cloudsearch.cf sshd[25498]: Failed password for root from 222.186.30.57 port 34666 ssh2 2020-10-06T23:01:12.783703abusebot-2.cloudsearch.cf sshd[25498]: Failed password for root from 222.186.30.57 port 34666 ssh2 2020-10-06T23:01:08.396952abusebot-2.cloudsearch.cf sshd[25498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruse ... |
2020-10-07 07:05:54 |
| 64.227.94.175 | attack | 2020-10-06T20:16:13.845549server.espacesoutien.com sshd[4029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.94.175 user=root 2020-10-06T20:16:15.117722server.espacesoutien.com sshd[4029]: Failed password for root from 64.227.94.175 port 50204 ssh2 2020-10-06T20:19:27.806123server.espacesoutien.com sshd[4134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.94.175 user=root 2020-10-06T20:19:30.378859server.espacesoutien.com sshd[4134]: Failed password for root from 64.227.94.175 port 55814 ssh2 ... |
2020-10-07 07:09:18 |
| 159.89.53.183 | attackbotsspam | Port Scan ... |
2020-10-07 07:01:42 |
| 123.201.65.251 | attackbotsspam | Lines containing failures of 123.201.65.251 Oct 5 22:35:37 shared04 sshd[20683]: Did not receive identification string from 123.201.65.251 port 18531 Oct 5 22:35:40 shared04 sshd[20686]: Invalid user admina from 123.201.65.251 port 18619 Oct 5 22:35:40 shared04 sshd[20686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.201.65.251 Oct 5 22:35:42 shared04 sshd[20686]: Failed password for invalid user admina from 123.201.65.251 port 18619 ssh2 Oct 5 22:35:43 shared04 sshd[20686]: Connection closed by invalid user admina 123.201.65.251 port 18619 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=123.201.65.251 |
2020-10-07 07:10:20 |
| 121.169.34.103 | attack | Lines containing failures of 121.169.34.103 Oct 5 22:28:14 kopano sshd[17644]: Bad protocol version identification 'GET / HTTP/1.1' from 121.169.34.103 port 55203 Oct 5 22:28:22 kopano sshd[17645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.169.34.103 user=r.r Oct 5 22:28:24 kopano sshd[17645]: Failed password for r.r from 121.169.34.103 port 55220 ssh2 Oct 5 22:28:26 kopano sshd[17645]: Connection closed by authenticating user r.r 121.169.34.103 port 55220 [preauth] Oct 5 22:28:32 kopano sshd[18412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.169.34.103 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=121.169.34.103 |
2020-10-07 06:54:40 |
| 175.103.40.69 | attackbots | Scanning unused Default website or suspicious access to valid sites from IP marked as abusive |
2020-10-07 07:09:34 |