City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: DoD Network Information Center
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 55.237.114.127
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38758
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;55.237.114.127. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019061200 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jun 13 01:57:35 CST 2019
;; MSG SIZE rcvd: 118
Host 127.114.237.55.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 127.114.237.55.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 159.89.231.172 | attackspam | 11/28/2019-15:21:54.931010 159.89.231.172 Protocol: 6 ET COMPROMISED Known Compromised or Hostile Host Traffic group 10 |
2019-11-29 06:39:37 |
| 77.42.75.139 | attack | Automatic report - Port Scan Attack |
2019-11-29 06:27:54 |
| 35.230.91.250 | attack | xmlrpc attack |
2019-11-29 06:26:10 |
| 138.197.216.120 | attackspambots | Nov 28 18:04:36 mc1 kernel: \[6246900.726536\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=138.197.216.120 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=57695 PROTO=TCP SPT=61000 DPT=80 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 28 18:04:40 mc1 kernel: \[6246903.886580\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=138.197.216.120 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=57695 PROTO=TCP SPT=61000 DPT=80 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 28 18:04:43 mc1 kernel: \[6246907.096799\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=138.197.216.120 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=57695 PROTO=TCP SPT=61000 DPT=80 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-29 06:43:57 |
| 109.128.110.142 | attackbots | Nov 29 01:47:46 server sshd\[5717\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.128.110.142 user=root Nov 29 01:47:48 server sshd\[5717\]: Failed password for root from 109.128.110.142 port 37282 ssh2 Nov 29 01:47:55 server sshd\[5738\]: Invalid user www-data from 109.128.110.142 Nov 29 01:47:55 server sshd\[5738\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.128.110.142 Nov 29 01:47:57 server sshd\[5738\]: Failed password for invalid user www-data from 109.128.110.142 port 57072 ssh2 ... |
2019-11-29 06:48:03 |
| 166.111.152.230 | attackspambots | Automatic report - SSH Brute-Force Attack |
2019-11-29 06:59:54 |
| 109.102.158.14 | attack | Nov 28 22:44:47 localhost sshd\[33700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.102.158.14 user=root Nov 28 22:44:49 localhost sshd\[33700\]: Failed password for root from 109.102.158.14 port 47404 ssh2 Nov 28 22:47:50 localhost sshd\[33763\]: Invalid user kier from 109.102.158.14 port 55560 Nov 28 22:47:50 localhost sshd\[33763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.102.158.14 Nov 28 22:47:52 localhost sshd\[33763\]: Failed password for invalid user kier from 109.102.158.14 port 55560 ssh2 ... |
2019-11-29 06:52:28 |
| 109.115.62.170 | attack | port scan and connect, tcp 80 (http) |
2019-11-29 06:28:56 |
| 119.196.83.18 | attackspambots | Nov 28 23:27:33 ns381471 sshd[6009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.196.83.18 Nov 28 23:27:35 ns381471 sshd[6009]: Failed password for invalid user madonna from 119.196.83.18 port 39876 ssh2 |
2019-11-29 06:40:49 |
| 84.94.236.118 | attackspam | port scan/probe/communication attempt; port 23 |
2019-11-29 06:56:02 |
| 83.23.196.145 | attack | port scan/probe/communication attempt; port 23 |
2019-11-29 06:59:13 |
| 122.114.156.133 | attackspam | Nov 28 23:43:41 nextcloud sshd\[2308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.156.133 user=sshd Nov 28 23:43:43 nextcloud sshd\[2308\]: Failed password for sshd from 122.114.156.133 port 43296 ssh2 Nov 28 23:47:42 nextcloud sshd\[7246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.156.133 user=root ... |
2019-11-29 06:58:18 |
| 95.173.179.118 | attackspam | fail2ban honeypot |
2019-11-29 06:42:03 |
| 51.255.174.164 | attackspam | Nov 29 00:38:58 pkdns2 sshd\[62496\]: Failed password for root from 51.255.174.164 port 34926 ssh2Nov 29 00:41:56 pkdns2 sshd\[62646\]: Invalid user host from 51.255.174.164Nov 29 00:41:58 pkdns2 sshd\[62646\]: Failed password for invalid user host from 51.255.174.164 port 42578 ssh2Nov 29 00:44:57 pkdns2 sshd\[62755\]: Failed password for daemon from 51.255.174.164 port 50228 ssh2Nov 29 00:47:53 pkdns2 sshd\[62899\]: Invalid user henscheid from 51.255.174.164Nov 29 00:47:55 pkdns2 sshd\[62899\]: Failed password for invalid user henscheid from 51.255.174.164 port 57878 ssh2 ... |
2019-11-29 06:50:07 |
| 172.105.89.161 | attackbotsspam | 11/28/2019-16:51:54.331913 172.105.89.161 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-11-29 06:25:35 |