City: Boardman
Region: Oregon
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 56.136.212.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37935
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;56.136.212.50. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021202 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 09:06:41 CST 2025
;; MSG SIZE rcvd: 10650.212.136.56.in-addr.arpa domain name pointer ec2-56-136-212-50.us-gov-west-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
50.212.136.56.in-addr.arpa name = ec2-56-136-212-50.us-gov-west-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.129.222.207 | attack | Dec 29 05:27:36 : SSH login attempts with invalid user |
2019-12-30 07:05:09 |
| 93.90.167.55 | attack | webserver:80 [29/Dec/2019] "GET /wp-login.php HTTP/1.1" 403 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-12-30 06:54:51 |
| 222.186.173.226 | attackspambots | Dec 29 23:41:39 dcd-gentoo sshd[18802]: User root from 222.186.173.226 not allowed because none of user's groups are listed in AllowGroups Dec 29 23:41:42 dcd-gentoo sshd[18802]: error: PAM: Authentication failure for illegal user root from 222.186.173.226 Dec 29 23:41:39 dcd-gentoo sshd[18802]: User root from 222.186.173.226 not allowed because none of user's groups are listed in AllowGroups Dec 29 23:41:42 dcd-gentoo sshd[18802]: error: PAM: Authentication failure for illegal user root from 222.186.173.226 Dec 29 23:41:39 dcd-gentoo sshd[18802]: User root from 222.186.173.226 not allowed because none of user's groups are listed in AllowGroups Dec 29 23:41:42 dcd-gentoo sshd[18802]: error: PAM: Authentication failure for illegal user root from 222.186.173.226 Dec 29 23:41:42 dcd-gentoo sshd[18802]: Failed keyboard-interactive/pam for invalid user root from 222.186.173.226 port 4847 ssh2 ... |
2019-12-30 06:46:19 |
| 128.199.54.252 | attack | no |
2019-12-30 06:44:00 |
| 54.38.53.251 | attack | Dec 25 14:04:35 kmh-wmh-001-nbg01 sshd[25986]: Invalid user rabold from 54.38.53.251 port 45098 Dec 25 14:04:35 kmh-wmh-001-nbg01 sshd[25986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.53.251 Dec 25 14:04:38 kmh-wmh-001-nbg01 sshd[25986]: Failed password for invalid user rabold from 54.38.53.251 port 45098 ssh2 Dec 25 14:04:38 kmh-wmh-001-nbg01 sshd[25986]: Received disconnect from 54.38.53.251 port 45098:11: Bye Bye [preauth] Dec 25 14:04:38 kmh-wmh-001-nbg01 sshd[25986]: Disconnected from 54.38.53.251 port 45098 [preauth] Dec 25 14:11:32 kmh-wmh-001-nbg01 sshd[26826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.53.251 user=r.r Dec 25 14:11:33 kmh-wmh-001-nbg01 sshd[26826]: Failed password for r.r from 54.38.53.251 port 60968 ssh2 Dec 25 14:11:33 kmh-wmh-001-nbg01 sshd[26826]: Received disconnect from 54.38.53.251 port 60968:11: Bye Bye [preauth] Dec 25 14:11:33 kmh-w........ ------------------------------- |
2019-12-30 06:57:20 |
| 113.189.174.243 | attack | Unauthorized connection attempt detected from IP address 113.189.174.243 to port 445 |
2019-12-30 07:18:18 |
| 103.44.18.68 | attackspambots | Dec 29 08:55:54 : SSH login attempts with invalid user |
2019-12-30 07:06:10 |
| 117.50.95.121 | attackspambots | Dec 29 22:58:32 zeus sshd[3559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.95.121 Dec 29 22:58:34 zeus sshd[3559]: Failed password for invalid user test from 117.50.95.121 port 42094 ssh2 Dec 29 23:01:36 zeus sshd[3641]: Failed password for games from 117.50.95.121 port 36148 ssh2 |
2019-12-30 07:22:16 |
| 129.211.140.205 | attackspambots | Dec 29 19:00:07 *** sshd[18907]: Invalid user test from 129.211.140.205 Dec 29 19:00:07 *** sshd[18907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.140.205 Dec 29 19:00:09 *** sshd[18907]: Failed password for invalid user test from 129.211.140.205 port 57594 ssh2 Dec 29 19:00:10 *** sshd[18907]: Received disconnect from 129.211.140.205: 11: Bye Bye [preauth] Dec 29 19:11:06 *** sshd[20349]: Invalid user mn from 129.211.140.205 Dec 29 19:11:06 *** sshd[20349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.140.205 Dec 29 19:11:09 *** sshd[20349]: Failed password for invalid user mn from 129.211.140.205 port 42244 ssh2 Dec 29 19:11:09 *** sshd[20349]: Received disconnect from 129.211.140.205: 11: Bye Bye [preauth] Dec 29 19:15:42 *** sshd[20983]: Invalid user postgresql from 129.211.140.205 Dec 29 19:15:42 *** sshd[20983]: pam_unix(sshd:auth): authentication failure; lo........ ------------------------------- |
2019-12-30 06:59:29 |
| 168.205.218.99 | attackspam | invalid login attempt |
2019-12-30 06:55:14 |
| 114.35.80.165 | attackbots | Telnet Server BruteForce Attack |
2019-12-30 07:19:22 |
| 45.227.145.84 | attackbotsspam | Automatic report - Port Scan Attack |
2019-12-30 07:19:52 |
| 164.132.98.229 | attackspambots | webserver:80 [29/Dec/2019] "GET /wp-login.php HTTP/1.1" 403 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-12-30 06:54:23 |
| 138.68.234.162 | attackspambots | Dec 21 04:59:28 mail sshd[22292]: Failed password for invalid user cather from 138.68.234.162 port 40860 ssh2 Dec 21 04:59:29 mail sshd[22292]: Received disconnect from 138.68.234.162: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=138.68.234.162 |
2019-12-30 07:09:26 |
| 118.98.121.195 | attackspambots | Invalid user wishmop from 118.98.121.195 port 36672 |
2019-12-30 07:04:37 |