City: Roseville
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: Consolidated Communications, Inc.
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 64.113.107.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9766
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;64.113.107.208. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019070302 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 04 03:04:43 CST 2019
;; MSG SIZE rcvd: 118208.107.113.64.in-addr.arpa domain name pointer 208.107-113-64.ftth.swbr.surewest.net.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
208.107.113.64.in-addr.arpa name = 208.107-113-64.ftth.swbr.surewest.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 131.161.185.81 | attack | SASL PLAIN auth failed: ruser=... |
2019-09-11 13:43:27 |
| 186.227.146.168 | attackbots | Unauthorized SMTP/IMAP/POP3 connection attempt |
2019-09-11 12:54:51 |
| 139.59.63.244 | attack | Sep 10 23:42:11 XXX sshd[61545]: Invalid user testuser from 139.59.63.244 port 38750 |
2019-09-11 13:21:43 |
| 185.49.236.7 | attackbots | RDP Bruteforce |
2019-09-11 13:18:38 |
| 134.209.40.67 | attackbotsspam | Sep 10 13:40:30 auw2 sshd\[17581\]: Invalid user ftpuser from 134.209.40.67 Sep 10 13:40:30 auw2 sshd\[17581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.40.67 Sep 10 13:40:31 auw2 sshd\[17581\]: Failed password for invalid user ftpuser from 134.209.40.67 port 44520 ssh2 Sep 10 13:45:47 auw2 sshd\[18085\]: Invalid user oracle from 134.209.40.67 Sep 10 13:45:47 auw2 sshd\[18085\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.40.67 |
2019-09-11 13:40:01 |
| 23.129.64.206 | attackbotsspam | Sep 11 07:20:46 vmanager6029 sshd\[5721\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.129.64.206 user=root Sep 11 07:20:48 vmanager6029 sshd\[5721\]: Failed password for root from 23.129.64.206 port 17620 ssh2 Sep 11 07:20:51 vmanager6029 sshd\[5721\]: Failed password for root from 23.129.64.206 port 17620 ssh2 |
2019-09-11 13:46:48 |
| 177.130.137.34 | attackspambots | Unauthorized SMTP/IMAP/POP3 connection attempt |
2019-09-11 13:07:46 |
| 110.138.150.85 | attackbots | Sep 10 23:48:53 servernet sshd[18372]: Invalid user user from 110.138.150.85 Sep 10 23:48:53 servernet sshd[18372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.138.150.85 Sep 10 23:48:55 servernet sshd[18372]: Failed password for invalid user user from 110.138.150.85 port 62398 ssh2 Sep 10 23:58:04 servernet sshd[18422]: Invalid user test from 110.138.150.85 Sep 10 23:58:04 servernet sshd[18422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.138.150.85 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=110.138.150.85 |
2019-09-11 13:13:13 |
| 201.148.247.80 | attackbots | Unauthorized SMTP/IMAP/POP3 connection attempt |
2019-09-11 12:49:35 |
| 141.98.9.5 | attackbots | Sep 11 07:30:02 webserver postfix/smtpd\[25246\]: warning: unknown\[141.98.9.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 11 07:30:48 webserver postfix/smtpd\[25246\]: warning: unknown\[141.98.9.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 11 07:31:33 webserver postfix/smtpd\[25246\]: warning: unknown\[141.98.9.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 11 07:32:19 webserver postfix/smtpd\[26138\]: warning: unknown\[141.98.9.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 11 07:33:05 webserver postfix/smtpd\[26138\]: warning: unknown\[141.98.9.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-09-11 13:49:06 |
| 168.232.129.199 | attack | Unauthorized SSH connection attempt |
2019-09-11 13:09:09 |
| 189.203.32.59 | attackbotsspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-10 17:52:01,904 INFO [amun_request_handler] PortScan Detected on Port: 445 (189.203.32.59) |
2019-09-11 13:20:04 |
| 118.168.66.142 | attackspam | port 23 attempt blocked |
2019-09-11 13:25:41 |
| 150.254.222.97 | attackspambots | Sep 11 06:24:31 eventyay sshd[20836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.254.222.97 Sep 11 06:24:34 eventyay sshd[20836]: Failed password for invalid user ftpadmin from 150.254.222.97 port 35655 ssh2 Sep 11 06:30:44 eventyay sshd[21053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.254.222.97 ... |
2019-09-11 12:48:55 |
| 37.110.68.98 | attackbotsspam | Unauthorized SSH connection attempt |
2019-09-11 13:39:17 |