City: Medford
Region: Oregon
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 68.116.104.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11819
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;68.116.104.52. IN A
;; AUTHORITY SECTION:
. 457 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020060101 1800 900 604800 86400
;; Query time: 101 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 02 13:06:19 CST 2020
;; MSG SIZE rcvd: 11752.104.116.68.in-addr.arpa domain name pointer 068-116-104-052.biz.spectrum.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
52.104.116.68.in-addr.arpa name = 068-116-104-052.biz.spectrum.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.42.94 | attackbotsspam | Sep 7 02:54:29 lcprod sshd\[25510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.94 user=root Sep 7 02:54:31 lcprod sshd\[25510\]: Failed password for root from 222.186.42.94 port 27396 ssh2 Sep 7 02:54:38 lcprod sshd\[25520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.94 user=root Sep 7 02:54:40 lcprod sshd\[25520\]: Failed password for root from 222.186.42.94 port 38073 ssh2 Sep 7 02:54:47 lcprod sshd\[25530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.94 user=root |
2019-09-07 21:06:52 |
| 125.212.233.50 | attackbots | Sep 7 02:46:29 friendsofhawaii sshd\[6190\]: Invalid user tom from 125.212.233.50 Sep 7 02:46:29 friendsofhawaii sshd\[6190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.212.233.50 Sep 7 02:46:32 friendsofhawaii sshd\[6190\]: Failed password for invalid user tom from 125.212.233.50 port 53856 ssh2 Sep 7 02:53:28 friendsofhawaii sshd\[6766\]: Invalid user chris from 125.212.233.50 Sep 7 02:53:28 friendsofhawaii sshd\[6766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.212.233.50 |
2019-09-07 21:11:35 |
| 73.246.20.158 | attackbotsspam | Sep 7 15:50:21 server sshd\[15841\]: Invalid user oracle from 73.246.20.158 port 46360 Sep 7 15:50:21 server sshd\[15841\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.246.20.158 Sep 7 15:50:24 server sshd\[15841\]: Failed password for invalid user oracle from 73.246.20.158 port 46360 ssh2 Sep 7 15:54:28 server sshd\[25963\]: Invalid user nagios from 73.246.20.158 port 34398 Sep 7 15:54:28 server sshd\[25963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.246.20.158 |
2019-09-07 20:56:40 |
| 36.224.102.67 | attack | Unauthorized connection attempt from IP address 36.224.102.67 on Port 445(SMB) |
2019-09-07 20:46:11 |
| 197.188.113.204 | attackbotsspam | Sep 7 05:25:18 eola sshd[12354]: Did not receive identification string from 197.188.113.204 port 48886 Sep 7 05:25:20 eola sshd[12355]: Invalid user nexthink from 197.188.113.204 port 49204 Sep 7 05:25:21 eola sshd[12355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.188.113.204 Sep 7 05:25:23 eola sshd[12355]: Failed password for invalid user nexthink from 197.188.113.204 port 49204 ssh2 Sep 7 05:25:23 eola sshd[12355]: Connection closed by 197.188.113.204 port 49204 [preauth] Sep 7 05:25:25 eola sshd[12357]: Invalid user plexuser from 197.188.113.204 port 50444 Sep 7 05:25:25 eola sshd[12357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.188.113.204 Sep 7 05:25:27 eola sshd[12357]: Failed password for invalid user plexuser from 197.188.113.204 port 50444 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=197.188.113.204 |
2019-09-07 21:35:53 |
| 1.161.161.169 | attackbotsspam | Fail2Ban - FTP Abuse Attempt |
2019-09-07 21:16:22 |
| 221.140.151.235 | attack | Automated report - ssh fail2ban: Sep 7 13:51:23 authentication failure Sep 7 13:51:25 wrong password, user=sysadmin, port=49534, ssh2 Sep 7 13:55:58 authentication failure |
2019-09-07 20:46:33 |
| 191.252.109.101 | attackbotsspam | Sep 7 14:42:52 mail sshd\[13319\]: Invalid user ts3 from 191.252.109.101 port 46600 Sep 7 14:42:52 mail sshd\[13319\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.109.101 Sep 7 14:42:54 mail sshd\[13319\]: Failed password for invalid user ts3 from 191.252.109.101 port 46600 ssh2 Sep 7 14:48:10 mail sshd\[13904\]: Invalid user webmaster from 191.252.109.101 port 33168 Sep 7 14:48:10 mail sshd\[13904\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.109.101 |
2019-09-07 21:02:37 |
| 89.176.9.98 | attack | Sep 7 14:58:54 rpi sshd[27742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.176.9.98 Sep 7 14:58:56 rpi sshd[27742]: Failed password for invalid user test2 from 89.176.9.98 port 57158 ssh2 |
2019-09-07 21:06:10 |
| 54.37.229.223 | attackspambots | Sep 7 03:07:39 hpm sshd\[31271\]: Invalid user admin from 54.37.229.223 Sep 7 03:07:39 hpm sshd\[31271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.ip-54-37-229.eu Sep 7 03:07:41 hpm sshd\[31271\]: Failed password for invalid user admin from 54.37.229.223 port 53862 ssh2 Sep 7 03:12:13 hpm sshd\[31793\]: Invalid user test from 54.37.229.223 Sep 7 03:12:13 hpm sshd\[31793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.ip-54-37-229.eu |
2019-09-07 21:28:07 |
| 218.98.26.184 | attackbots | Sep 7 14:45:38 OPSO sshd\[23542\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.26.184 user=root Sep 7 14:45:40 OPSO sshd\[23542\]: Failed password for root from 218.98.26.184 port 64264 ssh2 Sep 7 14:45:43 OPSO sshd\[23542\]: Failed password for root from 218.98.26.184 port 64264 ssh2 Sep 7 14:45:45 OPSO sshd\[23542\]: Failed password for root from 218.98.26.184 port 64264 ssh2 Sep 7 14:45:48 OPSO sshd\[23545\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.26.184 user=root |
2019-09-07 20:48:43 |
| 167.114.230.252 | attackbotsspam | Sep 7 15:08:08 eventyay sshd[2135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.230.252 Sep 7 15:08:10 eventyay sshd[2135]: Failed password for invalid user webtool from 167.114.230.252 port 52465 ssh2 Sep 7 15:12:38 eventyay sshd[2256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.230.252 ... |
2019-09-07 21:19:39 |
| 213.168.60.238 | attack | Unauthorised access (Sep 7) SRC=213.168.60.238 LEN=52 TTL=112 ID=12730 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Sep 5) SRC=213.168.60.238 LEN=52 TTL=112 ID=22927 DF TCP DPT=445 WINDOW=8192 SYN |
2019-09-07 21:08:07 |
| 39.89.156.53 | attack | firewall-block, port(s): 22/tcp |
2019-09-07 20:59:27 |
| 144.217.40.3 | attackbots | Sep 7 13:24:07 ns3110291 sshd\[21431\]: Invalid user svnuser from 144.217.40.3 Sep 7 13:24:09 ns3110291 sshd\[21431\]: Failed password for invalid user svnuser from 144.217.40.3 port 47408 ssh2 Sep 7 13:28:43 ns3110291 sshd\[21909\]: Failed password for mysql from 144.217.40.3 port 35022 ssh2 Sep 7 13:33:12 ns3110291 sshd\[3884\]: Invalid user teste from 144.217.40.3 Sep 7 13:33:14 ns3110291 sshd\[3884\]: Failed password for invalid user teste from 144.217.40.3 port 50892 ssh2 ... |
2019-09-07 21:10:55 |