City: Flint
Region: Michigan
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 68.48.90.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33920
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;68.48.90.134. IN A
;; AUTHORITY SECTION:
. 226 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020051701 1800 900 604800 86400
;; Query time: 92 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 18 05:59:51 CST 2020
;; MSG SIZE rcvd: 116134.90.48.68.in-addr.arpa domain name pointer c-68-48-90-134.hsd1.mi.comcast.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
134.90.48.68.in-addr.arpa name = c-68-48-90-134.hsd1.mi.comcast.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 162.243.133.214 | attack | My mail server lists smtpd warning such as these every day:
1 hostname zg-0905a-224.stretchoid.com does not resolve to address 159.203.199.219: Name or service not known
1 hostname zg-0905a-208.stretchoid.com does not resolve to address 159.203.199.203: Name or service not known |
2019-09-12 08:12:02 |
| 18.206.183.165 | attackbots | Sep 12 00:14:51 bouncer sshd\[2039\]: Invalid user fln75g from 18.206.183.165 port 35964 Sep 12 00:14:51 bouncer sshd\[2039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.206.183.165 Sep 12 00:14:52 bouncer sshd\[2039\]: Failed password for invalid user fln75g from 18.206.183.165 port 35964 ssh2 ... |
2019-09-12 08:40:21 |
| 123.207.142.208 | attackspam | Sep 11 14:08:50 php1 sshd\[22679\]: Invalid user ftptest from 123.207.142.208 Sep 11 14:08:50 php1 sshd\[22679\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.142.208 Sep 11 14:08:52 php1 sshd\[22679\]: Failed password for invalid user ftptest from 123.207.142.208 port 51054 ssh2 Sep 11 14:13:41 php1 sshd\[23346\]: Invalid user git from 123.207.142.208 Sep 11 14:13:41 php1 sshd\[23346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.142.208 |
2019-09-12 08:31:10 |
| 201.242.198.219 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-11 17:39:32,593 INFO [amun_request_handler] PortScan Detected on Port: 445 (201.242.198.219) |
2019-09-12 08:05:20 |
| 61.244.186.37 | attackbotsspam | Sep 12 02:09:08 rpi sshd[8659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.244.186.37 Sep 12 02:09:09 rpi sshd[8659]: Failed password for invalid user 1 from 61.244.186.37 port 54070 ssh2 |
2019-09-12 08:28:29 |
| 80.12.39.146 | attackbotsspam | Automatic report - Banned IP Access |
2019-09-12 08:25:45 |
| 219.90.67.89 | attackspam | Sep 11 18:53:20 thevastnessof sshd[12454]: Failed password for invalid user student from 219.90.67.89 port 37668 ssh2 ... |
2019-09-12 08:20:34 |
| 5.196.52.173 | attackbotsspam | 2019-09-11T22:02:00.930757abusebot-6.cloudsearch.cf sshd\[17276\]: Invalid user cloudcloud from 5.196.52.173 port 57309 |
2019-09-12 08:36:34 |
| 40.73.34.44 | attack | Sep 11 23:54:24 game-panel sshd[2577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.34.44 Sep 11 23:54:26 game-panel sshd[2577]: Failed password for invalid user vbox from 40.73.34.44 port 50728 ssh2 Sep 12 00:00:00 game-panel sshd[2783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.34.44 |
2019-09-12 08:39:33 |
| 197.32.188.84 | attackbotsspam | 2019-09-11T18:53:13.336445abusebot-4.cloudsearch.cf sshd\[24187\]: Invalid user admin from 197.32.188.84 port 39718 |
2019-09-12 08:25:26 |
| 165.132.120.231 | attack | Sep 11 14:01:22 php1 sshd\[21852\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=gold.yonsei.ac.kr user=root Sep 11 14:01:23 php1 sshd\[21852\]: Failed password for root from 165.132.120.231 port 54200 ssh2 Sep 11 14:08:42 php1 sshd\[22668\]: Invalid user test from 165.132.120.231 Sep 11 14:08:42 php1 sshd\[22668\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=gold.yonsei.ac.kr Sep 11 14:08:44 php1 sshd\[22668\]: Failed password for invalid user test from 165.132.120.231 port 35306 ssh2 |
2019-09-12 08:21:25 |
| 106.12.34.188 | attackbotsspam | Sep 11 14:01:34 eddieflores sshd\[22773\]: Invalid user 123qwe from 106.12.34.188 Sep 11 14:01:34 eddieflores sshd\[22773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.34.188 Sep 11 14:01:36 eddieflores sshd\[22773\]: Failed password for invalid user 123qwe from 106.12.34.188 port 35502 ssh2 Sep 11 14:08:49 eddieflores sshd\[23321\]: Invalid user password from 106.12.34.188 Sep 11 14:08:49 eddieflores sshd\[23321\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.34.188 |
2019-09-12 08:26:53 |
| 58.144.151.10 | attackbotsspam | Sep 12 02:06:15 markkoudstaal sshd[10863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.144.151.10 Sep 12 02:06:17 markkoudstaal sshd[10863]: Failed password for invalid user appuser from 58.144.151.10 port 15188 ssh2 Sep 12 02:09:22 markkoudstaal sshd[11188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.144.151.10 |
2019-09-12 08:15:05 |
| 103.99.1.158 | attackbotsspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-11 17:34:57,785 INFO [amun_request_handler] unknown vuln (Attacker: 103.99.1.158 Port: 25, Mess: ['ehlo WIN-2WBAHRED6JY '] (22) Stages: ['IMAIL_STAGE1']) |
2019-09-12 08:33:08 |
| 218.92.0.175 | attack | [ssh] SSH attack |
2019-09-12 08:16:51 |