City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 70.122.249.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55634
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;70.122.249.117. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400
;; Query time: 83 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 22:40:31 CST 2025
;; MSG SIZE rcvd: 107117.249.122.70.in-addr.arpa domain name pointer syn-070-122-249-117.res.spectrum.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
117.249.122.70.in-addr.arpa name = syn-070-122-249-117.res.spectrum.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 82.210.161.64 | attack | 2019-10-01 16:54:01 | |
| 178.146.152.234 | attackbotsspam | Received: from [178.146.152.234] by qnx.mdrost.com wi |
2019-10-01 16:52:13 |
| 190.85.234.215 | attackspambots | SSH Brute-Force attacks |
2019-10-01 16:45:56 |
| 58.217.107.82 | attackbots | 10/01/2019-05:50:08.093772 58.217.107.82 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 54 |
2019-10-01 16:43:34 |
| 211.239.121.27 | attack | Sep 30 22:46:22 kapalua sshd\[13676\]: Invalid user swpro from 211.239.121.27 Sep 30 22:46:22 kapalua sshd\[13676\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.239.121.27 Sep 30 22:46:25 kapalua sshd\[13676\]: Failed password for invalid user swpro from 211.239.121.27 port 45132 ssh2 Sep 30 22:51:13 kapalua sshd\[14093\]: Invalid user tai from 211.239.121.27 Sep 30 22:51:13 kapalua sshd\[14093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.239.121.27 |
2019-10-01 16:53:27 |
| 104.131.1.137 | attack | Sep 30 20:35:19 hanapaa sshd\[14087\]: Invalid user apple from 104.131.1.137 Sep 30 20:35:19 hanapaa sshd\[14087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.1.137 Sep 30 20:35:20 hanapaa sshd\[14087\]: Failed password for invalid user apple from 104.131.1.137 port 50850 ssh2 Sep 30 20:41:05 hanapaa sshd\[14673\]: Invalid user et from 104.131.1.137 Sep 30 20:41:05 hanapaa sshd\[14673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.1.137 |
2019-10-01 17:11:29 |
| 45.136.109.199 | attack | firewall-block, port(s): 6859/tcp, 7216/tcp |
2019-10-01 16:47:22 |
| 63.81.90.93 | attack | Oct 1 04:58:18 tux postfix/smtpd[14639]: warning: hostname twisted.1nosnore-cz.com does not resolve to address 63.81.90.93 Oct 1 04:58:18 tux postfix/smtpd[14639]: connect from unknown[63.81.90.93] Oct x@x Oct 1 04:58:22 tux postfix/smtpd[14639]: disconnect from unknown[63.81.90.93] Oct 1 05:28:22 tux postfix/smtpd[15635]: warning: hostname twisted.1nosnore-cz.com does not resolve to address 63.81.90.93 Oct 1 05:28:22 tux postfix/smtpd[15635]: connect from unknown[63.81.90.93] Oct x@x Oct 1 05:28:23 tux postfix/smtpd[15635]: disconnect from unknown[63.81.90.93] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=63.81.90.93 |
2019-10-01 16:30:38 |
| 114.25.123.105 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/114.25.123.105/ TW - 1H : (214) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TW NAME ASN : ASN3462 IP : 114.25.123.105 CIDR : 114.25.0.0/17 PREFIX COUNT : 390 UNIQUE IP COUNT : 12267520 WYKRYTE ATAKI Z ASN3462 : 1H - 16 3H - 41 6H - 54 12H - 84 24H - 146 DateTime : 2019-10-01 05:50:04 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery |
2019-10-01 16:41:58 |
| 104.238.120.2 | attackbotsspam | fail2ban honeypot |
2019-10-01 16:37:29 |
| 51.77.140.48 | attackspam | Sep 30 08:18:56 zn008 sshd[10193]: Invalid user gmi from 51.77.140.48 Sep 30 08:18:58 zn008 sshd[10193]: Failed password for invalid user gmi from 51.77.140.48 port 46164 ssh2 Sep 30 08:18:58 zn008 sshd[10193]: Received disconnect from 51.77.140.48: 11: Bye Bye [preauth] Sep 30 08:29:58 zn008 sshd[11259]: Failed password for r.r from 51.77.140.48 port 41640 ssh2 Sep 30 08:29:58 zn008 sshd[11259]: Received disconnect from 51.77.140.48: 11: Bye Bye [preauth] Sep 30 08:33:43 zn008 sshd[11683]: Invalid user evelina from 51.77.140.48 Sep 30 08:33:44 zn008 sshd[11683]: Failed password for invalid user evelina from 51.77.140.48 port 55138 ssh2 Sep 30 08:33:44 zn008 sshd[11683]: Received disconnect from 51.77.140.48: 11: Bye Bye [preauth] Sep 30 08:37:41 zn008 sshd[12151]: Failed password for r.r from 51.77.140.48 port 40408 ssh2 Sep 30 08:37:41 zn008 sshd[12151]: Received disconnect from 51.77.140.48: 11: Bye Bye [preauth] Sep 30 08:41:34 zn008 sshd[12673]: Invalid user marry ........ ------------------------------- |
2019-10-01 17:03:36 |
| 86.41.89.192 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/86.41.89.192/ GB - 1H : (124) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : GB NAME ASN : ASN5466 IP : 86.41.89.192 CIDR : 86.40.0.0/13 PREFIX COUNT : 27 UNIQUE IP COUNT : 1095168 WYKRYTE ATAKI Z ASN5466 : 1H - 1 3H - 2 6H - 3 12H - 4 24H - 7 DateTime : 2019-10-01 05:50:04 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery |
2019-10-01 16:43:04 |
| 222.186.15.18 | attackspam | Oct 1 04:44:57 ny01 sshd[18091]: Failed password for root from 222.186.15.18 port 46006 ssh2 Oct 1 04:44:58 ny01 sshd[18090]: Failed password for root from 222.186.15.18 port 30338 ssh2 Oct 1 04:44:59 ny01 sshd[18091]: Failed password for root from 222.186.15.18 port 46006 ssh2 |
2019-10-01 16:51:15 |
| 122.142.233.102 | attack | Unauthorised access (Oct 1) SRC=122.142.233.102 LEN=40 TTL=49 ID=5582 TCP DPT=8080 WINDOW=734 SYN Unauthorised access (Sep 30) SRC=122.142.233.102 LEN=40 TTL=49 ID=54862 TCP DPT=8080 WINDOW=734 SYN |
2019-10-01 17:08:16 |
| 91.23.33.175 | attackspam | Oct 1 11:05:51 dedicated sshd[12198]: Invalid user testproxy from 91.23.33.175 port 35163 |
2019-10-01 17:09:30 |