City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 71.221.57.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57810
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;71.221.57.52. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012102 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 13:38:01 CST 2025
;; MSG SIZE rcvd: 10552.57.221.71.in-addr.arpa domain name pointer 71-221-57-52.klln.qwest.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
52.57.221.71.in-addr.arpa name = 71-221-57-52.klln.qwest.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 1.245.61.144 | attackbotsspam | Apr 30 15:41:42 lukav-desktop sshd\[12429\]: Invalid user bot from 1.245.61.144 Apr 30 15:41:42 lukav-desktop sshd\[12429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.245.61.144 Apr 30 15:41:44 lukav-desktop sshd\[12429\]: Failed password for invalid user bot from 1.245.61.144 port 62471 ssh2 Apr 30 15:45:11 lukav-desktop sshd\[17241\]: Invalid user test from 1.245.61.144 Apr 30 15:45:11 lukav-desktop sshd\[17241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.245.61.144 |
2020-04-30 21:27:19 |
| 167.172.115.193 | attack | Apr 30 09:25:31 firewall sshd[26808]: Invalid user lijia from 167.172.115.193 Apr 30 09:25:33 firewall sshd[26808]: Failed password for invalid user lijia from 167.172.115.193 port 52244 ssh2 Apr 30 09:27:44 firewall sshd[26835]: Invalid user web from 167.172.115.193 ... |
2020-04-30 21:24:21 |
| 70.51.195.46 | attack | Apr 30 14:59:42 ns381471 sshd[21863]: Failed password for root from 70.51.195.46 port 40404 ssh2 Apr 30 15:03:44 ns381471 sshd[21962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.51.195.46 |
2020-04-30 21:29:52 |
| 111.231.66.74 | attack | ... |
2020-04-30 21:32:26 |
| 223.240.121.68 | attack | k+ssh-bruteforce |
2020-04-30 21:25:13 |
| 122.100.154.51 | attack | Port probing on unauthorized port 23 |
2020-04-30 21:51:53 |
| 13.125.244.105 | attackbots | Lines containing failures of 13.125.244.105 Apr 29 12:04:21 newdogma sshd[4376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.125.244.105 user=r.r Apr 29 12:04:23 newdogma sshd[4376]: Failed password for r.r from 13.125.244.105 port 54542 ssh2 Apr 29 12:04:24 newdogma sshd[4376]: Received disconnect from 13.125.244.105 port 54542:11: Bye Bye [preauth] Apr 29 12:04:24 newdogma sshd[4376]: Disconnected from authenticating user r.r 13.125.244.105 port 54542 [preauth] Apr 29 12:15:55 newdogma sshd[4584]: Invalid user ghostnamelab from 13.125.244.105 port 44654 Apr 29 12:15:55 newdogma sshd[4584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.125.244.105 Apr 29 12:15:58 newdogma sshd[4584]: Failed password for invalid user ghostnamelab from 13.125.244.105 port 44654 ssh2 Apr 29 12:15:59 newdogma sshd[4584]: Received disconnect from 13.125.244.105 port 44654:11: Bye Bye [preauth] Apr 2........ ------------------------------ |
2020-04-30 21:49:31 |
| 217.114.157.17 | attack | Honeypot attack, port: 445, PTR: host217-114-157-17.pppoe.mark-itt.net. |
2020-04-30 21:35:11 |
| 162.243.42.225 | attackbots | (sshd) Failed SSH login from 162.243.42.225 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 30 14:10:58 amsweb01 sshd[16715]: Invalid user ton from 162.243.42.225 port 35894 Apr 30 14:11:00 amsweb01 sshd[16715]: Failed password for invalid user ton from 162.243.42.225 port 35894 ssh2 Apr 30 14:21:22 amsweb01 sshd[18028]: Invalid user test from 162.243.42.225 port 41244 Apr 30 14:21:24 amsweb01 sshd[18028]: Failed password for invalid user test from 162.243.42.225 port 41244 ssh2 Apr 30 14:27:10 amsweb01 sshd[18688]: User ftp from 162.243.42.225 not allowed because not listed in AllowUsers |
2020-04-30 21:51:06 |
| 13.78.143.50 | attackbots | Repeated RDP login failures. Last user: ludwig |
2020-04-30 21:52:39 |
| 171.244.139.171 | attackbotsspam | SSH bruteforce |
2020-04-30 21:42:16 |
| 222.186.30.112 | attackbotsspam | detected by Fail2Ban |
2020-04-30 22:03:45 |
| 196.207.254.250 | attackbotsspam | Apr 30 14:26:55 ns382633 sshd\[15600\]: Invalid user redfoxprovedor from 196.207.254.250 port 62427 Apr 30 14:26:55 ns382633 sshd\[15600\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.207.254.250 Apr 30 14:26:57 ns382633 sshd\[15600\]: Failed password for invalid user redfoxprovedor from 196.207.254.250 port 62427 ssh2 Apr 30 14:26:57 ns382633 sshd\[15607\]: Invalid user oracle from 196.207.254.250 port 62559 Apr 30 14:26:57 ns382633 sshd\[15607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.207.254.250 |
2020-04-30 22:07:56 |
| 2.234.171.164 | attackbots | Automatic report - Port Scan Attack |
2020-04-30 22:11:11 |
| 112.126.103.88 | attack | (sshd) Failed SSH login from 112.126.103.88 (CN/China/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 30 12:24:53 andromeda sshd[7337]: Did not receive identification string from 112.126.103.88 port 38946 Apr 30 12:26:34 andromeda sshd[7378]: Did not receive identification string from 112.126.103.88 port 55072 Apr 30 12:27:00 andromeda sshd[7388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.126.103.88 user=root |
2020-04-30 22:01:59 |