City: Dallas
Region: Texas
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 71.42.229.58
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52511
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;71.42.229.58. IN A
;; AUTHORITY SECTION:
. 314 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020072702 1800 900 604800 86400
;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 28 08:05:47 CST 2020
;; MSG SIZE rcvd: 11658.229.42.71.in-addr.arpa domain name pointer rrcs-71-42-229-58.sw.biz.rr.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
58.229.42.71.in-addr.arpa name = rrcs-71-42-229-58.sw.biz.rr.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 123.143.203.67 | attackspam | Dec 27 10:20:22 ncomp sshd[16874]: User uucp from 123.143.203.67 not allowed because none of user's groups are listed in AllowGroups Dec 27 10:20:22 ncomp sshd[16874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.143.203.67 user=uucp Dec 27 10:20:22 ncomp sshd[16874]: User uucp from 123.143.203.67 not allowed because none of user's groups are listed in AllowGroups Dec 27 10:20:24 ncomp sshd[16874]: Failed password for invalid user uucp from 123.143.203.67 port 39136 ssh2 |
2019-12-27 18:40:12 |
| 222.186.173.154 | attackbotsspam | SSH Brute Force, server-1 sshd[1089]: Failed password for root from 222.186.173.154 port 3230 ssh2 |
2019-12-27 18:17:39 |
| 202.72.204.226 | attackspambots | Dec 27 10:33:53 lnxweb61 sshd[23941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.72.204.226 Dec 27 10:33:53 lnxweb61 sshd[23941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.72.204.226 |
2019-12-27 18:10:20 |
| 150.223.10.108 | attackspambots | Dec 27 07:42:13 silence02 sshd[12480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.223.10.108 Dec 27 07:42:14 silence02 sshd[12480]: Failed password for invalid user nfs from 150.223.10.108 port 44833 ssh2 Dec 27 07:50:18 silence02 sshd[12727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.223.10.108 |
2019-12-27 18:34:56 |
| 123.21.13.109 | attack | Dec 27 07:25:37 vpn01 sshd[10169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.21.13.109 Dec 27 07:25:39 vpn01 sshd[10169]: Failed password for invalid user admin from 123.21.13.109 port 56145 ssh2 ... |
2019-12-27 18:32:41 |
| 212.64.40.35 | attackbots | Dec 27 06:53:14 localhost sshd[34509]: Failed password for root from 212.64.40.35 port 51438 ssh2 Dec 27 07:14:42 localhost sshd[35662]: Failed password for root from 212.64.40.35 port 44988 ssh2 Dec 27 07:25:31 localhost sshd[36331]: Failed password for root from 212.64.40.35 port 57598 ssh2 |
2019-12-27 18:36:21 |
| 103.62.235.6 | attack | Host Scan |
2019-12-27 18:25:14 |
| 196.50.4.94 | attack | Lines containing failures of 196.50.4.94 Dec 24 23:43:39 shared05 sshd[21856]: Invalid user pi from 196.50.4.94 port 51586 Dec 24 23:43:39 shared05 sshd[21856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.50.4.94 Dec 24 23:43:41 shared05 sshd[21856]: Failed password for invalid user pi from 196.50.4.94 port 51586 ssh2 Dec 24 23:43:42 shared05 sshd[21856]: Connection closed by invalid user pi 196.50.4.94 port 51586 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=196.50.4.94 |
2019-12-27 18:10:35 |
| 185.153.197.162 | attack | Dec 27 07:58:47 debian-2gb-nbg1-2 kernel: \[1082652.026381\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.153.197.162 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=61747 PROTO=TCP SPT=57105 DPT=23390 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-27 18:30:12 |
| 164.132.46.197 | attackspam | Dec 27 08:08:31 ns3110291 sshd\[29494\]: Failed password for mysql from 164.132.46.197 port 53230 ssh2 Dec 27 08:11:10 ns3110291 sshd\[29556\]: Invalid user admin from 164.132.46.197 Dec 27 08:11:12 ns3110291 sshd\[29556\]: Failed password for invalid user admin from 164.132.46.197 port 53418 ssh2 Dec 27 08:13:56 ns3110291 sshd\[29595\]: Failed password for root from 164.132.46.197 port 53738 ssh2 Dec 27 08:16:34 ns3110291 sshd\[29644\]: Invalid user chocolateslim from 164.132.46.197 ... |
2019-12-27 18:11:51 |
| 103.85.17.131 | attack | Unauthorized connection attempt detected from IP address 103.85.17.131 to port 445 |
2019-12-27 18:18:45 |
| 134.209.165.41 | attackbotsspam | Rude login attack (5 tries in 1d) |
2019-12-27 18:30:34 |
| 114.135.144.253 | attackspam | Host Scan |
2019-12-27 18:45:01 |
| 142.4.208.165 | attack | Dec 27 09:59:40 cavern sshd[17773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.208.165 |
2019-12-27 18:28:59 |
| 185.175.93.21 | attack | 12/27/2019-10:51:15.060095 185.175.93.21 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-12-27 18:26:16 |