City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 72.73.52.206
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15857
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;72.73.52.206. IN A
;; AUTHORITY SECTION:
. 471 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022052900 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 29 14:09:52 CST 2022
;; MSG SIZE rcvd: 105206.52.73.72.in-addr.arpa domain name pointer host.defensegp.us.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
206.52.73.72.in-addr.arpa name = host.defensegp.us.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 196.52.43.106 | attackbots | 62078/tcp 5289/tcp 2161/tcp... [2019-05-28/07-26]53pkt,31pt.(tcp),7pt.(udp) |
2019-07-28 17:58:01 |
| 206.189.136.160 | attackbots | 'Fail2Ban' |
2019-07-28 17:42:35 |
| 79.140.20.253 | attackbots | Automatic report - Port Scan Attack |
2019-07-28 18:14:17 |
| 45.79.105.161 | attackspambots | RDP Scan |
2019-07-28 18:16:54 |
| 186.183.158.210 | attack | port scan and connect, tcp 23 (telnet) |
2019-07-28 18:58:52 |
| 58.185.64.222 | attackspam | Jul 28 12:33:51 s0 sshd\[95912\]: Invalid user P@ss123!@\# from 58.185.64.222 port 41501 Jul 28 12:33:51 s0 sshd\[95912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.185.64.222 Jul 28 12:33:53 s0 sshd\[95912\]: Failed password for invalid user P@ss123!@\# from 58.185.64.222 port 41501 ssh2 ... |
2019-07-28 19:06:39 |
| 104.222.111.207 | attackbots | Port scan and direct access per IP instead of hostname |
2019-07-28 17:41:26 |
| 5.196.131.167 | attack | Non-stop spam. |
2019-07-28 18:15:47 |
| 81.22.45.95 | attackspambots | Jul 28 08:41:53 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.95 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=6213 PROTO=TCP SPT=57926 DPT=3396 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-07-28 17:44:46 |
| 195.49.150.18 | attackspambots | Unauthorized connection attempt from IP address 195.49.150.18 on Port 3389(RDP) |
2019-07-28 19:05:41 |
| 104.194.11.156 | attackspambots | Jul 28 11:40:05 debian sshd\[21798\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.194.11.156 user=root Jul 28 11:40:08 debian sshd\[21798\]: Failed password for root from 104.194.11.156 port 43530 ssh2 ... |
2019-07-28 18:45:46 |
| 74.63.251.206 | attackspam | Jul 28 09:51:07 h2177944 kernel: \[2624272.068258\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=74.63.251.206 DST=85.214.117.9 LEN=433 TOS=0x00 PREC=0x00 TTL=46 ID=14110 DF PROTO=UDP SPT=5146 DPT=5065 LEN=413 Jul 28 09:54:33 h2177944 kernel: \[2624477.850537\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=74.63.251.206 DST=85.214.117.9 LEN=430 TOS=0x00 PREC=0x00 TTL=46 ID=56905 DF PROTO=UDP SPT=5134 DPT=1720 LEN=410 Jul 28 09:55:37 h2177944 kernel: \[2624542.124303\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=74.63.251.206 DST=85.214.117.9 LEN=432 TOS=0x00 PREC=0x00 TTL=46 ID=25002 DF PROTO=UDP SPT=5227 DPT=1718 LEN=412 Jul 28 09:56:39 h2177944 kernel: \[2624603.707631\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=74.63.251.206 DST=85.214.117.9 LEN=432 TOS=0x00 PREC=0x00 TTL=46 ID=58063 DF PROTO=UDP SPT=5266 DPT=1719 LEN=412 Jul 28 09:58:05 h2177944 kernel: \[2624690.081043\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=74.63.251.206 DST=85.214.117.9 LEN=429 TOS=0x00 PREC=0x00 TTL=46 ID=38136 DF PROTO=UDP SPT=5176 DPT=1071 LEN=409 ... |
2019-07-28 18:26:51 |
| 142.93.58.123 | attack | Automatic report - Banned IP Access |
2019-07-28 17:59:34 |
| 128.199.140.131 | attack | Jul 28 03:02:57 [munged] sshd[21829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.140.131 user=root Jul 28 03:02:59 [munged] sshd[21829]: Failed password for root from 128.199.140.131 port 45662 ssh2 |
2019-07-28 19:08:34 |
| 162.243.144.104 | attackbots | 15790/tcp 2082/tcp 31904/tcp... [2019-05-27/07-27]52pkt,44pt.(tcp),3pt.(udp) |
2019-07-28 18:00:06 |