City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 74.102.125.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6080
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;74.102.125.57. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 14:13:48 CST 2025
;; MSG SIZE rcvd: 10657.125.102.74.in-addr.arpa domain name pointer static-74-102-125-57.nwrknj.fios.verizon.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
57.125.102.74.in-addr.arpa name = static-74-102-125-57.nwrknj.fios.verizon.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 84.243.8.156 | attack | (Oct 4) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 2) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 2) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 2) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 2... |
2019-10-04 06:02:54 |
| 222.252.46.211 | attack | Honeypot attack, port: 445, PTR: static.vnpt.vn. |
2019-10-04 06:06:33 |
| 102.250.6.12 | attack | Brute force attempt |
2019-10-04 06:33:59 |
| 222.186.190.2 | attack | Oct 4 00:00:35 MK-Soft-Root1 sshd[5727]: Failed password for root from 222.186.190.2 port 26816 ssh2 Oct 4 00:00:40 MK-Soft-Root1 sshd[5727]: Failed password for root from 222.186.190.2 port 26816 ssh2 ... |
2019-10-04 06:07:17 |
| 112.65.201.26 | attackbotsspam | Oct 4 00:06:49 vps691689 sshd[5820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.65.201.26 Oct 4 00:06:50 vps691689 sshd[5820]: Failed password for invalid user zxvf from 112.65.201.26 port 23739 ssh2 Oct 4 00:10:43 vps691689 sshd[5914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.65.201.26 ... |
2019-10-04 06:15:53 |
| 93.40.27.89 | attackspam | Honeypot attack, port: 445, PTR: 93-40-27-89.ip36.fastwebnet.it. |
2019-10-04 06:23:41 |
| 125.254.90.166 | attackspam | Sep 30 03:18:36 h2421860 postfix/postscreen[7757]: CONNECT from [125.254.90.166]:59023 to [85.214.119.52]:25 Sep 30 03:18:36 h2421860 postfix/dnsblog[8534]: addr 125.254.90.166 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Sep 30 03:18:36 h2421860 postfix/dnsblog[8539]: addr 125.254.90.166 listed by domain zen.spamhaus.org as 127.0.0.3 Sep 30 03:18:36 h2421860 postfix/dnsblog[8539]: addr 125.254.90.166 listed by domain zen.spamhaus.org as 127.0.0.4 Sep 30 03:18:36 h2421860 postfix/dnsblog[8539]: addr 125.254.90.166 listed by domain Unknown.trblspam.com as 185.53.179.7 Sep 30 03:18:36 h2421860 postfix/dnsblog[8533]: addr 125.254.90.166 listed by domain bl.blocklist.de as 127.0.0.9 Sep 30 03:18:36 h2421860 postfix/dnsblog[8536]: addr 125.254.90.166 listed by domain b.barracudacentral.org as 127.0.0.2 Sep 30 03:18:36 h2421860 postfix/dnsblog[8540]: addr 125.254.90.166 listed by domain dnsbl.sorbs.net as 127.0.0.3 Sep 30 03:18:36 h2421860 postfix/dnsblog[8540]: addr 125........ ------------------------------- |
2019-10-04 06:15:03 |
| 45.136.109.194 | attackbots | 10/03/2019-17:02:35.196162 45.136.109.194 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-10-04 06:17:55 |
| 186.16.32.71 | attackbotsspam | Honeypot attack, port: 445, PTR: static-71-32-16-186.telecel.com.py. |
2019-10-04 06:17:01 |
| 148.72.207.248 | attack | Oct 3 21:51:50 web8 sshd\[25716\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.72.207.248 user=root Oct 3 21:51:52 web8 sshd\[25716\]: Failed password for root from 148.72.207.248 port 41824 ssh2 Oct 3 21:56:25 web8 sshd\[27882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.72.207.248 user=root Oct 3 21:56:26 web8 sshd\[27882\]: Failed password for root from 148.72.207.248 port 55878 ssh2 Oct 3 22:00:54 web8 sshd\[30046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.72.207.248 user=root |
2019-10-04 06:17:28 |
| 190.14.39.120 | attack | Oct 3 15:52:25 localhost kernel: [3870164.060382] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=190.14.39.120 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=84 ID=49083 DF PROTO=TCP SPT=59399 DPT=22 SEQ=1007349692 ACK=0 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 3 16:43:33 localhost kernel: [3873232.385241] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=190.14.39.120 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=85 ID=46577 DF PROTO=TCP SPT=65437 DPT=22 SEQ=397748118 ACK=0 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 3 16:52:24 localhost kernel: [3873763.037055] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=190.14.39.120 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=65 ID=11162 DF PROTO=TCP SPT=54519 DPT=22 SEQ=1620691768 ACK=0 WINDOW=29200 RES=0x00 SYN URGP=0 |
2019-10-04 06:07:59 |
| 185.244.173.250 | attackbotsspam | $f2bV_matches |
2019-10-04 06:02:03 |
| 139.59.94.225 | attack | Oct 3 23:55:11 nextcloud sshd\[13449\]: Invalid user prueba1 from 139.59.94.225 Oct 3 23:55:11 nextcloud sshd\[13449\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.225 Oct 3 23:55:14 nextcloud sshd\[13449\]: Failed password for invalid user prueba1 from 139.59.94.225 port 51764 ssh2 ... |
2019-10-04 06:21:22 |
| 222.186.15.101 | attackspam | Oct 3 12:09:23 tdfoods sshd\[2322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.101 user=root Oct 3 12:09:26 tdfoods sshd\[2322\]: Failed password for root from 222.186.15.101 port 51601 ssh2 Oct 3 12:09:27 tdfoods sshd\[2322\]: Failed password for root from 222.186.15.101 port 51601 ssh2 Oct 3 12:09:29 tdfoods sshd\[2322\]: Failed password for root from 222.186.15.101 port 51601 ssh2 Oct 3 12:18:05 tdfoods sshd\[3093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.101 user=root |
2019-10-04 06:18:49 |
| 47.98.138.161 | attackbotsspam | Automatic report - Port Scan Attack |
2019-10-04 06:32:10 |