City: Portland
Region: Oregon
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 75.164.64.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18548
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;75.164.64.242. IN A
;; AUTHORITY SECTION:
. 308 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020092701 1800 900 604800 86400
;; Query time: 121 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 28 09:13:47 CST 2020
;; MSG SIZE rcvd: 117242.64.164.75.in-addr.arpa domain name pointer 75-164-64-242.ptld.qwest.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
242.64.164.75.in-addr.arpa name = 75-164-64-242.ptld.qwest.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 175.162.2.165 | attack | Jun 23 03:55:04 pbkit sshd[242011]: Failed password for invalid user german from 175.162.2.165 port 55308 ssh2 Jun 23 03:57:51 pbkit sshd[242086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.162.2.165 user=root Jun 23 03:57:53 pbkit sshd[242086]: Failed password for root from 175.162.2.165 port 59442 ssh2 ... |
2020-06-23 12:28:41 |
| 122.181.16.134 | attack | Repeated brute force against a port |
2020-06-23 12:38:42 |
| 37.49.224.187 | attack | Jun 23 05:58:19 debian-2gb-nbg1-2 kernel: \[15143371.668054\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=37.49.224.187 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=35365 PROTO=TCP SPT=59848 DPT=5038 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-23 12:04:54 |
| 46.35.19.18 | attackspambots | 2020-06-22T21:58:13.787104linuxbox-skyline sshd[106305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.35.19.18 user=root 2020-06-22T21:58:15.722284linuxbox-skyline sshd[106305]: Failed password for root from 46.35.19.18 port 33411 ssh2 ... |
2020-06-23 12:06:45 |
| 147.203.238.18 | attack | Portscan or hack attempt detected by psad/fwsnort |
2020-06-23 12:31:36 |
| 167.172.231.211 | attack | TCP port : 3239 |
2020-06-23 12:13:42 |
| 136.255.144.2 | attackspam | Jun 23 05:54:08 localhost sshd\[18609\]: Invalid user test1 from 136.255.144.2 Jun 23 05:54:08 localhost sshd\[18609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.255.144.2 Jun 23 05:54:10 localhost sshd\[18609\]: Failed password for invalid user test1 from 136.255.144.2 port 43328 ssh2 Jun 23 05:58:13 localhost sshd\[18881\]: Invalid user mayank from 136.255.144.2 Jun 23 05:58:13 localhost sshd\[18881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.255.144.2 ... |
2020-06-23 12:08:08 |
| 89.151.186.46 | attackbots | Jun 23 06:26:30 localhost sshd\[20873\]: Invalid user dmr from 89.151.186.46 Jun 23 06:26:30 localhost sshd\[20873\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.151.186.46 Jun 23 06:26:32 localhost sshd\[20873\]: Failed password for invalid user dmr from 89.151.186.46 port 15761 ssh2 Jun 23 06:29:53 localhost sshd\[20964\]: Invalid user anni from 89.151.186.46 Jun 23 06:29:53 localhost sshd\[20964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.151.186.46 ... |
2020-06-23 12:41:19 |
| 2.87.207.4 | attack | Brute forcing email accounts |
2020-06-23 12:13:23 |
| 182.74.86.27 | attackbots | SSH Login Bruteforce |
2020-06-23 12:04:09 |
| 106.12.60.40 | attackspambots | Jun 23 06:03:54 vserver sshd\[17952\]: Invalid user wgx from 106.12.60.40Jun 23 06:03:56 vserver sshd\[17952\]: Failed password for invalid user wgx from 106.12.60.40 port 53202 ssh2Jun 23 06:06:46 vserver sshd\[17973\]: Invalid user rama from 106.12.60.40Jun 23 06:06:48 vserver sshd\[17973\]: Failed password for invalid user rama from 106.12.60.40 port 45762 ssh2 ... |
2020-06-23 12:19:49 |
| 200.105.183.118 | attack | Jun 23 03:57:57 *** sshd[22998]: Invalid user lorena from 200.105.183.118 |
2020-06-23 12:21:28 |
| 103.125.216.5 | attackbots | 2020-06-23T03:53:06.419150shield sshd\[30431\]: Invalid user CHANGED from 103.125.216.5 port 49312 2020-06-23T03:53:06.421963shield sshd\[30431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=service.dynamikosoft.com 2020-06-23T03:53:08.546425shield sshd\[30431\]: Failed password for invalid user CHANGED from 103.125.216.5 port 49312 ssh2 2020-06-23T03:58:36.863708shield sshd\[32035\]: Invalid user debian-spamd from 103.125.216.5 port 42136 2020-06-23T03:58:36.867444shield sshd\[32035\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=service.dynamikosoft.com |
2020-06-23 12:12:04 |
| 45.145.66.11 | attack | 06/23/2020-00:02:30.689954 45.145.66.11 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-06-23 12:15:49 |
| 139.59.66.245 | attack | Fail2Ban Ban Triggered |
2020-06-23 12:24:25 |