City: Portland
Region: Oregon
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: Comcast Cable Communications, LLC
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 96.71.189.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13245
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;96.71.189.20. IN A
;; AUTHORITY SECTION:
. 3522 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019040301 1800 900 604800 86400
;; Query time: 1 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Thu Apr 04 12:37:38 +08 2019
;; MSG SIZE rcvd: 116
20.189.71.96.in-addr.arpa domain name pointer 96-71-189-20-static.hfc.comcastbusiness.net.
Server: 67.207.67.3
Address: 67.207.67.3#53
Non-authoritative answer:
20.189.71.96.in-addr.arpa name = 96-71-189-20-static.hfc.comcastbusiness.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 195.154.176.103 | attack | 2020-07-05T16:50:31.505593lavrinenko.info sshd[2535]: Failed password for invalid user jsz from 195.154.176.103 port 60710 ssh2 2020-07-05T16:53:05.887886lavrinenko.info sshd[2555]: Invalid user cti from 195.154.176.103 port 49636 2020-07-05T16:53:05.896903lavrinenko.info sshd[2555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.176.103 2020-07-05T16:53:05.887886lavrinenko.info sshd[2555]: Invalid user cti from 195.154.176.103 port 49636 2020-07-05T16:53:07.971627lavrinenko.info sshd[2555]: Failed password for invalid user cti from 195.154.176.103 port 49636 ssh2 ... |
2020-07-05 22:51:27 |
| 92.63.197.88 | attackspam | 07/05/2020-09:33:53.472635 92.63.197.88 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-07-05 23:01:32 |
| 150.109.99.68 | attackbotsspam | Jul 5 16:31:48 PorscheCustomer sshd[7730]: Failed password for root from 150.109.99.68 port 45100 ssh2 Jul 5 16:34:11 PorscheCustomer sshd[7774]: Failed password for postgres from 150.109.99.68 port 33504 ssh2 ... |
2020-07-05 22:57:01 |
| 185.39.11.34 | attack | ET DROP Spamhaus DROP Listed Traffic Inbound group 18 - port: 3992 proto: TCP cat: Misc Attack |
2020-07-05 22:55:08 |
| 185.200.118.75 | attackspam | scans once in preceeding hours on the ports (in chronological order) 1194 resulting in total of 5 scans from 185.200.118.0/24 block. |
2020-07-05 22:30:38 |
| 185.156.73.52 | attackbots | ET DROP Dshield Block Listed Source group 1 - port: 10215 proto: TCP cat: Misc Attack |
2020-07-05 22:53:24 |
| 40.73.6.1 | attackbots | Jul 5 16:41:15 ArkNodeAT sshd\[1969\]: Invalid user student from 40.73.6.1 Jul 5 16:41:15 ArkNodeAT sshd\[1969\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.6.1 Jul 5 16:41:17 ArkNodeAT sshd\[1969\]: Failed password for invalid user student from 40.73.6.1 port 1172 ssh2 |
2020-07-05 22:49:10 |
| 23.95.242.76 | attackspambots |
|
2020-07-05 22:26:57 |
| 52.252.56.58 | attack | ET SCAN Sipvicious User-Agent Detected (friendly-scanner) - port: 5060 proto: UDP cat: Attempted Information Leak |
2020-07-05 22:20:56 |
| 92.63.197.70 | attack |
|
2020-07-05 23:02:30 |
| 64.225.115.188 | attack | scans once in preceeding hours on the ports (in chronological order) 20057 resulting in total of 4 scans from 64.225.0.0/17 block. |
2020-07-05 22:44:16 |
| 185.39.11.59 | attackbotsspam | ET DROP Spamhaus DROP Listed Traffic Inbound group 18 - port: 21168 proto: TCP cat: Misc Attack |
2020-07-05 22:31:11 |
| 51.91.100.120 | attackspambots | 5x Failed Password |
2020-07-05 22:21:51 |
| 218.29.188.14 | attack | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2020-07-05 22:50:29 |
| 45.136.109.158 | attackbots | Unauthorized connection attempt detected from IP address 45.136.109.158 to port 4489 [T] |
2020-07-05 22:47:55 |