City: Lexington-Fayette
Region: Kentucky
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 98.120.148.211
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50250
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;98.120.148.211. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021002 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 12:14:30 CST 2025
;; MSG SIZE rcvd: 107211.148.120.98.in-addr.arpa domain name pointer syn-098-120-148-211.inf.spectrum.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
211.148.120.98.in-addr.arpa name = syn-098-120-148-211.inf.spectrum.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 23.129.64.209 | attack | Oct 2 08:06:39 rotator sshd\[9875\]: Failed password for root from 23.129.64.209 port 56448 ssh2Oct 2 08:06:42 rotator sshd\[9875\]: Failed password for root from 23.129.64.209 port 56448 ssh2Oct 2 08:06:45 rotator sshd\[9875\]: Failed password for root from 23.129.64.209 port 56448 ssh2Oct 2 08:06:48 rotator sshd\[9875\]: Failed password for root from 23.129.64.209 port 56448 ssh2Oct 2 08:06:51 rotator sshd\[9875\]: Failed password for root from 23.129.64.209 port 56448 ssh2Oct 2 08:06:53 rotator sshd\[9875\]: Failed password for root from 23.129.64.209 port 56448 ssh2 ... |
2019-10-02 14:48:13 |
| 123.214.186.186 | attack | 10/02/2019-02:19:06.989901 123.214.186.186 Protocol: 6 ET COMPROMISED Known Compromised or Hostile Host Traffic group 6 |
2019-10-02 14:52:22 |
| 1.129.109.13 | attackspambots | Oct 2 13:28:36 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=1.129.109.13 user=tupper Oct 2 13:28:39 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=1.129.109.13 user=tupper Oct 2 13:28:44 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=1.129.109.13 user=tupper Oct 2 13:28:48 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=1.129.109.13 user=tupper Oct 2 13:28:49 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=1.129.109.13 user=tupper Oct 2 13:28:51 apex-mail dovecot-auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=1.129.109.13 user=tupper ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip= |
2019-10-02 15:07:38 |
| 138.0.6.215 | attackspam | Oct 1 17:13:33 f201 sshd[27958]: Connection closed by 138.0.6.215 [preauth] Oct 1 18:33:58 f201 sshd[16495]: Connection closed by 138.0.6.215 [preauth] Oct 1 21:25:15 f201 sshd[28766]: Connection closed by 138.0.6.215 [preauth] Oct 2 05:05:40 f201 sshd[19477]: Connection closed by 138.0.6.215 [preauth] Oct 2 05:42:00 f201 sshd[28850]: Connection closed by 138.0.6.215 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=138.0.6.215 |
2019-10-02 15:06:22 |
| 185.53.229.10 | attackbots | Oct 2 08:48:12 SilenceServices sshd[1893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.53.229.10 Oct 2 08:48:13 SilenceServices sshd[1893]: Failed password for invalid user password from 185.53.229.10 port 47282 ssh2 Oct 2 08:52:09 SilenceServices sshd[3039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.53.229.10 |
2019-10-02 14:57:56 |
| 187.72.78.245 | attackspambots | Oct 1 17:39:55 f201 sshd[2232]: reveeclipse mapping checking getaddrinfo for 187-072-078-245.static.ctbctelecom.com.br [187.72.78.245] failed - POSSIBLE BREAK-IN ATTEMPT! Oct 1 17:39:56 f201 sshd[2232]: Connection closed by 187.72.78.245 [preauth] Oct 2 05:08:57 f201 sshd[19972]: reveeclipse mapping checking getaddrinfo for 187-072-078-245.static.ctbctelecom.com.br [187.72.78.245] failed - POSSIBLE BREAK-IN ATTEMPT! Oct 2 05:08:57 f201 sshd[19972]: Connection closed by 187.72.78.245 [preauth] Oct 2 05:34:29 f201 sshd[26628]: reveeclipse mapping checking getaddrinfo for 187-072-078-245.static.ctbctelecom.com.br [187.72.78.245] failed - POSSIBLE BREAK-IN ATTEMPT! ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=187.72.78.245 |
2019-10-02 15:02:49 |
| 78.137.8.188 | attackspambots | Connection by 78.137.8.188 on port: 23 got caught by honeypot at 10/1/2019 8:50:36 PM |
2019-10-02 15:30:48 |
| 14.248.234.105 | attackspam | 14.248.234.105 has been banned for [spam] ... |
2019-10-02 15:00:37 |
| 149.56.16.168 | attack | Oct 1 21:05:32 sachi sshd\[3970\]: Invalid user amx from 149.56.16.168 Oct 1 21:05:32 sachi sshd\[3970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns526371.ip-149-56-16.net Oct 1 21:05:33 sachi sshd\[3970\]: Failed password for invalid user amx from 149.56.16.168 port 52806 ssh2 Oct 1 21:09:31 sachi sshd\[4356\]: Invalid user oe from 149.56.16.168 Oct 1 21:09:31 sachi sshd\[4356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns526371.ip-149-56-16.net |
2019-10-02 15:12:24 |
| 149.129.252.83 | attackspam | Oct 2 06:54:02 bouncer sshd\[3813\]: Invalid user cron from 149.129.252.83 port 40216 Oct 2 06:54:02 bouncer sshd\[3813\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.129.252.83 Oct 2 06:54:04 bouncer sshd\[3813\]: Failed password for invalid user cron from 149.129.252.83 port 40216 ssh2 ... |
2019-10-02 15:08:39 |
| 190.146.32.200 | attackspambots | Oct 2 09:15:48 dedicated sshd[20645]: Invalid user kkkkk from 190.146.32.200 port 33064 |
2019-10-02 15:22:27 |
| 160.153.154.142 | attackbotsspam | 160.153.154.142 - - [01/Oct/2019:23:51:12 -0400] "GET /?action=view&manufacturerID=158&productID=29211&linkID=13000&redirect=1&page=products1111111111111'%20UNION%20SELECT%20CHAR(45,120,49,45,81,45)--%20%20 HTTP/1.1" 302 379 "-" "-" 160.153.154.142 - - [01/Oct/2019:23:51:13 -0400] "GET /?action=view&manufacturerID=158&productID=29211&linkID=13000&redirect=1&page=products1111111111111'%20UNION%20SELECT%20CHAR(45,120,49,45,81,45)--%20%20 HTTP/1.1" 200 56468 "-" "-" ... |
2019-10-02 14:58:42 |
| 173.239.37.152 | attackbotsspam | Oct 2 08:31:29 dedicated sshd[15138]: Invalid user Jukka from 173.239.37.152 port 46518 |
2019-10-02 14:51:23 |
| 113.169.153.52 | attackbotsspam | Oct 2 05:11:06 f201 sshd[20906]: Address 113.169.153.52 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 2 05:11:06 f201 sshd[20906]: Connection closed by 113.169.153.52 [preauth] Oct 2 05:35:25 f201 sshd[27289]: Address 113.169.153.52 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=113.169.153.52 |
2019-10-02 15:13:56 |
| 209.97.161.46 | attack | Jan 29 12:55:16 vtv3 sshd\[27684\]: Invalid user db2fenc1 from 209.97.161.46 port 60774 Jan 29 12:55:16 vtv3 sshd\[27684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.161.46 Jan 29 12:55:17 vtv3 sshd\[27684\]: Failed password for invalid user db2fenc1 from 209.97.161.46 port 60774 ssh2 Jan 29 13:00:15 vtv3 sshd\[29029\]: Invalid user ellie from 209.97.161.46 port 36526 Jan 29 13:00:15 vtv3 sshd\[29029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.161.46 Feb 2 19:52:59 vtv3 sshd\[23692\]: Invalid user kai from 209.97.161.46 port 45544 Feb 2 19:52:59 vtv3 sshd\[23692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.161.46 Feb 2 19:53:01 vtv3 sshd\[23692\]: Failed password for invalid user kai from 209.97.161.46 port 45544 ssh2 Feb 2 19:57:57 vtv3 sshd\[25069\]: Invalid user ts1 from 209.97.161.46 port 49484 Feb 2 19:57:57 vtv3 sshd\[25069\]: pam_u |
2019-10-02 14:56:49 |