City: Pittsburgh
Region: Pennsylvania
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 136.142.14.225
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31636
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;136.142.14.225. IN A
;; AUTHORITY SECTION:
. 188 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020051502 1800 900 604800 86400
;; Query time: 107 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 16 07:51:35 CST 2020
;; MSG SIZE rcvd: 118225.14.142.136.in-addr.arpa domain name pointer vl2236ha.rd-dev-core-1.gw.pitt.edu.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
225.14.142.136.in-addr.arpa name = vl2236ha.rd-dev-core-1.gw.pitt.edu.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.175.93.15 | attackbots | Port-scan: detected 101 distinct ports within a 24-hour window. |
2020-04-25 22:26:07 |
| 125.64.94.221 | attackspambots | 125.64.94.221 was recorded 8 times by 6 hosts attempting to connect to the following ports: 3337,1911,8649,12203,2053,2332,38. Incident counter (4h, 24h, all-time): 8, 34, 4990 |
2020-04-25 22:33:32 |
| 188.173.97.144 | attack | 2020-04-25T13:22:02.113120homeassistant sshd[7064]: Invalid user vb from 188.173.97.144 port 48072 2020-04-25T13:22:02.128824homeassistant sshd[7064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.173.97.144 ... |
2020-04-25 22:01:32 |
| 117.50.23.52 | attackspambots | scans once in preceeding hours on the ports (in chronological order) 10333 resulting in total of 1 scans from 117.50.0.0/16 block. |
2020-04-25 22:34:30 |
| 223.16.25.134 | attackbotsspam | Honeypot attack, port: 5555, PTR: 134-25-16-223-on-nets.com. |
2020-04-25 22:07:34 |
| 91.190.232.9 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-04-25 21:55:15 |
| 184.105.247.252 | attackspam | Unauthorized connection attempt detected from IP address 184.105.247.252 to port 23 |
2020-04-25 22:28:48 |
| 185.156.73.60 | attack | scans 27 times in preceeding hours on the ports (in chronological order) 23389 3390 6689 33891 43389 33789 3381 33079 32389 3384 4489 5589 33789 3030 43389 13389 3390 3394 9090 9989 3395 33891 33892 3399 3392 8899 3398 resulting in total of 31 scans from 185.156.72.0/22 block. |
2020-04-25 22:27:21 |
| 185.175.93.34 | attackspam | 04/25/2020-09:23:38.923588 185.175.93.34 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-04-25 22:25:26 |
| 122.188.208.110 | attackbots | W 5701,/var/log/auth.log,-,- |
2020-04-25 22:02:02 |
| 194.31.244.46 | attack | scans 16 times in preceeding hours on the ports (in chronological order) 7745 7707 7727 7738 7736 7748 7700 7724 7726 7744 7743 7708 7709 7747 7711 7737 resulting in total of 49 scans from 194.31.244.0/24 block. |
2020-04-25 22:20:06 |
| 162.250.120.119 | attackbots | probes 11 times on the port 52869 resulting in total of 11 scans from 162.250.120.0/21 block. |
2020-04-25 22:32:50 |
| 103.141.158.47 | attack | Email rejected due to spam filtering |
2020-04-25 22:13:49 |
| 148.72.65.10 | attackspam | 2020-04-25T09:02:06.9573241495-001 sshd[37690]: Invalid user garrysmod from 148.72.65.10 port 49704 2020-04-25T09:02:08.4776491495-001 sshd[37690]: Failed password for invalid user garrysmod from 148.72.65.10 port 49704 ssh2 2020-04-25T09:04:15.6932541495-001 sshd[37782]: Invalid user ubuntu from 148.72.65.10 port 57164 2020-04-25T09:04:15.6964641495-001 sshd[37782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-148-72-65-10.ip.secureserver.net 2020-04-25T09:04:15.6932541495-001 sshd[37782]: Invalid user ubuntu from 148.72.65.10 port 57164 2020-04-25T09:04:18.2530971495-001 sshd[37782]: Failed password for invalid user ubuntu from 148.72.65.10 port 57164 ssh2 ... |
2020-04-25 21:59:37 |
| 184.105.139.107 | attackbotsspam | scans once in preceeding hours on the ports (in chronological order) 11211 resulting in total of 8 scans from 184.105.0.0/16 block. |
2020-04-25 22:30:54 |