City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.192.129.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64992
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;148.192.129.56. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 17:44:40 CST 2025
;; MSG SIZE rcvd: 107Host 56.129.192.148.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 56.129.192.148.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 117.4.113.160 | attackbots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-07 05:12:35,404 INFO [amun_request_handler] PortScan Detected on Port: 445 (117.4.113.160) |
2019-08-08 00:58:14 |
| 14.226.214.33 | attack | Lines containing failures of 14.226.214.33 Aug 7 08:31:06 shared12 sshd[30223]: Invalid user admin from 14.226.214.33 port 35491 Aug 7 08:31:06 shared12 sshd[30223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.226.214.33 Aug 7 08:31:08 shared12 sshd[30223]: Failed password for invalid user admin from 14.226.214.33 port 35491 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.226.214.33 |
2019-08-08 01:24:14 |
| 134.119.193.63 | attack | Unauthorized access detected from banned ip |
2019-08-08 01:22:03 |
| 67.205.136.215 | attackbotsspam | 2019-08-07T09:11:35.151803centos sshd\[3334\]: Invalid user karika from 67.205.136.215 port 38630 2019-08-07T09:11:35.157408centos sshd\[3334\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.136.215 2019-08-07T09:11:37.098356centos sshd\[3334\]: Failed password for invalid user karika from 67.205.136.215 port 38630 ssh2 |
2019-08-08 01:17:50 |
| 50.62.176.236 | attackspambots | fail2ban honeypot |
2019-08-08 01:39:37 |
| 36.226.37.99 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-07 05:50:16,795 INFO [shellcode_manager] (36.226.37.99) no match, writing hexdump (06cb1cdc794ded1faa9f8ed0bf4f6df0 :10711) - SMB (Unknown) |
2019-08-08 01:10:11 |
| 84.235.67.241 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-07 05:09:12,940 INFO [amun_request_handler] PortScan Detected on Port: 445 (84.235.67.241) |
2019-08-08 01:12:27 |
| 216.218.191.102 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-08-08 01:06:51 |
| 141.98.81.111 | attackspam | Aug 7 19:47:26 * sshd[17556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.111 Aug 7 19:47:28 * sshd[17556]: Failed password for invalid user admin from 141.98.81.111 port 35216 ssh2 |
2019-08-08 01:52:42 |
| 162.247.74.216 | attackspam | Aug 5 17:13:20 tuxlinux sshd[8833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.74.216 user=root Aug 5 17:13:22 tuxlinux sshd[8833]: Failed password for root from 162.247.74.216 port 50724 ssh2 Aug 5 17:13:20 tuxlinux sshd[8833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.74.216 user=root Aug 5 17:13:22 tuxlinux sshd[8833]: Failed password for root from 162.247.74.216 port 50724 ssh2 Aug 5 17:13:20 tuxlinux sshd[8833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.74.216 user=root Aug 5 17:13:22 tuxlinux sshd[8833]: Failed password for root from 162.247.74.216 port 50724 ssh2 Aug 5 17:13:24 tuxlinux sshd[8833]: Failed password for root from 162.247.74.216 port 50724 ssh2 ... |
2019-08-08 01:13:31 |
| 181.120.217.244 | attack | Aug 7 20:41:17 yabzik sshd[28177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.120.217.244 Aug 7 20:41:19 yabzik sshd[28177]: Failed password for invalid user mathml from 181.120.217.244 port 54558 ssh2 Aug 7 20:47:03 yabzik sshd[29802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.120.217.244 |
2019-08-08 02:04:12 |
| 157.55.39.174 | attackbots | Automatic report - Banned IP Access |
2019-08-08 01:51:39 |
| 14.203.183.7 | attackspambots | Aug 7 19:33:51 server6 sshd[15114]: Bad protocol version identification '' from 14.203.183.7 port 56650 Aug 7 19:33:57 server6 sshd[15116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14-203-183-7.tpgi.com.au Aug 7 19:33:59 server6 sshd[15116]: Failed password for invalid user osboxes from 14.203.183.7 port 58548 ssh2 Aug 7 19:34:07 server6 sshd[15255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14-203-183-7.tpgi.com.au Aug 7 19:34:09 server6 sshd[15255]: Failed password for invalid user openhabian from 14.203.183.7 port 44296 ssh2 Aug 7 19:34:10 server6 sshd[15255]: Connection closed by 14.203.183.7 [preauth] Aug 7 19:34:16 server6 sshd[15514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14-203-183-7.tpgi.com.au Aug 7 19:34:18 server6 sshd[15514]: Failed password for invalid user nexthink from 14.203.183.7 port 56524 ssh2 ........ ------------------------------------- |
2019-08-08 01:54:26 |
| 192.3.194.61 | attack | Aug 6 18:12:53 localhost kernel: [16373766.394174] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=192.3.194.61 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=24265 PROTO=TCP SPT=47743 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 6 18:12:53 localhost kernel: [16373766.395072] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=192.3.194.61 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=24265 PROTO=TCP SPT=47743 DPT=445 SEQ=922042122 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 7 13:47:32 localhost kernel: [16444246.088146] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=192.3.194.61 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=19018 PROTO=TCP SPT=48446 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 7 13:47:32 localhost kernel: [16444246.088153] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=192.3.194.61 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x0 |
2019-08-08 01:51:21 |
| 201.161.58.189 | attackbotsspam | Aug 7 17:46:55 www_kotimaassa_fi sshd[30269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.161.58.189 Aug 7 17:46:57 www_kotimaassa_fi sshd[30269]: Failed password for invalid user parkyr from 201.161.58.189 port 39690 ssh2 ... |
2019-08-08 02:08:54 |