City: unknown
Region: unknown
Country: Netherlands (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.200.3.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16497
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;148.200.3.94. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020301 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 02:43:22 CST 2025
;; MSG SIZE rcvd: 105
Host 94.3.200.148.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 94.3.200.148.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 27.203.159.220 | attackbots | 8080/udp [2020-10-03]1pkt |
2020-10-04 23:58:10 |
| 171.253.176.31 | attackspam | SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: dynamic-ip-adsl.viettel.vn. |
2020-10-05 00:10:24 |
| 144.34.194.39 | attack | (sshd) Failed SSH login from 144.34.194.39 (US/United States/144.34.194.39.16clouds.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 4 04:57:43 server sshd[31256]: Failed password for root from 144.34.194.39 port 18748 ssh2 Oct 4 05:13:23 server sshd[2789]: Invalid user share from 144.34.194.39 port 50398 Oct 4 05:13:25 server sshd[2789]: Failed password for invalid user share from 144.34.194.39 port 50398 ssh2 Oct 4 05:26:45 server sshd[5899]: Invalid user share from 144.34.194.39 port 59798 Oct 4 05:26:47 server sshd[5899]: Failed password for invalid user share from 144.34.194.39 port 59798 ssh2 |
2020-10-04 23:59:05 |
| 142.93.122.207 | attackbots | 142.93.122.207 - - [04/Oct/2020:18:20:02 +0200] "GET /wp-login.php HTTP/1.1" 200 1984 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.122.207 - - [04/Oct/2020:18:20:08 +0200] "POST /wp-login.php HTTP/1.1" 200 2104 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.122.207 - - [04/Oct/2020:18:20:13 +0200] "GET /wp-login.php HTTP/1.1" 200 1984 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.122.207 - - [04/Oct/2020:18:20:14 +0200] "POST /wp-login.php HTTP/1.1" 200 2090 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.122.207 - - [04/Oct/2020:18:20:19 +0200] "GET /wp-login.php HTTP/1.1" 200 1984 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.122.207 - - [04/Oct/2020:18:20:20 +0200] "POST /wp-login.php HTTP/1.1" 200 2091 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/201001 ... |
2020-10-05 00:28:37 |
| 112.85.42.69 | attackspam | Oct 4 18:00:14 pve1 sshd[26523]: Failed password for root from 112.85.42.69 port 45270 ssh2 Oct 4 18:00:19 pve1 sshd[26523]: Failed password for root from 112.85.42.69 port 45270 ssh2 ... |
2020-10-05 00:22:46 |
| 165.232.43.124 | attackbots | Oct 3 16:14:26 r.ca sshd[16889]: Failed password for invalid user bruno from 165.232.43.124 port 44674 ssh2 |
2020-10-04 23:56:42 |
| 139.199.170.101 | attack | Oct 4 13:56:05 abendstille sshd\[3409\]: Invalid user ps from 139.199.170.101 Oct 4 13:56:05 abendstille sshd\[3409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.170.101 Oct 4 13:56:06 abendstille sshd\[3409\]: Failed password for invalid user ps from 139.199.170.101 port 57362 ssh2 Oct 4 14:01:07 abendstille sshd\[7928\]: Invalid user openhab from 139.199.170.101 Oct 4 14:01:07 abendstille sshd\[7928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.170.101 ... |
2020-10-05 00:04:09 |
| 112.85.42.237 | attackspambots | Oct 4 12:19:38 NPSTNNYC01T sshd[27695]: Failed password for root from 112.85.42.237 port 56339 ssh2 Oct 4 12:20:29 NPSTNNYC01T sshd[27793]: Failed password for root from 112.85.42.237 port 50617 ssh2 Oct 4 12:20:31 NPSTNNYC01T sshd[27793]: Failed password for root from 112.85.42.237 port 50617 ssh2 ... |
2020-10-05 00:32:20 |
| 112.85.42.87 | attack | Oct 4 15:53:04 ip-172-31-42-142 sshd\[19636\]: Failed password for root from 112.85.42.87 port 57671 ssh2\ Oct 4 15:53:06 ip-172-31-42-142 sshd\[19636\]: Failed password for root from 112.85.42.87 port 57671 ssh2\ Oct 4 15:53:09 ip-172-31-42-142 sshd\[19636\]: Failed password for root from 112.85.42.87 port 57671 ssh2\ Oct 4 15:55:58 ip-172-31-42-142 sshd\[19659\]: Failed password for root from 112.85.42.87 port 43450 ssh2\ Oct 4 15:56:00 ip-172-31-42-142 sshd\[19659\]: Failed password for root from 112.85.42.87 port 43450 ssh2\ |
2020-10-05 00:21:33 |
| 183.105.172.94 | attackbots | Automatic report - Banned IP Access |
2020-10-04 23:58:42 |
| 180.76.135.187 | attack | SIP/5060 Probe, BF, Hack - |
2020-10-05 00:02:29 |
| 118.27.95.212 | attackspam | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-10-05 00:19:19 |
| 34.94.192.185 | attack | 21 attempts against mh-ssh on air |
2020-10-05 00:09:20 |
| 192.241.236.167 | attackspambots | UDP port : 5351 |
2020-10-05 00:28:04 |
| 141.98.9.162 | attack | SSH Brute-Force attacks |
2020-10-04 23:54:21 |