City: unknown
Region: unknown
Country: Mexico
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.213.246.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33960
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;148.213.246.92. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012700 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 17:07:38 CST 2025
;; MSG SIZE rcvd: 107Host 92.246.213.148.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 92.246.213.148.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 34.80.133.2 | attack | Aug 4 03:09:10 nextcloud sshd\[12538\]: Invalid user htt from 34.80.133.2 Aug 4 03:09:10 nextcloud sshd\[12538\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.133.2 Aug 4 03:09:12 nextcloud sshd\[12538\]: Failed password for invalid user htt from 34.80.133.2 port 40682 ssh2 ... |
2019-08-04 09:27:01 |
| 78.23.191.146 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-04 00:35:43,818 INFO [amun_request_handler] PortScan Detected on Port: 445 (78.23.191.146) |
2019-08-04 10:15:33 |
| 141.105.66.253 | attack | DATE:2019-08-04 02:52:48, IP:141.105.66.253, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2019-08-04 09:45:50 |
| 65.51.216.95 | attackbotsspam | Aug 1 07:15:23 josie sshd[9144]: Bad protocol version identification '' from 65.51.216.95 Aug 1 07:15:37 josie sshd[9224]: Invalid user pi from 65.51.216.95 Aug 1 07:15:37 josie sshd[9224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.51.216.95 Aug 1 07:15:40 josie sshd[9224]: Failed password for invalid user pi from 65.51.216.95 port 43338 ssh2 Aug 1 07:15:40 josie sshd[9225]: Connection closed by 65.51.216.95 Aug 1 07:16:14 josie sshd[9453]: Invalid user openhabian from 65.51.216.95 Aug 1 07:16:14 josie sshd[9453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.51.216.95 Aug 1 07:16:16 josie sshd[9453]: Failed password for invalid user openhabian from 65.51.216.95 port 47434 ssh2 Aug 1 07:16:16 josie sshd[9454]: Connection closed by 65.51.216.95 Aug 1 07:16:41 josie sshd[9745]: Invalid user netscreen from 65.51.216.95 Aug 1 07:16:41 josie sshd[9745]: pam_unix(sshd:au........ ------------------------------- |
2019-08-04 09:38:42 |
| 192.162.35.177 | attack | Automatic report - Port Scan Attack |
2019-08-04 10:15:56 |
| 211.220.27.191 | attackspam | Aug 4 02:37:58 vtv3 sshd\[5448\]: Invalid user ftpuser from 211.220.27.191 port 41748 Aug 4 02:37:58 vtv3 sshd\[5448\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.220.27.191 Aug 4 02:38:00 vtv3 sshd\[5448\]: Failed password for invalid user ftpuser from 211.220.27.191 port 41748 ssh2 Aug 4 02:42:58 vtv3 sshd\[7860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.220.27.191 user=root Aug 4 02:43:00 vtv3 sshd\[7860\]: Failed password for root from 211.220.27.191 port 37992 ssh2 Aug 4 02:57:44 vtv3 sshd\[15153\]: Invalid user gx from 211.220.27.191 port 54376 Aug 4 02:57:44 vtv3 sshd\[15153\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.220.27.191 Aug 4 02:57:46 vtv3 sshd\[15153\]: Failed password for invalid user gx from 211.220.27.191 port 54376 ssh2 Aug 4 03:02:44 vtv3 sshd\[17522\]: Invalid user lair from 211.220.27.191 port 50620 Aug 4 03:02:44 vt |
2019-08-04 09:32:01 |
| 188.131.173.220 | attackspam | SSH Brute-Force attacks |
2019-08-04 09:23:13 |
| 184.148.249.38 | attackspam | Lines containing failures of 184.148.249.38 Aug 1 06:38:58 metroid sshd[20874]: Bad protocol version identification '' from 184.148.249.38 port 47768 Aug 1 06:38:58 metroid sshd[20875]: Invalid user openhabian from 184.148.249.38 port 47914 Aug 1 06:38:58 metroid sshd[20875]: Connection closed by invalid user openhabian 184.148.249.38 port 47914 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=184.148.249.38 |
2019-08-04 09:44:23 |
| 191.35.172.27 | attackbots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-04 00:39:00,727 INFO [amun_request_handler] PortScan Detected on Port: 445 (191.35.172.27) |
2019-08-04 10:02:51 |
| 112.85.42.94 | attackbotsspam | Aug 3 21:44:58 ny01 sshd[20530]: Failed password for root from 112.85.42.94 port 28375 ssh2 Aug 3 21:50:57 ny01 sshd[20996]: Failed password for root from 112.85.42.94 port 40962 ssh2 Aug 3 21:50:59 ny01 sshd[20996]: Failed password for root from 112.85.42.94 port 40962 ssh2 |
2019-08-04 09:55:04 |
| 60.251.53.226 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-04 00:36:59,572 INFO [amun_request_handler] PortScan Detected on Port: 445 (60.251.53.226) |
2019-08-04 10:09:16 |
| 211.215.58.113 | attackspambots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-04 00:46:17,380 INFO [amun_request_handler] PortScan Detected on Port: 3389 (211.215.58.113) |
2019-08-04 09:28:05 |
| 138.91.38.223 | attackbotsspam | Microsoft-Windows-Security-Auditing |
2019-08-04 09:50:46 |
| 115.78.5.244 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-04 00:45:26,248 INFO [amun_request_handler] PortScan Detected on Port: 445 (115.78.5.244) |
2019-08-04 09:37:06 |
| 23.247.118.10 | attackbots | Excessive Port-Scanning |
2019-08-04 09:47:47 |