City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.85.92.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8727
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.85.92.148. IN A
;; AUTHORITY SECTION:
. 313 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019110102 1800 900 604800 86400
;; Query time: 288 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 02 15:02:23 CST 2019
;; MSG SIZE rcvd: 117148.92.85.148.in-addr.arpa domain name pointer pafwnat-148.subnet-92.amherst.edu.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
148.92.85.148.in-addr.arpa name = pafwnat-148.subnet-92.amherst.edu.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 140.143.158.169 | attack | Aug 23 15:48:51 kapalua sshd\[29748\]: Invalid user redmine from 140.143.158.169 Aug 23 15:48:51 kapalua sshd\[29748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.158.169 Aug 23 15:48:52 kapalua sshd\[29748\]: Failed password for invalid user redmine from 140.143.158.169 port 52937 ssh2 Aug 23 15:53:48 kapalua sshd\[30182\]: Invalid user xm from 140.143.158.169 Aug 23 15:53:48 kapalua sshd\[30182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.158.169 |
2019-08-24 16:28:54 |
| 64.183.216.62 | attack | Port Scan: UDP/137 |
2019-08-24 15:56:34 |
| 179.33.139.66 | attackbots | 2019-08-24T07:46:29.898388abusebot-2.cloudsearch.cf sshd\[30955\]: Invalid user lc from 179.33.139.66 port 34621 |
2019-08-24 16:18:00 |
| 58.27.217.75 | attackbots | 2019-08-24T01:14:43.647409abusebot-8.cloudsearch.cf sshd\[10317\]: Invalid user changeme from 58.27.217.75 port 35420 |
2019-08-24 16:21:19 |
| 112.252.17.80 | attackspam | Port Scan: TCP/80 |
2019-08-24 15:49:31 |
| 117.82.42.130 | attackbotsspam | Telnet Server BruteForce Attack |
2019-08-24 16:26:53 |
| 165.22.55.251 | attackspam | Port Scan: TCP/80 |
2019-08-24 15:46:19 |
| 173.161.242.217 | attackspam | Aug 23 22:21:05 eddieflores sshd\[6812\]: Invalid user sebastian from 173.161.242.217 Aug 23 22:21:05 eddieflores sshd\[6812\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173-161-242-217-philadelphia.hfc.comcastbusiness.net Aug 23 22:21:07 eddieflores sshd\[6812\]: Failed password for invalid user sebastian from 173.161.242.217 port 5701 ssh2 Aug 23 22:26:33 eddieflores sshd\[7271\]: Invalid user ops from 173.161.242.217 Aug 23 22:26:33 eddieflores sshd\[7271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173-161-242-217-philadelphia.hfc.comcastbusiness.net |
2019-08-24 16:37:10 |
| 54.38.178.106 | attackspambots | Port Scan: TCP/10000 |
2019-08-24 15:57:40 |
| 164.132.38.167 | attackbotsspam | Aug 24 05:07:20 ns341937 sshd[16671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.38.167 Aug 24 05:07:22 ns341937 sshd[16671]: Failed password for invalid user claudia from 164.132.38.167 port 52114 ssh2 Aug 24 05:15:35 ns341937 sshd[18447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.38.167 ... |
2019-08-24 16:15:19 |
| 171.118.239.70 | attackspam | Unauthorised access (Aug 24) SRC=171.118.239.70 LEN=40 TTL=49 ID=5906 TCP DPT=8080 WINDOW=36299 SYN Unauthorised access (Aug 24) SRC=171.118.239.70 LEN=40 TTL=49 ID=20418 TCP DPT=8080 WINDOW=55235 SYN Unauthorised access (Aug 23) SRC=171.118.239.70 LEN=40 TTL=49 ID=1184 TCP DPT=8080 WINDOW=53699 SYN Unauthorised access (Aug 23) SRC=171.118.239.70 LEN=40 TTL=49 ID=51035 TCP DPT=8080 WINDOW=38486 SYN |
2019-08-24 16:29:14 |
| 161.11.225.60 | attack | Port Scan: UDP/51294 |
2019-08-24 15:47:01 |
| 45.55.187.39 | attackspam | Automatic report |
2019-08-24 16:07:00 |
| 51.83.33.156 | attack | Aug 24 03:33:45 XXX sshd[43131]: Invalid user lucia from 51.83.33.156 port 60996 |
2019-08-24 16:32:52 |
| 51.253.15.27 | attackspambots | This IP address was blacklisted for the following reason: /nl/jobs/"%20and%20"x"%3D"x @ 2019-08-09T15:32:34+02:00. |
2019-08-24 15:58:46 |