City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 48.147.252.9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5052
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;48.147.252.9. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012800 1800 900 604800 86400
;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 00:19:25 CST 2025
;; MSG SIZE rcvd: 105Host 9.252.147.48.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 9.252.147.48.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 109.224.232.102 | attackspam | ET INFO Session Traversal Utilities for NAT (STUN Binding Response) - port: 4942 proto: udp cat: Attempted User Privilege Gainbytes: 254 |
2020-10-14 04:59:22 |
| 185.171.10.96 | attackspambots | Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "db2si4" at 2020-10-13T18:27:00Z |
2020-10-14 04:52:12 |
| 71.6.167.142 | attackbotsspam | ET CINS Active Threat Intelligence Poor Reputation IP group 65 - port: 5060 proto: sip cat: Misc Attackbytes: 271 |
2020-10-14 05:06:43 |
| 172.105.11.150 | attackbotsspam | ET SCAN Suspicious inbound to PostgreSQL port 5432 - port: 5432 proto: tcp cat: Potentially Bad Trafficbytes: 60 |
2020-10-14 04:57:18 |
| 177.42.216.164 | attackbots | 1602535371 - 10/12/2020 22:42:51 Host: 177.42.216.164/177.42.216.164 Port: 445 TCP Blocked |
2020-10-14 04:52:37 |
| 14.185.180.118 | attackbotsspam | Oct 12 13:17:11 cumulus sshd[6794]: Invalid user frank from 14.185.180.118 port 47536 Oct 12 13:17:11 cumulus sshd[6794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.185.180.118 Oct 12 13:17:13 cumulus sshd[6794]: Failed password for invalid user frank from 14.185.180.118 port 47536 ssh2 Oct 12 13:17:13 cumulus sshd[6794]: Received disconnect from 14.185.180.118 port 47536:11: Bye Bye [preauth] Oct 12 13:17:13 cumulus sshd[6794]: Disconnected from 14.185.180.118 port 47536 [preauth] Oct 12 13:20:54 cumulus sshd[7133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.185.180.118 user=r.r Oct 12 13:20:56 cumulus sshd[7133]: Failed password for r.r from 14.185.180.118 port 45414 ssh2 Oct 12 13:20:56 cumulus sshd[7133]: Received disconnect from 14.185.180.118 port 45414:11: Bye Bye [preauth] Oct 12 13:20:56 cumulus sshd[7133]: Disconnected from 14.185.180.118 port 45414 [preauth] ........ ---------------------------------- |
2020-10-14 04:50:56 |
| 132.148.22.54 | attackspam | 132.148.22.54 - - [13/Oct/2020:20:01:19 +0200] "GET /wp-login.php HTTP/1.1" 200 8558 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 132.148.22.54 - - [13/Oct/2020:20:01:21 +0200] "POST /wp-login.php HTTP/1.1" 200 8809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 132.148.22.54 - - [13/Oct/2020:20:01:22 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-10-14 04:48:41 |
| 45.129.33.149 | attackspam | ET DROP Dshield Block Listed Source group 1 - port: 39590 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-14 05:25:20 |
| 193.169.252.205 | attack | 2020-10-13 22:10:50 auth_plain authenticator failed for (95.216.137.45) [193.169.252.205]: 535 Incorrect authentication data (set_id=rpc) 2020-10-13 22:30:14 auth_plain authenticator failed for (95.216.137.45) [193.169.252.205]: 535 Incorrect authentication data (set_id=stone) ... |
2020-10-14 04:55:15 |
| 45.129.33.48 | attackspam | ET DROP Dshield Block Listed Source group 1 - port: 51051 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-14 05:28:39 |
| 77.72.169.212 | attack | ET INFO Session Traversal Utilities for NAT (STUN Binding Response) - port: 20725 proto: udp cat: Attempted User Privilege Gainbytes: 160 |
2020-10-14 05:05:58 |
| 118.70.233.117 | attackbots | Oct 13 20:46:54 vlre-nyc-1 sshd\[1169\]: Invalid user gyongyver from 118.70.233.117 Oct 13 20:46:54 vlre-nyc-1 sshd\[1169\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.233.117 Oct 13 20:46:56 vlre-nyc-1 sshd\[1169\]: Failed password for invalid user gyongyver from 118.70.233.117 port 41270 ssh2 Oct 13 20:50:50 vlre-nyc-1 sshd\[1348\]: Invalid user gomez from 118.70.233.117 Oct 13 20:50:50 vlre-nyc-1 sshd\[1348\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.233.117 ... |
2020-10-14 04:58:58 |
| 121.14.17.168 | attackspambots | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: tcp cat: Potentially Bad Trafficbytes: 60 |
2020-10-14 05:18:00 |
| 92.118.160.41 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 83 - port: 808 proto: tcp cat: Misc Attackbytes: 60 |
2020-10-14 05:01:11 |
| 120.203.66.80 | attackspambots | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: tcp cat: Potentially Bad Trafficbytes: 66 |
2020-10-14 04:58:40 |