City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 56.48.142.40
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26649
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;56.48.142.40. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025041500 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 15 19:42:11 CST 2025
;; MSG SIZE rcvd: 105Host 40.142.48.56.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 40.142.48.56.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.131.172.112 | attackspam | port scan and connect, tcp 23 (telnet) |
2019-08-30 19:29:47 |
| 36.79.251.93 | attackspam | Unauthorized connection attempt from IP address 36.79.251.93 on Port 445(SMB) |
2019-08-30 19:07:51 |
| 45.227.253.116 | attackspam | Aug 30 12:35:25 relay postfix/smtpd\[2280\]: warning: unknown\[45.227.253.116\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 30 12:35:32 relay postfix/smtpd\[1541\]: warning: unknown\[45.227.253.116\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 30 12:41:18 relay postfix/smtpd\[2275\]: warning: unknown\[45.227.253.116\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 30 12:41:25 relay postfix/smtpd\[2262\]: warning: unknown\[45.227.253.116\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 30 12:41:55 relay postfix/smtpd\[2260\]: warning: unknown\[45.227.253.116\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-08-30 18:43:23 |
| 121.28.40.179 | attackbotsspam | Automatic report - Banned IP Access |
2019-08-30 19:26:42 |
| 104.224.162.238 | attack | $f2bV_matches |
2019-08-30 19:11:10 |
| 1.203.115.140 | attackbotsspam | Aug 30 09:45:28 ArkNodeAT sshd\[27532\]: Invalid user ts3server from 1.203.115.140 Aug 30 09:45:28 ArkNodeAT sshd\[27532\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.203.115.140 Aug 30 09:45:30 ArkNodeAT sshd\[27532\]: Failed password for invalid user ts3server from 1.203.115.140 port 53922 ssh2 |
2019-08-30 19:00:50 |
| 36.79.255.222 | attackbots | Unauthorized connection attempt from IP address 36.79.255.222 on Port 445(SMB) |
2019-08-30 19:25:00 |
| 120.1.177.170 | attack | Aug 29 21:49:17 php2 sshd\[25141\]: Invalid user ftp from 120.1.177.170 Aug 29 21:49:17 php2 sshd\[25141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.1.177.170 Aug 29 21:49:19 php2 sshd\[25141\]: Failed password for invalid user ftp from 120.1.177.170 port 50287 ssh2 Aug 29 21:54:25 php2 sshd\[25582\]: Invalid user cacti from 120.1.177.170 Aug 29 21:54:25 php2 sshd\[25582\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.1.177.170 |
2019-08-30 18:49:46 |
| 45.124.147.213 | attack | Unauthorized connection attempt from IP address 45.124.147.213 on Port 445(SMB) |
2019-08-30 18:57:12 |
| 220.133.126.22 | attack | Honeypot attack, port: 23, PTR: 220-133-126-22.HINET-IP.hinet.net. |
2019-08-30 19:28:01 |
| 138.197.78.121 | attackbots | Aug 30 09:22:59 localhost sshd\[25084\]: Invalid user elastic from 138.197.78.121 port 46318 Aug 30 09:22:59 localhost sshd\[25084\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.78.121 Aug 30 09:23:01 localhost sshd\[25084\]: Failed password for invalid user elastic from 138.197.78.121 port 46318 ssh2 Aug 30 09:27:06 localhost sshd\[25194\]: Invalid user edmond from 138.197.78.121 port 34696 Aug 30 09:27:06 localhost sshd\[25194\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.78.121 ... |
2019-08-30 18:58:23 |
| 103.233.241.27 | attackbots | SPF Fail sender not permitted to send mail for @lrmmotors.it / Spam to target mail address hacked/leaked/bought from Kachingle |
2019-08-30 19:18:11 |
| 175.195.124.138 | attackbots | Honeypot attack, port: 23, PTR: PTR record not found |
2019-08-30 19:19:36 |
| 185.10.68.126 | attackbotsspam | Automatic report - Banned IP Access |
2019-08-30 19:17:15 |
| 31.14.142.109 | attackbotsspam | Aug 30 05:34:39 dallas01 sshd[27801]: Failed password for root from 31.14.142.109 port 50971 ssh2 Aug 30 05:40:29 dallas01 sshd[29074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.14.142.109 Aug 30 05:40:31 dallas01 sshd[29074]: Failed password for invalid user db2fenc1 from 31.14.142.109 port 53742 ssh2 |
2019-08-30 18:44:15 |