City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 92.206.5.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50273
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;92.206.5.44. IN A
;; AUTHORITY SECTION:
. 336 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023053102 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 01 09:38:06 CST 2023
;; MSG SIZE rcvd: 10444.5.206.92.in-addr.arpa domain name pointer 92.206.5.44.dyn.pyur.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
44.5.206.92.in-addr.arpa name = 92.206.5.44.dyn.pyur.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.54.40.151 | attack | $f2bV_matches |
2020-09-22 18:20:01 |
| 36.226.161.248 | attackspam | Port Scan: TCP/5555 |
2020-09-22 18:39:36 |
| 211.197.225.195 | attackspam | Sep 21 19:07:26 sip sshd[20157]: Failed password for root from 211.197.225.195 port 53589 ssh2 Sep 22 01:01:16 sip sshd[29694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.197.225.195 Sep 22 01:01:17 sip sshd[29694]: Failed password for invalid user support from 211.197.225.195 port 49245 ssh2 |
2020-09-22 18:52:17 |
| 200.108.143.6 | attackbotsspam | 2020-09-22T09:13:20.215010shield sshd\[25290\]: Invalid user max from 200.108.143.6 port 35772 2020-09-22T09:13:20.223918shield sshd\[25290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.143.6 2020-09-22T09:13:23.009043shield sshd\[25290\]: Failed password for invalid user max from 200.108.143.6 port 35772 ssh2 2020-09-22T09:17:54.051207shield sshd\[25968\]: Invalid user bwadmin from 200.108.143.6 port 44824 2020-09-22T09:17:54.061370shield sshd\[25968\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.143.6 |
2020-09-22 18:23:00 |
| 138.91.78.42 | attackspambots | DATE:2020-09-21 19:00:33, IP:138.91.78.42, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc) |
2020-09-22 18:17:13 |
| 192.241.235.42 | attackspam | TCP port : 179 |
2020-09-22 18:28:57 |
| 138.68.226.234 | attackbotsspam | TCP ports : 16483 / 29795 |
2020-09-22 18:44:20 |
| 94.102.53.112 | attackbots | Sep 22 11:24:28 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=17068 PROTO=TCP SPT=47405 DPT=54077 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 22 11:27:13 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=46683 PROTO=TCP SPT=47405 DPT=54299 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 22 11:27:34 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=53915 PROTO=TCP SPT=47405 DPT=55299 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 22 11:28:14 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3e:4a:cc:28:99:3a:4d:23:91:08:00 SRC=94.102.53.112 DST=173.212.244.83 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=2437 PROTO=TCP SPT=47405 DPT=54029 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 22 11:28:20 * ... |
2020-09-22 18:30:21 |
| 61.62.4.28 | attack | Email rejected due to spam filtering |
2020-09-22 18:45:21 |
| 191.19.139.5 | attack | Unauthorized connection attempt from IP address 191.19.139.5 on Port 445(SMB) |
2020-09-22 18:35:57 |
| 174.138.64.163 | attack | TCP port : 2273 |
2020-09-22 18:37:58 |
| 68.183.79.176 | attack | 3x Failed Password |
2020-09-22 18:29:44 |
| 123.207.157.120 | attackbots | Found on Dark List de / proto=6 . srcport=51308 . dstport=31079 . (345) |
2020-09-22 18:47:39 |
| 5.135.94.191 | attackspam | DATE:2020-09-22 12:06:40, IP:5.135.94.191, PORT:ssh SSH brute force auth (docker-dc) |
2020-09-22 18:35:40 |
| 67.205.135.127 | attack | 2020-09-22T08:43:51.707161Z 4ca3d036b4e2 New connection: 67.205.135.127:41434 (172.17.0.5:2222) [session: 4ca3d036b4e2] 2020-09-22T08:53:47.140874Z c0627a75efcd New connection: 67.205.135.127:34346 (172.17.0.5:2222) [session: c0627a75efcd] |
2020-09-22 18:47:55 |