City: Munich
Region: Bavaria
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.159.243.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3594
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;131.159.243.138. IN A
;; AUTHORITY SECTION:
. 431 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020020701 1800 900 604800 86400
;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 08 05:05:53 CST 2020
;; MSG SIZE rcvd: 119Host 138.243.159.131.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 138.243.159.131.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 119.147.172.232 | attackspam | firewall-block, port(s): 1433/tcp |
2020-01-06 07:04:45 |
| 190.226.48.142 | attackspambots | SSH Brute-Force reported by Fail2Ban |
2020-01-06 07:19:24 |
| 36.6.57.220 | attackspambots | 2020-01-05 15:49:56 H=(ylmf-pc) [36.6.57.220]:50604 I=[192.147.25.65]:25 rejected EHLO or HELO ylmf-pc: CHECK_HELO: ylmf-pc 2020-01-05 15:49:56 H=(ylmf-pc) [36.6.57.220]:53723 I=[192.147.25.65]:25 rejected EHLO or HELO ylmf-pc: CHECK_HELO: ylmf-pc 2020-01-05 15:49:57 H=(ylmf-pc) [36.6.57.220]:58034 I=[192.147.25.65]:25 rejected EHLO or HELO ylmf-pc: CHECK_HELO: ylmf-pc 2020-01-05 15:49:57 H=(ylmf-pc) [36.6.57.220]:53530 I=[192.147.25.65]:25 rejected EHLO or HELO ylmf-pc: CHECK_HELO: ylmf-pc ... |
2020-01-06 07:20:08 |
| 37.139.9.23 | attackbotsspam | Jan 5 23:28:19 tor-proxy-08 sshd\[29241\]: Invalid user alex from 37.139.9.23 port 39572 Jan 5 23:31:02 tor-proxy-08 sshd\[29247\]: Invalid user scaner from 37.139.9.23 port 59630 Jan 5 23:33:47 tor-proxy-08 sshd\[29254\]: Invalid user test5 from 37.139.9.23 port 51484 ... |
2020-01-06 07:05:24 |
| 118.141.152.250 | attack | Honeypot attack, port: 5555, PTR: sr-250-152-141-118-on-nets.com. |
2020-01-06 07:04:59 |
| 58.245.132.161 | attackbotsspam | Honeypot attack, port: 23, PTR: 161.132.245.58.adsl-pool.jlccptt.net.cn. |
2020-01-06 06:56:18 |
| 103.89.176.73 | attack | Jan 6 00:55:50 www5 sshd\[50072\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.89.176.73 user=root Jan 6 00:55:51 www5 sshd\[50072\]: Failed password for root from 103.89.176.73 port 36494 ssh2 Jan 6 00:58:06 www5 sshd\[50356\]: Invalid user database from 103.89.176.73 ... |
2020-01-06 07:00:44 |
| 185.176.27.6 | attackspambots | Jan 6 00:01:26 debian-2gb-nbg1-2 kernel: \[524607.626299\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.6 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=47217 PROTO=TCP SPT=56981 DPT=4427 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-01-06 07:02:46 |
| 216.250.119.72 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-01-06 07:16:17 |
| 5.249.94.139 | attackspambots | Jan 6 00:39:27 server sshd\[8160\]: Invalid user dietpi from 5.249.94.139 Jan 6 00:39:27 server sshd\[8160\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.94.249.5.rev.vodafone.pt Jan 6 00:39:29 server sshd\[8160\]: Failed password for invalid user dietpi from 5.249.94.139 port 38016 ssh2 Jan 6 00:50:41 server sshd\[11028\]: Invalid user umg from 5.249.94.139 Jan 6 00:50:41 server sshd\[11028\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.94.249.5.rev.vodafone.pt ... |
2020-01-06 06:47:44 |
| 77.140.239.151 | attackbotsspam | Unauthorized connection attempt detected from IP address 77.140.239.151 to port 5555 [J] |
2020-01-06 07:12:53 |
| 102.41.13.6 | attack | Unauthorized connection attempt detected from IP address 102.41.13.6 to port 23 [J] |
2020-01-06 07:08:00 |
| 81.19.215.174 | attackspam | Jan 5 19:51:07 vps46666688 sshd[27969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.19.215.174 Jan 5 19:51:09 vps46666688 sshd[27969]: Failed password for invalid user pdy from 81.19.215.174 port 36588 ssh2 ... |
2020-01-06 07:12:06 |
| 222.186.52.189 | attack | Jan 5 19:12:58 server sshd\[29816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.189 user=root Jan 5 19:13:00 server sshd\[29812\]: Failed password for root from 222.186.52.189 port 47151 ssh2 Jan 5 19:13:00 server sshd\[29816\]: Failed password for root from 222.186.52.189 port 56171 ssh2 Jan 5 19:13:00 server sshd\[29814\]: Failed password for root from 222.186.52.189 port 35425 ssh2 Jan 6 01:41:37 server sshd\[23415\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.189 user=root ... |
2020-01-06 06:43:52 |
| 121.230.178.94 | attackbots | 2020-01-05 15:49:52 dovecot_login authenticator failed for (ziwxr) [121.230.178.94]:60024 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=wangpeng@lerctr.org) 2020-01-05 15:49:59 dovecot_login authenticator failed for (oktaw) [121.230.178.94]:60024 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=wangpeng@lerctr.org) 2020-01-05 15:50:10 dovecot_login authenticator failed for (sdgys) [121.230.178.94]:60024 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=wangpeng@lerctr.org) ... |
2020-01-06 07:07:39 |