City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.119.207.105 | attackbots | Brute force attack stopped by firewall |
2020-10-06 07:22:13 |
| 134.119.207.105 | attack | Port Scan: TCP/80 |
2020-10-05 23:37:48 |
| 134.119.207.105 | attackspam | Port Scan: TCP/80 |
2020-10-05 15:37:02 |
| 134.119.206.3 | attack | Sep 14 21:01:58 web1 sshd[21837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.119.206.3 user=root Sep 14 21:02:00 web1 sshd[21837]: Failed password for root from 134.119.206.3 port 39442 ssh2 Sep 14 21:06:40 web1 sshd[23974]: Invalid user send from 134.119.206.3 port 37836 Sep 14 21:06:40 web1 sshd[23974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.119.206.3 Sep 14 21:06:40 web1 sshd[23974]: Invalid user send from 134.119.206.3 port 37836 Sep 14 21:06:42 web1 sshd[23974]: Failed password for invalid user send from 134.119.206.3 port 37836 ssh2 Sep 14 21:10:25 web1 sshd[25450]: Invalid user csgo from 134.119.206.3 port 53600 Sep 14 21:10:25 web1 sshd[25450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.119.206.3 Sep 14 21:10:25 web1 sshd[25450]: Invalid user csgo from 134.119.206.3 port 53600 Sep 14 21:10:27 web1 sshd[25450]: Failed password fo ... |
2020-09-14 23:25:07 |
| 134.119.206.3 | attackspam | 2020-09-14T05:52:35.565145shield sshd\[6903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.119.206.3 user=root 2020-09-14T05:52:36.726520shield sshd\[6903\]: Failed password for root from 134.119.206.3 port 57716 ssh2 2020-09-14T05:56:32.423871shield sshd\[8295\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.119.206.3 user=root 2020-09-14T05:56:34.789493shield sshd\[8295\]: Failed password for root from 134.119.206.3 port 43770 ssh2 2020-09-14T06:00:27.698070shield sshd\[9744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.119.206.3 user=root |
2020-09-14 15:13:32 |
| 134.119.206.3 | attackbots | 2020-09-13T18:30:30.206949devel sshd[15582]: Failed password for root from 134.119.206.3 port 50766 ssh2 2020-09-13T18:34:04.141844devel sshd[15854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.119.206.3 user=root 2020-09-13T18:34:06.046622devel sshd[15854]: Failed password for root from 134.119.206.3 port 36410 ssh2 |
2020-09-14 07:08:38 |
| 134.119.207.105 | attack | Unwanted checking 80 or 443 port ... |
2020-08-30 01:55:49 |
| 134.119.206.3 | attack | 2020-08-28T10:23:51.677492abusebot-4.cloudsearch.cf sshd[10111]: Invalid user test2 from 134.119.206.3 port 39676 2020-08-28T10:23:51.685309abusebot-4.cloudsearch.cf sshd[10111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.119.206.3 2020-08-28T10:23:51.677492abusebot-4.cloudsearch.cf sshd[10111]: Invalid user test2 from 134.119.206.3 port 39676 2020-08-28T10:23:53.601237abusebot-4.cloudsearch.cf sshd[10111]: Failed password for invalid user test2 from 134.119.206.3 port 39676 ssh2 2020-08-28T10:29:56.097402abusebot-4.cloudsearch.cf sshd[10396]: Invalid user postgres from 134.119.206.3 port 42906 2020-08-28T10:29:56.102601abusebot-4.cloudsearch.cf sshd[10396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.119.206.3 2020-08-28T10:29:56.097402abusebot-4.cloudsearch.cf sshd[10396]: Invalid user postgres from 134.119.206.3 port 42906 2020-08-28T10:29:57.792874abusebot-4.cloudsearch.cf sshd[10396]: ... |
2020-08-28 19:33:34 |
| 134.119.206.3 | attackbotsspam | B: Abusive ssh attack |
2020-08-21 01:14:14 |
| 134.119.228.106 | attackbotsspam | Sends Spam Mail |
2020-08-12 02:31:39 |
| 134.119.216.167 | attackbotsspam | Unauthorized access detected from black listed ip! |
2020-07-25 01:54:14 |
| 134.119.207.105 | attack | bot. ua spoofing, "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36" |
2020-07-10 23:32:51 |
| 134.119.219.71 | attackbots | 20 attempts against mh_ha-misbehave-ban on flame |
2020-06-28 21:46:13 |
| 134.119.216.241 | attackbots | [H1] Blocked by UFW |
2020-06-06 18:32:10 |
| 134.119.219.93 | attack | 20 attempts against mh-misbehave-ban on flame |
2020-06-05 16:54:30 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.119.2.86
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36375
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.119.2.86. IN A
;; AUTHORITY SECTION:
. 534 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400
;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 11:39:38 CST 2022
;; MSG SIZE rcvd: 10586.2.119.134.in-addr.arpa domain name pointer m19s4-1-24db.ispgateway.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
86.2.119.134.in-addr.arpa name = m19s4-1-24db.ispgateway.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.0.41.54 | attackbots | SSH brute-force attempt |
2020-08-25 13:33:43 |
| 222.186.180.6 | attack | Aug 25 06:09:59 ajax sshd[23051]: Failed password for root from 222.186.180.6 port 60240 ssh2 Aug 25 06:10:04 ajax sshd[23051]: Failed password for root from 222.186.180.6 port 60240 ssh2 |
2020-08-25 13:26:34 |
| 89.248.167.141 | attack | Persistent port scanning [88 denied] |
2020-08-25 13:41:36 |
| 178.19.175.254 | attackbotsspam | 20/8/24@23:58:25: FAIL: Alarm-Network address from=178.19.175.254 20/8/24@23:58:25: FAIL: Alarm-Network address from=178.19.175.254 ... |
2020-08-25 13:27:52 |
| 121.61.103.182 | attackbotsspam | " " |
2020-08-25 13:42:54 |
| 123.206.104.162 | attackspam | Aug 25 07:23:42 home sshd[368944]: Failed password for root from 123.206.104.162 port 40498 ssh2 Aug 25 07:26:32 home sshd[369943]: Invalid user oper from 123.206.104.162 port 42856 Aug 25 07:26:32 home sshd[369943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.104.162 Aug 25 07:26:32 home sshd[369943]: Invalid user oper from 123.206.104.162 port 42856 Aug 25 07:26:35 home sshd[369943]: Failed password for invalid user oper from 123.206.104.162 port 42856 ssh2 ... |
2020-08-25 13:59:46 |
| 167.71.216.37 | attack | 167.71.216.37 - - [25/Aug/2020:06:07:46 +0200] "GET /wp-login.php HTTP/1.1" 200 9040 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.216.37 - - [25/Aug/2020:06:07:49 +0200] "POST /wp-login.php HTTP/1.1" 200 9357 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.216.37 - - [25/Aug/2020:06:07:51 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-25 13:28:05 |
| 167.99.233.8 | attackspam | Lines containing failures of 167.99.233.8 Aug 24 21:21:27 penfold sshd[4623]: Did not receive identification string from 167.99.233.8 port 38538 Aug 24 21:21:39 penfold sshd[4635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.233.8 user=r.r Aug 24 21:21:41 penfold sshd[4635]: Failed password for r.r from 167.99.233.8 port 54086 ssh2 Aug 24 21:21:42 penfold sshd[4635]: Received disconnect from 167.99.233.8 port 54086:11: Normal Shutdown, Thank you for playing [preauth] Aug 24 21:21:42 penfold sshd[4635]: Disconnected from authenticating user r.r 167.99.233.8 port 54086 [preauth] Aug 24 21:21:45 penfold sshd[4639]: Invalid user oracle from 167.99.233.8 port 34236 Aug 24 21:21:45 penfold sshd[4639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.233.8 Aug 24 21:21:47 penfold sshd[4639]: Failed password for invalid user oracle from 167.99.233.8 port 34236 ssh2 ........ -------------------------------------------- |
2020-08-25 13:48:01 |
| 14.161.19.79 | attack | 1598327910 - 08/25/2020 05:58:30 Host: 14.161.19.79/14.161.19.79 Port: 445 TCP Blocked ... |
2020-08-25 13:26:09 |
| 94.25.160.69 | attackbotsspam | 20/8/24@23:58:23: FAIL: Alarm-Network address from=94.25.160.69 ... |
2020-08-25 13:29:55 |
| 54.38.212.160 | attack | CMS (WordPress or Joomla) login attempt. |
2020-08-25 13:26:59 |
| 191.55.23.252 | attackbots | trying to access non-authorized port |
2020-08-25 13:41:00 |
| 185.220.101.9 | attack | SSH brute-force attempt |
2020-08-25 13:46:28 |
| 41.193.68.212 | attack | Aug 25 05:53:36 v22019038103785759 sshd\[24026\]: Invalid user user10 from 41.193.68.212 port 47676 Aug 25 05:53:36 v22019038103785759 sshd\[24026\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.193.68.212 Aug 25 05:53:38 v22019038103785759 sshd\[24026\]: Failed password for invalid user user10 from 41.193.68.212 port 47676 ssh2 Aug 25 05:57:35 v22019038103785759 sshd\[25043\]: Invalid user steve from 41.193.68.212 port 39886 Aug 25 05:57:35 v22019038103785759 sshd\[25043\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.193.68.212 ... |
2020-08-25 14:02:00 |
| 49.232.173.147 | attackspam | Aug 25 06:59:38 sip sshd[1415877]: Invalid user msc from 49.232.173.147 port 40828 Aug 25 06:59:40 sip sshd[1415877]: Failed password for invalid user msc from 49.232.173.147 port 40828 ssh2 Aug 25 07:02:00 sip sshd[1415898]: Invalid user synapse from 49.232.173.147 port 5001 ... |
2020-08-25 13:40:02 |