City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.245.13.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47475
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.245.13.21. IN A
;; AUTHORITY SECTION:
. 341 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 20 21:08:37 CST 2022
;; MSG SIZE rcvd: 10621.13.245.134.in-addr.arpa domain name pointer uk-s1.uni-kiel.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
21.13.245.134.in-addr.arpa name = uk-s1.uni-kiel.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.39.11.47 | attack | scans 13 times in preceeding hours on the ports (in chronological order) 35053 35028 35088 35051 35010 35098 35028 35045 35004 35031 35027 35053 35056 resulting in total of 69 scans from 185.39.8.0/22 block. |
2020-06-07 20:31:58 |
| 222.186.175.169 | attackspambots | Jun 7 13:57:16 minden010 sshd[11685]: Failed password for root from 222.186.175.169 port 56716 ssh2 Jun 7 13:57:19 minden010 sshd[11685]: Failed password for root from 222.186.175.169 port 56716 ssh2 Jun 7 13:57:22 minden010 sshd[11685]: Failed password for root from 222.186.175.169 port 56716 ssh2 Jun 7 13:57:25 minden010 sshd[11685]: Failed password for root from 222.186.175.169 port 56716 ssh2 ... |
2020-06-07 19:57:37 |
| 111.229.137.13 | attack | $f2bV_matches |
2020-06-07 20:00:30 |
| 187.189.241.135 | attackbots | Jun 7 14:04:35 vps687878 sshd\[4378\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.189.241.135 user=root Jun 7 14:04:37 vps687878 sshd\[4378\]: Failed password for root from 187.189.241.135 port 12594 ssh2 Jun 7 14:06:52 vps687878 sshd\[4724\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.189.241.135 user=root Jun 7 14:06:54 vps687878 sshd\[4724\]: Failed password for root from 187.189.241.135 port 24381 ssh2 Jun 7 14:09:02 vps687878 sshd\[4827\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.189.241.135 user=root ... |
2020-06-07 20:29:25 |
| 60.170.126.4 | attackbotsspam | FTP/21 MH Probe, BF, Hack - |
2020-06-07 20:05:13 |
| 195.54.160.243 | attackbots | Jun 7 13:59:05 debian-2gb-nbg1-2 kernel: \[13789889.830476\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=195.54.160.243 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=35527 PROTO=TCP SPT=43556 DPT=37935 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-07 20:10:45 |
| 222.186.15.62 | attackspambots | Jun 7 09:10:34 firewall sshd[11017]: Failed password for root from 222.186.15.62 port 44570 ssh2 Jun 7 09:10:36 firewall sshd[11017]: Failed password for root from 222.186.15.62 port 44570 ssh2 Jun 7 09:10:39 firewall sshd[11017]: Failed password for root from 222.186.15.62 port 44570 ssh2 ... |
2020-06-07 20:17:20 |
| 161.35.22.86 | attack | Jun 7 01:22:47 web1 sshd\[18419\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.22.86 user=root Jun 7 01:22:49 web1 sshd\[18419\]: Failed password for root from 161.35.22.86 port 42200 ssh2 Jun 7 01:23:09 web1 sshd\[18466\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.22.86 user=root Jun 7 01:23:11 web1 sshd\[18466\]: Failed password for root from 161.35.22.86 port 39226 ssh2 Jun 7 01:23:33 web1 sshd\[18501\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.22.86 user=root |
2020-06-07 19:49:46 |
| 41.33.169.196 | attackspam | 20/6/7@08:09:52: FAIL: Alarm-Network address from=41.33.169.196 ... |
2020-06-07 20:20:34 |
| 52.14.59.248 | attackbots | Jun 4 11:39:34 xxxx sshd[25436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-52-14-59-248.us-east-2.compute.amazonaws.com user=r.r Jun 4 11:39:35 xxxx sshd[25436]: Failed password for r.r from 52.14.59.248 port 21368 ssh2 Jun 4 12:00:08 xxxx sshd[25467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-52-14-59-248.us-east-2.compute.amazonaws.com user=r.r Jun 4 12:00:10 xxxx sshd[25467]: Failed password for r.r from 52.14.59.248 port 53392 ssh2 Jun 4 12:04:19 xxxx sshd[25475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-52-14-59-248.us-east-2.compute.amazonaws.com user=r.r Jun 4 12:04:21 xxxx sshd[25475]: Failed password for r.r from 52.14.59.248 port 59752 ssh2 Jun 4 12:08:28 xxxx sshd[25481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-52-14-59-248.us-east-2.compute.amazonaw........ ------------------------------- |
2020-06-07 20:21:58 |
| 192.95.29.220 | attack | ENG,DEF GET /wp-login.php |
2020-06-07 20:13:41 |
| 180.166.141.58 | attackspam | Jun 7 14:28:12 debian-2gb-nbg1-2 kernel: \[13791636.540645\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=180.166.141.58 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x00 TTL=237 ID=10669 PROTO=TCP SPT=50029 DPT=21305 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-07 20:30:31 |
| 167.114.152.249 | attack | Lines containing failures of 167.114.152.249 Jun 4 12:08:11 zabbix sshd[54270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.152.249 user=r.r Jun 4 12:08:12 zabbix sshd[54270]: Failed password for r.r from 167.114.152.249 port 57302 ssh2 Jun 4 12:08:12 zabbix sshd[54270]: Received disconnect from 167.114.152.249 port 57302:11: Bye Bye [preauth] Jun 4 12:08:12 zabbix sshd[54270]: Disconnected from authenticating user r.r 167.114.152.249 port 57302 [preauth] Jun 4 12:19:16 zabbix sshd[55119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.152.249 user=r.r Jun 4 12:19:18 zabbix sshd[55119]: Failed password for r.r from 167.114.152.249 port 33472 ssh2 Jun 4 12:19:18 zabbix sshd[55119]: Received disconnect from 167.114.152.249 port 33472:11: Bye Bye [preauth] Jun 4 12:19:18 zabbix sshd[55119]: Disconnected from authenticating user r.r 167.114.152.249 port 33472 [preau........ ------------------------------ |
2020-06-07 20:25:51 |
| 222.186.169.194 | attack | 2020-06-07T14:25:05.713044rocketchat.forhosting.nl sshd[7287]: Failed password for root from 222.186.169.194 port 60604 ssh2 2020-06-07T14:25:11.506208rocketchat.forhosting.nl sshd[7287]: Failed password for root from 222.186.169.194 port 60604 ssh2 2020-06-07T14:25:17.730890rocketchat.forhosting.nl sshd[7287]: Failed password for root from 222.186.169.194 port 60604 ssh2 ... |
2020-06-07 20:26:45 |
| 171.224.177.53 | attackspambots | Unauthorized connection attempt from IP address 171.224.177.53 on Port 445(SMB) |
2020-06-07 20:12:38 |