City: Murg
Region: Baden-Württemberg
Country: Germany
Internet Service Provider: Vodafone
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.3.213.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31990
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.3.213.145. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025032401 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 25 03:35:36 CST 2025
;; MSG SIZE rcvd: 106
145.213.3.134.in-addr.arpa domain name pointer ip-134-003-213-145.um41.pools.vodafone-ip.de.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
145.213.3.134.in-addr.arpa name = ip-134-003-213-145.um41.pools.vodafone-ip.de.
Authoritative answers can be found from:
IP | Type | Details | Datetime |
---|---|---|---|
128.199.121.32 | attackspam | Aug 25 09:05:48 instance-2 sshd[7646]: Failed password for root from 128.199.121.32 port 56636 ssh2 Aug 25 09:08:31 instance-2 sshd[7728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.121.32 Aug 25 09:08:32 instance-2 sshd[7728]: Failed password for invalid user ftp from 128.199.121.32 port 38538 ssh2 |
2020-08-25 17:20:41 |
161.35.127.35 | attackspam | Aug 25 11:18:32 ns382633 sshd\[12280\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.127.35 user=root Aug 25 11:18:34 ns382633 sshd\[12280\]: Failed password for root from 161.35.127.35 port 45912 ssh2 Aug 25 11:29:11 ns382633 sshd\[14583\]: Invalid user zmv from 161.35.127.35 port 59094 Aug 25 11:29:11 ns382633 sshd\[14583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.127.35 Aug 25 11:29:13 ns382633 sshd\[14583\]: Failed password for invalid user zmv from 161.35.127.35 port 59094 ssh2 |
2020-08-25 17:30:46 |
206.189.190.27 | attackspambots | >20 unauthorized SSH connections |
2020-08-25 17:28:04 |
54.184.157.255 | attackbotsspam | Unauthorised access (Aug 25) SRC=54.184.157.255 LEN=40 TTL=37 ID=6872 TCP DPT=23 WINDOW=33104 SYN |
2020-08-25 17:54:15 |
2001:41d0:1004:20d9:: | attack | Sending out spam emails from IP 2001:41d0:1004:20d9:0:0:0:0 (ovh. net) Advertising that they are selling hacked dating account as well as compromised SMTP servers, shells, cpanel accounts and other illegal activity. For OVH report via their form as well as email https://www.ovh.com/world/abuse/ And send the complaint to abuse@ovh.net noc@ovh.net OVH.NET are pure scumbags and allow their customers to spam and ignore abuse complaints these guys are the worst of the worst! Pure scumbags! Now the spammer's websites are located at http://toolsbase.ws IP: 104.27.156.6, 104.27.157.6, 172.67.222.105 (cloudflare.com) For Cloudflare report via their form at https://www.cloudflare.com/abuse/ and noc@cloudflare.com and abuse@cloudflare.com |
2020-08-25 17:29:34 |
61.177.172.177 | attack | 2020-08-25T09:02:41.452632dmca.cloudsearch.cf sshd[16125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.177 user=root 2020-08-25T09:02:43.491118dmca.cloudsearch.cf sshd[16125]: Failed password for root from 61.177.172.177 port 7608 ssh2 2020-08-25T09:02:46.519800dmca.cloudsearch.cf sshd[16125]: Failed password for root from 61.177.172.177 port 7608 ssh2 2020-08-25T09:02:41.452632dmca.cloudsearch.cf sshd[16125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.177 user=root 2020-08-25T09:02:43.491118dmca.cloudsearch.cf sshd[16125]: Failed password for root from 61.177.172.177 port 7608 ssh2 2020-08-25T09:02:46.519800dmca.cloudsearch.cf sshd[16125]: Failed password for root from 61.177.172.177 port 7608 ssh2 2020-08-25T09:02:41.452632dmca.cloudsearch.cf sshd[16125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.177 user=root 2020- ... |
2020-08-25 17:25:02 |
203.230.6.175 | attackbotsspam | k+ssh-bruteforce |
2020-08-25 17:58:36 |
140.143.244.31 | attackbots | $f2bV_matches |
2020-08-25 17:20:09 |
180.97.195.46 | attackspambots | 2020-08-24T23:18:37.266307dreamphreak.com sshd[138973]: Invalid user devman from 180.97.195.46 port 41184 2020-08-24T23:18:39.801251dreamphreak.com sshd[138973]: Failed password for invalid user devman from 180.97.195.46 port 41184 ssh2 ... |
2020-08-25 17:25:31 |
139.59.243.224 | attack | 2020-08-25T11:37:20.974885vps751288.ovh.net sshd\[25619\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.243.224 user=root 2020-08-25T11:37:22.752930vps751288.ovh.net sshd\[25619\]: Failed password for root from 139.59.243.224 port 51400 ssh2 2020-08-25T11:41:52.167909vps751288.ovh.net sshd\[25667\]: Invalid user senthil from 139.59.243.224 port 59358 2020-08-25T11:41:52.175496vps751288.ovh.net sshd\[25667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.243.224 2020-08-25T11:41:54.299189vps751288.ovh.net sshd\[25667\]: Failed password for invalid user senthil from 139.59.243.224 port 59358 ssh2 |
2020-08-25 17:45:47 |
45.179.112.21 | attack | Brute force attempt |
2020-08-25 17:21:18 |
198.46.202.11 | attack | Unauthorized connection attempt detected from IP address 198.46.202.11 to port 23 [T] |
2020-08-25 17:23:38 |
118.25.93.240 | attack | Failed password for invalid user hug from 118.25.93.240 port 53168 ssh2 |
2020-08-25 17:57:44 |
174.138.20.105 | attackspambots | Total attacks: 2 |
2020-08-25 17:47:26 |
175.100.139.179 | attackbotsspam | 175.100.139.179 - [25/Aug/2020:06:50:23 +0300] "POST /xmlrpc.php HTTP/1.1" 404 162 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-" 175.100.139.179 - [25/Aug/2020:06:51:25 +0300] "POST /xmlrpc.php HTTP/1.1" 404 162 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-" ... |
2020-08-25 17:49:19 |