City: Konstanz
Region: Baden-Württemberg Region
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: Universitaet Stuttgart
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.34.236.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16219
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.34.236.117. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019061002 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jun 11 04:37:58 CST 2019
;; MSG SIZE rcvd: 118
117.236.34.134.in-addr.arpa domain name pointer evt3-1132.raeume.uni-konstanz.de.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
117.236.34.134.in-addr.arpa name = evt3-1132.raeume.uni-konstanz.de.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.92.0.173 | attackbots | Dec 30 15:53:33 MK-Soft-Root1 sshd[16451]: Failed password for root from 218.92.0.173 port 48662 ssh2 Dec 30 15:53:36 MK-Soft-Root1 sshd[16451]: Failed password for root from 218.92.0.173 port 48662 ssh2 ... |
2019-12-30 23:00:18 |
| 182.73.247.90 | attack | Unauthorized connection attempt from IP address 182.73.247.90 on Port 445(SMB) |
2019-12-30 23:13:21 |
| 106.12.125.241 | attack | Lines containing failures of 106.12.125.241 Dec 30 14:36:27 nextcloud sshd[25298]: Invalid user radio from 106.12.125.241 port 47224 Dec 30 14:36:27 nextcloud sshd[25298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.125.241 Dec 30 14:36:29 nextcloud sshd[25298]: Failed password for invalid user radio from 106.12.125.241 port 47224 ssh2 Dec 30 14:36:30 nextcloud sshd[25298]: Received disconnect from 106.12.125.241 port 47224:11: Bye Bye [preauth] Dec 30 14:36:30 nextcloud sshd[25298]: Disconnected from invalid user radio 106.12.125.241 port 47224 [preauth] Dec 30 14:45:25 nextcloud sshd[28276]: Invalid user danatan from 106.12.125.241 port 60210 Dec 30 14:45:25 nextcloud sshd[28276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.125.241 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=106.12.125.241 |
2019-12-30 22:44:15 |
| 154.8.232.221 | attack | Lines containing failures of 154.8.232.221 (max 1000) Dec 30 15:01:57 Server sshd[9066]: Invalid user neeraj from 154.8.232.221 port 44024 Dec 30 15:01:57 Server sshd[9066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.232.221 Dec 30 15:01:59 Server sshd[9066]: Failed password for invalid user neeraj from 154.8.232.221 port 44024 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=154.8.232.221 |
2019-12-30 22:29:29 |
| 138.0.60.5 | attack | 2019-12-30T12:47:17.698228abusebot-3.cloudsearch.cf sshd[13437]: Invalid user mirko from 138.0.60.5 port 39626 2019-12-30T12:47:17.709656abusebot-3.cloudsearch.cf sshd[13437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.60.5.wellnet.com.br 2019-12-30T12:47:17.698228abusebot-3.cloudsearch.cf sshd[13437]: Invalid user mirko from 138.0.60.5 port 39626 2019-12-30T12:47:20.002484abusebot-3.cloudsearch.cf sshd[13437]: Failed password for invalid user mirko from 138.0.60.5 port 39626 ssh2 2019-12-30T12:49:55.339998abusebot-3.cloudsearch.cf sshd[13566]: Invalid user teste from 138.0.60.5 port 34890 2019-12-30T12:49:55.349706abusebot-3.cloudsearch.cf sshd[13566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.60.5.wellnet.com.br 2019-12-30T12:49:55.339998abusebot-3.cloudsearch.cf sshd[13566]: Invalid user teste from 138.0.60.5 port 34890 2019-12-30T12:49:57.667681abusebot-3.cloudsearch.cf sshd[13566 ... |
2019-12-30 22:36:44 |
| 195.244.32.132 | attackbotsspam | CloudCIX Reconnaissance Scan Detected, PTR: master.netdirekt.com.tr. |
2019-12-30 23:09:26 |
| 211.51.201.231 | attackbotsspam | Lines containing failures of 211.51.201.231 Dec 30 15:21:17 HOSTNAME sshd[29857]: User r.r from 211.51.201.231 not allowed because not listed in AllowUsers Dec 30 15:21:17 HOSTNAME sshd[29857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.51.201.231 user=r.r Dec 30 15:21:19 HOSTNAME sshd[29857]: Failed password for invalid user r.r from 211.51.201.231 port 49305 ssh2 Dec 30 15:21:20 HOSTNAME sshd[29857]: Received disconnect from 211.51.201.231 port 49305:11: Bye Bye [preauth] Dec 30 15:21:20 HOSTNAME sshd[29857]: Disconnected from 211.51.201.231 port 49305 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=211.51.201.231 |
2019-12-30 23:01:43 |
| 121.12.151.37 | attackspambots | Honeypot attack, port: 139, PTR: PTR record not found |
2019-12-30 22:31:26 |
| 218.212.221.202 | attack | CloudCIX Reconnaissance Scan Detected, PTR: 202.221.212.218.starhub.net.sg. |
2019-12-30 22:57:34 |
| 197.43.57.103 | attackbots | Unauthorized connection attempt from IP address 197.43.57.103 on Port 445(SMB) |
2019-12-30 22:53:44 |
| 92.40.120.109 | attackbots | fake and duplicated website/abuseipDB.com/db part of the 45 indy -collect relative hiding behind the water tank/spying on other neighbours/permission to come across our land/BT/looping into illegally/pics /chopped their original/ex army previous/45 /looped in/tampered security already on the shelf/imported Yale door locks/fake police assurance/hidden tag under the 5 barcode -any hyphen in model no/all capital in routers/etc t-tampered with/tvs/all well known brands/sony/bush etc/links to their relatives working online -flooding homes with tampered devices/controlling purposes/clients1.google.com regular hacker/same trace route/uk/ usually mc |
2019-12-30 23:07:23 |
| 45.79.54.12 | attack | Fail2Ban Ban Triggered |
2019-12-30 22:52:52 |
| 42.58.15.202 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-12-30 23:15:25 |
| 62.210.162.148 | attackspambots | CloudCIX Reconnaissance Scan Detected, PTR: 62-210-162-148.rev.poneytelecom.eu. |
2019-12-30 23:02:38 |
| 113.160.4.134 | attackspam | Honeypot attack, port: 445, PTR: static.vnpt-hanoi.com.vn. |
2019-12-30 22:35:20 |