City: Aachen
Region: North Rhine-Westphalia
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 137.226.104.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38224
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;137.226.104.74. IN A
;; AUTHORITY SECTION:
. 399 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022062402 1800 900 604800 86400
;; Query time: 51 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 25 09:25:21 CST 2022
;; MSG SIZE rcvd: 10774.104.226.137.in-addr.arpa domain name pointer d-sp30.devlef.campus.rwth-aachen.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
74.104.226.137.in-addr.arpa name = d-sp30.devlef.campus.rwth-aachen.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 213.180.203.186 | attackspam | [Tue Jun 23 03:35:32.943423 2020] [:error] [pid 29947:tid 140048062207744] [client 213.180.203.186:47714] [client 213.180.203.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XvEWFIDYjTfSl8eTMk6qhQAAAfE"] ... |
2020-06-23 06:53:45 |
| 45.14.149.46 | attack | Jun 23 00:51:20 fhem-rasp sshd[30318]: Invalid user ubuntu from 45.14.149.46 port 43190 ... |
2020-06-23 06:56:47 |
| 76.186.123.165 | attackspam | SSH Invalid Login |
2020-06-23 06:52:57 |
| 83.4.144.52 | attack | 23/tcp [2020-06-22]1pkt |
2020-06-23 06:42:26 |
| 45.142.152.240 | attack | IP 45.142.152.240 attacked honeypot on port: 5001 at 6/22/2020 1:35:25 PM |
2020-06-23 06:56:29 |
| 78.128.113.42 | attackspam | Port scan |
2020-06-23 07:02:39 |
| 180.106.81.168 | attack | Jun 22 18:36:26 vps46666688 sshd[31609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.106.81.168 Jun 22 18:36:28 vps46666688 sshd[31609]: Failed password for invalid user db2fenc1 from 180.106.81.168 port 54740 ssh2 ... |
2020-06-23 06:55:38 |
| 102.166.1.152 | attackbots | 445/tcp 445/tcp [2020-06-22]2pkt |
2020-06-23 07:04:21 |
| 182.122.15.30 | attack | 21 attempts against mh-ssh on ice |
2020-06-23 06:46:49 |
| 43.225.181.48 | attackbots |
|
2020-06-23 07:15:58 |
| 108.41.115.54 | attackspambots | 60001/tcp [2020-06-22]1pkt |
2020-06-23 07:18:07 |
| 87.251.74.44 | attack | Multiport scan : 65 ports scanned 11 60 65 80 92 100 115 132 145 152 184 291 311 312 322 335 430 474 476 490 501 506 516 524 541 561 570 586 607 706 743 745 760 839 894 906 983 987 1005 1025 1027 1049 1052 1060 1069 1083 1103 1114 1142 1167 1214 1222 1356 1396 1438 1448 1454 1461 1468 1478 1481 1482 1488 1494 1498 |
2020-06-23 06:46:24 |
| 222.186.30.112 | attackspam | Jun 23 01:18:39 ovpn sshd\[16483\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.112 user=root Jun 23 01:18:41 ovpn sshd\[16483\]: Failed password for root from 222.186.30.112 port 55668 ssh2 Jun 23 01:18:48 ovpn sshd\[16529\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.112 user=root Jun 23 01:18:50 ovpn sshd\[16529\]: Failed password for root from 222.186.30.112 port 42830 ssh2 Jun 23 01:18:52 ovpn sshd\[16529\]: Failed password for root from 222.186.30.112 port 42830 ssh2 |
2020-06-23 07:20:36 |
| 163.172.154.178 | attack | Jun 23 01:40:13 lukav-desktop sshd\[13534\]: Invalid user yamazaki from 163.172.154.178 Jun 23 01:40:13 lukav-desktop sshd\[13534\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.154.178 Jun 23 01:40:15 lukav-desktop sshd\[13534\]: Failed password for invalid user yamazaki from 163.172.154.178 port 54406 ssh2 Jun 23 01:43:03 lukav-desktop sshd\[13572\]: Invalid user testuser from 163.172.154.178 Jun 23 01:43:03 lukav-desktop sshd\[13572\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.154.178 |
2020-06-23 06:58:55 |
| 187.174.65.4 | attack | Jun 22 18:44:51 firewall sshd[17459]: Invalid user ubuntu from 187.174.65.4 Jun 22 18:44:52 firewall sshd[17459]: Failed password for invalid user ubuntu from 187.174.65.4 port 56462 ssh2 Jun 22 18:47:53 firewall sshd[17562]: Invalid user prueba1 from 187.174.65.4 ... |
2020-06-23 06:44:30 |