City: Wilhelmshaven
Region: Lower Saxony
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.13.192.202
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34330
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.13.192.202. IN A
;; AUTHORITY SECTION:
. 455 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023053102 1800 900 604800 86400
;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jun 01 07:48:53 CST 2023
;; MSG SIZE rcvd: 107Host 202.192.13.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 202.192.13.139.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.142.120.49 | attackspambots | Sep 6 23:11:28 srv01 postfix/smtpd\[19664\]: warning: unknown\[45.142.120.49\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 23:11:44 srv01 postfix/smtpd\[14247\]: warning: unknown\[45.142.120.49\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 23:11:49 srv01 postfix/smtpd\[17359\]: warning: unknown\[45.142.120.49\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 23:11:54 srv01 postfix/smtpd\[20014\]: warning: unknown\[45.142.120.49\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 23:12:07 srv01 postfix/smtpd\[19664\]: warning: unknown\[45.142.120.49\]: SASL LOGIN authentication failed: VXNlcm5hbWU6 ... |
2020-09-07 05:14:09 |
| 162.158.165.46 | attackspam | srv02 DDoS Malware Target(80:http) .. |
2020-09-07 05:38:39 |
| 139.198.122.19 | attack | (sshd) Failed SSH login from 139.198.122.19 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 6 15:38:32 server sshd[3002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.122.19 user=root Sep 6 15:38:34 server sshd[3002]: Failed password for root from 139.198.122.19 port 55724 ssh2 Sep 6 15:56:45 server sshd[7805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.122.19 user=root Sep 6 15:56:47 server sshd[7805]: Failed password for root from 139.198.122.19 port 37990 ssh2 Sep 6 15:59:58 server sshd[8537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.122.19 user=root |
2020-09-07 05:23:09 |
| 182.74.57.61 | attackspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-09-07 05:12:24 |
| 141.98.9.165 | attackbotsspam | 2020-09-06T21:19:33.334066shield sshd\[25449\]: Invalid user user from 141.98.9.165 port 39993 2020-09-06T21:19:33.345479shield sshd\[25449\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.165 2020-09-06T21:19:34.835499shield sshd\[25449\]: Failed password for invalid user user from 141.98.9.165 port 39993 ssh2 2020-09-06T21:19:56.395789shield sshd\[25503\]: Invalid user guest from 141.98.9.165 port 44331 2020-09-06T21:19:56.407324shield sshd\[25503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.165 |
2020-09-07 05:28:36 |
| 223.191.52.85 | attack | 1599411289 - 09/06/2020 18:54:49 Host: 223.191.52.85/223.191.52.85 Port: 445 TCP Blocked |
2020-09-07 05:11:47 |
| 51.91.255.147 | attackspambots | Time: Sun Sep 6 17:57:04 2020 +0000 IP: 51.91.255.147 (FR/France/147.ip-51-91-255.eu) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 6 17:27:05 ca-1-ams1 sshd[60235]: Failed password for root from 51.91.255.147 port 48960 ssh2 Sep 6 17:41:48 ca-1-ams1 sshd[60646]: Invalid user noah from 51.91.255.147 port 33110 Sep 6 17:41:50 ca-1-ams1 sshd[60646]: Failed password for invalid user noah from 51.91.255.147 port 33110 ssh2 Sep 6 17:53:25 ca-1-ams1 sshd[60977]: Failed password for root from 51.91.255.147 port 50830 ssh2 Sep 6 17:57:01 ca-1-ams1 sshd[61072]: Failed password for root from 51.91.255.147 port 56732 ssh2 |
2020-09-07 05:20:49 |
| 143.202.179.12 | attackbots | Automatic report - Port Scan Attack |
2020-09-07 05:36:21 |
| 222.186.31.166 | attack | Sep 6 23:03:14 h2646465 sshd[15051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166 user=root Sep 6 23:03:16 h2646465 sshd[15051]: Failed password for root from 222.186.31.166 port 51554 ssh2 Sep 6 23:03:22 h2646465 sshd[15053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166 user=root Sep 6 23:03:25 h2646465 sshd[15053]: Failed password for root from 222.186.31.166 port 12328 ssh2 Sep 6 23:03:22 h2646465 sshd[15053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166 user=root Sep 6 23:03:25 h2646465 sshd[15053]: Failed password for root from 222.186.31.166 port 12328 ssh2 Sep 6 23:03:27 h2646465 sshd[15053]: Failed password for root from 222.186.31.166 port 12328 ssh2 Sep 6 23:03:22 h2646465 sshd[15053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166 user=root Sep 6 23:03:25 h264 |
2020-09-07 05:05:02 |
| 51.158.111.157 | attackspambots | Bruteforce detected by fail2ban |
2020-09-07 05:41:05 |
| 222.186.173.201 | attackbots | Sep 6 22:53:08 vpn01 sshd[20051]: Failed password for root from 222.186.173.201 port 36084 ssh2 Sep 6 22:53:21 vpn01 sshd[20051]: error: maximum authentication attempts exceeded for root from 222.186.173.201 port 36084 ssh2 [preauth] ... |
2020-09-07 05:06:13 |
| 103.133.105.65 | attackbots | 2020-09-06 dovecot_login authenticator failed for \(User\) \[103.133.105.65\]: 535 Incorrect authentication data \(set_id=web3@**REMOVED**\) 2020-09-06 dovecot_login authenticator failed for \(User\) \[103.133.105.65\]: 535 Incorrect authentication data \(set_id=web3@**REMOVED**\) 2020-09-06 dovecot_login authenticator failed for \(User\) \[103.133.105.65\]: 535 Incorrect authentication data \(set_id=web3@**REMOVED**\) |
2020-09-07 05:23:46 |
| 41.77.6.27 | attack | [ER hit] Tried to deliver spam. Already well known. |
2020-09-07 05:05:34 |
| 117.61.241.147 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-09-07 05:04:26 |
| 222.186.175.154 | attackspambots | Sep 6 23:11:01 minden010 sshd[20537]: Failed password for root from 222.186.175.154 port 29928 ssh2 Sep 6 23:11:10 minden010 sshd[20537]: Failed password for root from 222.186.175.154 port 29928 ssh2 Sep 6 23:11:12 minden010 sshd[20537]: Failed password for root from 222.186.175.154 port 29928 ssh2 Sep 6 23:11:12 minden010 sshd[20537]: error: maximum authentication attempts exceeded for root from 222.186.175.154 port 29928 ssh2 [preauth] ... |
2020-09-07 05:12:02 |