City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.100.10.162
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64330
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;141.100.10.162. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 15:51:11 CST 2025
;; MSG SIZE rcvd: 107162.10.100.141.in-addr.arpa domain name pointer mercan-prod1-test.itda.h-da.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
162.10.100.141.in-addr.arpa name = mercan-prod1-test.itda.h-da.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.131.69.18 | attackspambots | Invalid user game from 202.131.69.18 port 40640 |
2020-09-02 12:59:49 |
| 222.186.31.83 | attack | Unauthorized connection attempt detected from IP address 222.186.31.83 to port 22 [T] |
2020-09-02 12:39:19 |
| 184.105.247.202 | attack | srv02 Mass scanning activity detected Target: 623(asf-rmcp) .. |
2020-09-02 12:51:09 |
| 212.70.149.68 | attackspam | Sep 2 06:38:18 cho postfix/smtps/smtpd[2076322]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 2 06:40:26 cho postfix/smtps/smtpd[2076322]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 2 06:42:33 cho postfix/smtps/smtpd[2076322]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 2 06:44:41 cho postfix/smtps/smtpd[2076322]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 2 06:46:49 cho postfix/smtps/smtpd[2076322]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-09-02 12:48:54 |
| 50.63.161.42 | attack | 50.63.161.42 - - [02/Sep/2020:06:04:36 +0100] "POST /wp-login.php HTTP/1.1" 200 2604 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 50.63.161.42 - - [02/Sep/2020:06:04:38 +0100] "POST /wp-login.php HTTP/1.1" 200 2575 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 50.63.161.42 - - [02/Sep/2020:06:04:46 +0100] "POST /wp-login.php HTTP/1.1" 200 2576 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-02 13:17:32 |
| 182.61.26.165 | attackspam | Brute force SMTP login attempted. ... |
2020-09-02 13:13:16 |
| 218.92.0.224 | attackspam | $f2bV_matches |
2020-09-02 13:15:02 |
| 167.250.52.240 | attackbots | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-09-02 13:15:15 |
| 95.38.98.71 | attackbots | Port scan: Attack repeated for 24 hours |
2020-09-02 12:48:03 |
| 144.217.72.135 | attackbots | (smtpauth) Failed SMTP AUTH login from 144.217.72.135 (CA/Canada/ns5003492.ip-144-217-72.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-09-02 04:15:40 login authenticator failed for ns5003492.ip-144-217-72.net (O3cHdU) [144.217.72.135]: 535 Incorrect authentication data (set_id=m.bos) 2020-09-02 04:15:41 login authenticator failed for ns5003492.ip-144-217-72.net (p0TVtxC76Y) [144.217.72.135]: 535 Incorrect authentication data (set_id=m.bos@mld-hosting.nl) 2020-09-02 04:15:43 login authenticator failed for ns5003492.ip-144-217-72.net (qf7T2A) [144.217.72.135]: 535 Incorrect authentication data (set_id=m.bos) 2020-09-02 04:15:44 login authenticator failed for ns5003492.ip-144-217-72.net (I2ZfQAgd) [144.217.72.135]: 535 Incorrect authentication data (set_id=m.bos@mld-hosting.nl) 2020-09-02 04:15:46 login authenticator failed for ns5003492.ip-144-217-72.net (15AEBT) [144.217.72.135]: 535 Incorrect authentication data (set_id=m.bos) |
2020-09-02 12:55:05 |
| 59.126.169.135 | attack | 23/tcp [2020-09-01]1pkt |
2020-09-02 12:43:33 |
| 182.162.104.153 | attackbots | Failed password for invalid user cactiuser from 182.162.104.153 port 50376 ssh2 |
2020-09-02 12:45:06 |
| 218.92.0.250 | attackbotsspam | Sep 2 06:48:29 sshgateway sshd\[7656\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.250 user=root Sep 2 06:48:31 sshgateway sshd\[7656\]: Failed password for root from 218.92.0.250 port 58058 ssh2 Sep 2 06:48:45 sshgateway sshd\[7656\]: error: maximum authentication attempts exceeded for root from 218.92.0.250 port 58058 ssh2 \[preauth\] |
2020-09-02 12:50:39 |
| 34.93.41.18 | attack | 2020-09-01T20:40:59.2000481495-001 sshd[28059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.41.93.34.bc.googleusercontent.com 2020-09-01T20:40:59.1962221495-001 sshd[28059]: Invalid user oracle from 34.93.41.18 port 33718 2020-09-01T20:41:01.4951671495-001 sshd[28059]: Failed password for invalid user oracle from 34.93.41.18 port 33718 ssh2 2020-09-01T20:44:32.0250521495-001 sshd[28219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.41.93.34.bc.googleusercontent.com user=root 2020-09-01T20:44:33.9039521495-001 sshd[28219]: Failed password for root from 34.93.41.18 port 53328 ssh2 2020-09-01T20:48:04.7031921495-001 sshd[28392]: Invalid user kali from 34.93.41.18 port 44694 ... |
2020-09-02 13:03:20 |
| 112.6.44.28 | attackspam | Brute force attack stopped by firewall |
2020-09-02 13:07:16 |