City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.2.24.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19670
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;141.2.24.7. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021500 1800 900 604800 86400
;; Query time: 77 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 14:28:57 CST 2025
;; MSG SIZE rcvd: 1037.24.2.141.in-addr.arpa domain name pointer cb-hafen-24-7.rz.uni-frankfurt.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
7.24.2.141.in-addr.arpa name = cb-hafen-24-7.rz.uni-frankfurt.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 66.42.43.150 | attack | Invalid user test1 from 66.42.43.150 port 33682 |
2020-04-23 07:56:15 |
| 195.155.65.98 | attackspam | Apr 22 22:12:05 debian-2gb-nbg1-2 kernel: \[9845277.832266\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=195.155.65.98 DST=195.201.40.59 LEN=52 TOS=0x02 PREC=0x00 TTL=117 ID=16594 DF PROTO=TCP SPT=61792 DPT=3389 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 |
2020-04-23 08:07:36 |
| 157.230.245.91 | attackbotsspam | Apr 22 23:59:13 lock-38 sshd[1383102]: Failed password for invalid user vv from 157.230.245.91 port 47630 ssh2 Apr 22 23:59:13 lock-38 sshd[1383102]: Disconnected from invalid user vv 157.230.245.91 port 47630 [preauth] Apr 23 00:00:37 lock-38 sshd[1383321]: Invalid user tester from 157.230.245.91 port 40306 Apr 23 00:00:37 lock-38 sshd[1383321]: Invalid user tester from 157.230.245.91 port 40306 Apr 23 00:00:37 lock-38 sshd[1383321]: Failed password for invalid user tester from 157.230.245.91 port 40306 ssh2 ... |
2020-04-23 08:11:26 |
| 206.189.225.85 | attackspambots | Invalid user vo from 206.189.225.85 port 53808 |
2020-04-23 07:52:00 |
| 210.61.148.241 | attack | Invalid user zr from 210.61.148.241 port 56498 |
2020-04-23 08:09:10 |
| 51.38.179.179 | attackbots | Apr 22 22:01:46 game-panel sshd[19900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.179.179 Apr 22 22:01:48 game-panel sshd[19900]: Failed password for invalid user postgres from 51.38.179.179 port 35616 ssh2 Apr 22 22:08:37 game-panel sshd[20077]: Failed password for root from 51.38.179.179 port 42590 ssh2 |
2020-04-23 07:48:37 |
| 49.88.112.111 | attackbots | April 23 2020, 00:11:08 [sshd] - Banned from the Cipher Host hosting platform by Fail2ban. |
2020-04-23 08:21:35 |
| 120.151.222.78 | attackspam | Invalid user tester from 120.151.222.78 port 55850 |
2020-04-23 08:08:49 |
| 178.128.121.180 | attackbots | Invalid user eo from 178.128.121.180 port 59816 |
2020-04-23 08:02:05 |
| 51.77.148.77 | attack | detected by Fail2Ban |
2020-04-23 08:16:39 |
| 213.204.81.159 | attack | 2020-04-22T18:14:24.1000491495-001 sshd[65379]: Invalid user ax from 213.204.81.159 port 33108 2020-04-22T18:14:24.1081751495-001 sshd[65379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.204.81.159 2020-04-22T18:14:24.1000491495-001 sshd[65379]: Invalid user ax from 213.204.81.159 port 33108 2020-04-22T18:14:26.5816701495-001 sshd[65379]: Failed password for invalid user ax from 213.204.81.159 port 33108 ssh2 2020-04-22T18:22:40.9217431495-001 sshd[580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.204.81.159 user=root 2020-04-22T18:22:43.1541931495-001 sshd[580]: Failed password for root from 213.204.81.159 port 45958 ssh2 ... |
2020-04-23 07:47:25 |
| 5.101.0.209 | attackspambots | [ThuApr2301:32:52.1062642020][:error][pid13956:tid47625659197184][client5.101.0.209:49152][client5.101.0.209]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchof"rx\^0\$"against"REQUEST_HEADERS:Content-Length"required.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"96"][id"392301"][rev"7"][msg"Atomicorp.comWAFRules:RequestContainingContent\,butMissingContent-Typeheader"][severity"NOTICE"][tag"no_ar"][hostname"136.243.224.52"][uri"/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"][unique_id"XqDUJGZ10wk7dCK0oHquDQAAAU8"][ThuApr2301:34:52.2435132020][:error][pid13917:tid47625659197184][client5.101.0.209:50360][client5.101.0.209]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchof"rx\^0\$"against"REQUEST_HEADERS:Content-Length"required.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"96"][id"392301"][rev"7"][msg"Atomicorp.comWAFRules:RequestContainingContent\,butMissingContent-Typeheader"][severity"NOTICE"][tag"no_ar"][hostname"136.243 |
2020-04-23 07:53:51 |
| 81.183.222.181 | attack | SSH brute force |
2020-04-23 08:13:42 |
| 77.123.20.173 | attackbotsspam | Unauthorized connection attempt from IP address 77.123.20.173 on Port 3389(RDP) |
2020-04-23 08:05:32 |
| 106.13.28.99 | attack | SSH brute force |
2020-04-23 08:00:59 |