City: Jena
Region: Thuringia
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.35.8.126
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65418
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;141.35.8.126. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019071500 1800 900 604800 86400
;; Query time: 86 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 15 23:50:57 CST 2019
;; MSG SIZE rcvd: 116Host 126.8.35.141.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 126.8.35.141.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 200.60.91.42 | attackspam | 2019-07-15T21:26:55.019701hub.schaetter.us sshd\[12302\]: Invalid user ca from 200.60.91.42 2019-07-15T21:26:55.048240hub.schaetter.us sshd\[12302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.60.91.42 2019-07-15T21:26:57.382103hub.schaetter.us sshd\[12302\]: Failed password for invalid user ca from 200.60.91.42 port 52928 ssh2 2019-07-15T21:32:19.792639hub.schaetter.us sshd\[12337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.60.91.42 user=root 2019-07-15T21:32:21.940636hub.schaetter.us sshd\[12337\]: Failed password for root from 200.60.91.42 port 48280 ssh2 ... |
2019-07-16 05:40:20 |
| 139.99.5.223 | attackspam | Jul 15 21:22:20 mail postfix/smtpd\[11322\]: warning: ip223.ip-139-99-5.net\[139.99.5.223\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 15 21:23:01 mail postfix/smtpd\[11321\]: warning: ip223.ip-139-99-5.net\[139.99.5.223\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 15 21:24:27 mail postfix/smtpd\[11321\]: warning: ip223.ip-139-99-5.net\[139.99.5.223\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-07-16 05:42:59 |
| 1.71.139.238 | attackbotsspam | Jul 15 22:57:55 icinga sshd[18143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.71.139.238 Jul 15 22:57:57 icinga sshd[18143]: Failed password for invalid user test2 from 1.71.139.238 port 34248 ssh2 ... |
2019-07-16 05:54:41 |
| 152.168.248.133 | attackspambots | Jul 15 21:56:03 mail sshd\[12940\]: Invalid user sansforensics from 152.168.248.133 port 34332 Jul 15 21:56:03 mail sshd\[12940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.168.248.133 ... |
2019-07-16 06:01:10 |
| 187.52.54.42 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-15 15:39:32,659 INFO [amun_request_handler] PortScan Detected on Port: 445 (187.52.54.42) |
2019-07-16 05:39:01 |
| 46.17.7.80 | attack | fail2ban honeypot |
2019-07-16 06:08:05 |
| 31.202.101.40 | attackbotsspam | [Mon Jul 15 18:51:30.728431 2019] [php5:error] [pid 18289] [client 31.202.101.40:59246] script '/data/web/construction/xmlrpc.php' not found or unable to stat [Mon Jul 15 18:51:30.758828 2019] [php5:error] [pid 18298] [client 31.202.101.40:59247] script '/data/web/construction/xmlrpc.php' not found or unable to stat [Mon Jul 15 18:51:30.811365 2019] [php5:error] [pid 18289] [client 31.202.101.40:59246] script '/data/web/construction/wp-login.php' not found or unable to stat [Mon Jul 15 18:51:30.841735 2019] [php5:error] [pid 18298] [client 31.202.101.40:59247] script '/data/web/construction/wp-login.php' not found or unable to stat |
2019-07-16 06:01:51 |
| 91.134.242.199 | attackspambots | Jul 15 23:11:01 eventyay sshd[13090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.242.199 Jul 15 23:11:03 eventyay sshd[13090]: Failed password for invalid user weblogic from 91.134.242.199 port 46924 ssh2 Jul 15 23:15:33 eventyay sshd[14097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.242.199 ... |
2019-07-16 05:23:52 |
| 163.172.160.182 | attackbots | Jul 15 16:51:28 ip-172-31-1-72 sshd\[26570\]: Invalid user mother from 163.172.160.182 Jul 15 16:51:28 ip-172-31-1-72 sshd\[26570\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.160.182 Jul 15 16:51:30 ip-172-31-1-72 sshd\[26570\]: Failed password for invalid user mother from 163.172.160.182 port 43168 ssh2 Jul 15 16:51:35 ip-172-31-1-72 sshd\[26572\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.160.182 user=root Jul 15 16:51:37 ip-172-31-1-72 sshd\[26572\]: Failed password for root from 163.172.160.182 port 45142 ssh2 |
2019-07-16 05:55:05 |
| 54.37.159.12 | attack | Jul 16 02:34:10 areeb-Workstation sshd\[12033\]: Invalid user cliente1 from 54.37.159.12 Jul 16 02:34:10 areeb-Workstation sshd\[12033\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.159.12 Jul 16 02:34:12 areeb-Workstation sshd\[12033\]: Failed password for invalid user cliente1 from 54.37.159.12 port 37084 ssh2 ... |
2019-07-16 05:22:10 |
| 110.167.174.85 | attack | Unauthorised access (Jul 16) SRC=110.167.174.85 LEN=44 TTL=241 ID=22484 TCP DPT=445 WINDOW=1024 SYN |
2019-07-16 05:53:13 |
| 104.238.81.58 | attackspam | Invalid user bear from 104.238.81.58 port 42646 |
2019-07-16 05:59:12 |
| 206.189.197.48 | attackspam | Invalid user insvis from 206.189.197.48 port 60158 |
2019-07-16 05:45:45 |
| 196.29.164.164 | attack | Scanning random ports - tries to find possible vulnerable services |
2019-07-16 05:49:02 |
| 203.93.163.82 | attackbotsspam | Jul 15 17:28:25 TORMINT sshd\[28144\]: Invalid user qqq from 203.93.163.82 Jul 15 17:28:25 TORMINT sshd\[28144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.93.163.82 Jul 15 17:28:27 TORMINT sshd\[28144\]: Failed password for invalid user qqq from 203.93.163.82 port 15820 ssh2 ... |
2019-07-16 05:46:06 |