City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.52.159.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26604
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;141.52.159.239. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 18:45:19 CST 2025
;; MSG SIZE rcvd: 107Host 239.159.52.141.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 239.159.52.141.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 221.194.137.28 | attackspambots | Sep 1 09:03:14 yabzik sshd[13356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.194.137.28 Sep 1 09:03:17 yabzik sshd[13356]: Failed password for invalid user httpfs from 221.194.137.28 port 35148 ssh2 Sep 1 09:07:28 yabzik sshd[14972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.194.137.28 |
2019-09-01 14:10:51 |
| 106.12.128.114 | attackbotsspam | Sep 1 02:57:16 MK-Soft-VM6 sshd\[11674\]: Invalid user it2 from 106.12.128.114 port 57490 Sep 1 02:57:16 MK-Soft-VM6 sshd\[11674\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.128.114 Sep 1 02:57:18 MK-Soft-VM6 sshd\[11674\]: Failed password for invalid user it2 from 106.12.128.114 port 57490 ssh2 ... |
2019-09-01 13:43:09 |
| 106.12.193.160 | attackspam | Sep 1 00:10:35 dedicated sshd[11798]: Invalid user sheng from 106.12.193.160 port 57036 |
2019-09-01 13:24:11 |
| 40.115.98.94 | attack | Sep 1 02:01:48 OPSO sshd\[6866\]: Invalid user rosaleen from 40.115.98.94 port 48432 Sep 1 02:01:48 OPSO sshd\[6866\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.115.98.94 Sep 1 02:01:50 OPSO sshd\[6866\]: Failed password for invalid user rosaleen from 40.115.98.94 port 48432 ssh2 Sep 1 02:06:12 OPSO sshd\[7285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.115.98.94 user=root Sep 1 02:06:14 OPSO sshd\[7285\]: Failed password for root from 40.115.98.94 port 37110 ssh2 |
2019-09-01 14:27:15 |
| 103.121.117.180 | attackbotsspam | Invalid user pai from 103.121.117.180 port 27198 |
2019-09-01 13:24:38 |
| 5.62.41.147 | attackspambots | VoIP Brute Force - 5.62.41.147 - Auto Report ... |
2019-09-01 13:28:33 |
| 149.28.159.66 | attackbots | Automatic report - Banned IP Access |
2019-09-01 14:14:53 |
| 2.139.215.255 | attackspam | 2019-09-01T05:24:35.144Z CLOSE host=2.139.215.255 port=45677 fd=6 time=970.337 bytes=1770 ... |
2019-09-01 13:26:40 |
| 85.209.0.124 | attackspam | Port scan |
2019-09-01 14:08:54 |
| 167.71.214.180 | attack | DATE:2019-08-31 23:43:30, IP:167.71.214.180, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2019-09-01 13:44:04 |
| 85.209.0.49 | attackspambots | Blocked for port scanning. Time: Sat Aug 31. 21:32:11 2019 +0200 IP: 85.209.0.49 (RU/Russia/-) Sample of block hits: Aug 31 21:31:31 vserv kernel: [40882032.533622] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=85.209.0.49 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=44119 PROTO=TCP SPT=59887 DPT=3481 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 31 21:31:33 vserv kernel: [40882034.400273] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=85.209.0.49 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=60479 PROTO=TCP SPT=59887 DPT=3490 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 31 21:31:39 vserv kernel: [40882040.242229] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=85.209.0.49 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=896 PROTO=TCP SPT=59887 DPT=3354 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 31 21:31:39 vserv kernel: [40882040.281872] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=85.209.0.49 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=51528 PROTO=TCP SPT=59887 DPT=3392 WINDOW=1024 .... |
2019-09-01 14:34:19 |
| 106.75.21.242 | attackspambots | Aug 31 23:43:49 mail sshd\[10209\]: Invalid user gfep from 106.75.21.242 Aug 31 23:43:49 mail sshd\[10209\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.21.242 Aug 31 23:43:51 mail sshd\[10209\]: Failed password for invalid user gfep from 106.75.21.242 port 33620 ssh2 ... |
2019-09-01 13:27:08 |
| 54.39.148.234 | attackbotsspam | Sep 1 07:13:04 rotator sshd\[30533\]: Failed password for root from 54.39.148.234 port 46320 ssh2Sep 1 07:13:07 rotator sshd\[30533\]: Failed password for root from 54.39.148.234 port 46320 ssh2Sep 1 07:13:09 rotator sshd\[30533\]: Failed password for root from 54.39.148.234 port 46320 ssh2Sep 1 07:13:12 rotator sshd\[30533\]: Failed password for root from 54.39.148.234 port 46320 ssh2Sep 1 07:13:15 rotator sshd\[30533\]: Failed password for root from 54.39.148.234 port 46320 ssh2Sep 1 07:13:19 rotator sshd\[30533\]: Failed password for root from 54.39.148.234 port 46320 ssh2 ... |
2019-09-01 13:28:01 |
| 13.126.42.80 | attackbotsspam | 2019-09-01T05:26:17.443998abusebot-8.cloudsearch.cf sshd\[27763\]: Invalid user grid from 13.126.42.80 port 42895 |
2019-09-01 13:41:03 |
| 106.13.56.45 | attackspambots | Sep 1 01:09:24 OPSO sshd\[32208\]: Invalid user ksgdb from 106.13.56.45 port 37994 Sep 1 01:09:24 OPSO sshd\[32208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.45 Sep 1 01:09:26 OPSO sshd\[32208\]: Failed password for invalid user ksgdb from 106.13.56.45 port 37994 ssh2 Sep 1 01:12:28 OPSO sshd\[363\]: Invalid user taz from 106.13.56.45 port 35550 Sep 1 01:12:28 OPSO sshd\[363\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.45 |
2019-09-01 13:27:36 |