City: Stuttgart
Region: Baden-Württemberg Region
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: Universitaet Stuttgart
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.58.41.152
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17723
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;141.58.41.152. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019070201 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 03 02:41:55 CST 2019
;; MSG SIZE rcvd: 117152.41.58.141.in-addr.arpa domain name pointer s-8d3a2998.on.site.uni-stuttgart.de.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
152.41.58.141.in-addr.arpa name = s-8d3a2998.on.site.uni-stuttgart.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 170.0.51.189 | attackbotsspam | (smtpauth) Failed SMTP AUTH login from 170.0.51.189 (BR/Brazil/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-10 00:48:31 plain authenticator failed for ([170.0.51.189]) [170.0.51.189]: 535 Incorrect authentication data (set_id=info) |
2020-06-10 06:29:54 |
| 37.146.78.59 | attack | Jun 10 00:19:15 debian-2gb-nbg1-2 kernel: \[13999888.806899\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=37.146.78.59 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=41362 PROTO=TCP SPT=40913 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-10 06:23:24 |
| 185.39.11.57 | attack | Multiport scan : 28 ports scanned 30059 30062 30065 30073 30076 30079 30084 30085 30089 30090 30093 30094 30097 30099 30100 30101 30102 30104 30107 30109 30110 30111 30115 30117 30118 30121 30122 30123 |
2020-06-10 06:54:44 |
| 14.139.173.199 | attackspam | Jun 9 22:20:42 scw-6657dc sshd[29465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.139.173.199 Jun 9 22:20:42 scw-6657dc sshd[29465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.139.173.199 Jun 9 22:20:44 scw-6657dc sshd[29465]: Failed password for invalid user totalcard from 14.139.173.199 port 59528 ssh2 ... |
2020-06-10 06:47:58 |
| 79.127.48.141 | attackspam | bruteforce detected |
2020-06-10 06:38:14 |
| 218.92.0.173 | attackspambots | Jun 10 00:52:17 legacy sshd[4610]: Failed password for root from 218.92.0.173 port 11392 ssh2 Jun 10 00:52:29 legacy sshd[4610]: error: maximum authentication attempts exceeded for root from 218.92.0.173 port 11392 ssh2 [preauth] Jun 10 00:52:46 legacy sshd[4615]: Failed password for root from 218.92.0.173 port 53484 ssh2 ... |
2020-06-10 06:57:37 |
| 201.182.72.250 | attack | SSH Invalid Login |
2020-06-10 06:45:50 |
| 117.89.173.138 | attackspam | Jun 10 00:20:13 mail sshd[8260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.89.173.138 Jun 10 00:20:15 mail sshd[8260]: Failed password for invalid user nicolas from 117.89.173.138 port 38000 ssh2 ... |
2020-06-10 06:21:59 |
| 65.24.233.26 | attackbots | Brute forcing email accounts |
2020-06-10 06:50:18 |
| 185.176.27.62 | attack |
|
2020-06-10 06:42:23 |
| 89.252.160.125 | attack | Jun 10 00:46:33 debian kernel: [641749.498785] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=89.252.160.125 DST=89.252.131.35 LEN=52 TOS=0x00 PREC=0x00 TTL=127 ID=25628 DF PROTO=TCP SPT=64792 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 |
2020-06-10 06:21:14 |
| 93.42.155.129 | attack | port scan and connect, tcp 1433 (ms-sql-s) |
2020-06-10 06:21:02 |
| 188.131.180.15 | attackbotsspam | Jun 9 17:13:07 firewall sshd[18459]: Failed password for root from 188.131.180.15 port 51298 ssh2 Jun 9 17:18:19 firewall sshd[18640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.180.15 user=root Jun 9 17:18:22 firewall sshd[18640]: Failed password for root from 188.131.180.15 port 46286 ssh2 ... |
2020-06-10 06:41:15 |
| 125.70.244.4 | attack | Jun 10 01:24:44 hosting sshd[19075]: Invalid user nagios from 125.70.244.4 port 48764 ... |
2020-06-10 06:56:17 |
| 125.124.120.123 | attackspam | SSH brutforce |
2020-06-10 06:20:46 |