City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.82.91.211
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31588
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;141.82.91.211. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012100 1800 900 604800 86400
;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 21 19:07:57 CST 2025
;; MSG SIZE rcvd: 106Host 211.91.82.141.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 211.91.82.141.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 173.212.248.238 | attackspam | eintrachtkultkellerfulda.de 173.212.248.238 \[14/Nov/2019:23:37:33 +0100\] "POST /wp-login.php HTTP/1.1" 200 2702 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" eintrachtkultkellerfulda.de 173.212.248.238 \[14/Nov/2019:23:37:34 +0100\] "POST /wp-login.php HTTP/1.1" 200 2667 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" eintrachtkultkellerfulda.de 173.212.248.238 \[14/Nov/2019:23:37:34 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 426 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-15 07:23:00 |
| 81.26.130.133 | attack | Nov 14 13:08:20 eddieflores sshd\[599\]: Invalid user koson from 81.26.130.133 Nov 14 13:08:20 eddieflores sshd\[599\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.26.130.133 Nov 14 13:08:22 eddieflores sshd\[599\]: Failed password for invalid user koson from 81.26.130.133 port 48246 ssh2 Nov 14 13:12:59 eddieflores sshd\[1037\]: Invalid user petronela from 81.26.130.133 Nov 14 13:12:59 eddieflores sshd\[1037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.26.130.133 |
2019-11-15 07:25:49 |
| 202.51.74.189 | attack | Invalid user layko from 202.51.74.189 port 39388 |
2019-11-15 07:20:51 |
| 113.204.228.66 | attack | Nov 14 23:37:28 MK-Soft-VM7 sshd[20030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.204.228.66 Nov 14 23:37:30 MK-Soft-VM7 sshd[20030]: Failed password for invalid user www from 113.204.228.66 port 57272 ssh2 ... |
2019-11-15 07:27:11 |
| 128.199.219.181 | attackbotsspam | 2019-11-14T23:24:53.421054shield sshd\[19937\]: Invalid user sifuentes from 128.199.219.181 port 43725 2019-11-14T23:24:53.425458shield sshd\[19937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.219.181 2019-11-14T23:24:56.367888shield sshd\[19937\]: Failed password for invalid user sifuentes from 128.199.219.181 port 43725 ssh2 2019-11-14T23:28:43.569149shield sshd\[20715\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.219.181 user=root 2019-11-14T23:28:45.417482shield sshd\[20715\]: Failed password for root from 128.199.219.181 port 33755 ssh2 |
2019-11-15 07:37:23 |
| 41.77.145.34 | attackbotsspam | Nov 14 13:42:01 auw2 sshd\[31934\]: Invalid user 123456dg from 41.77.145.34 Nov 14 13:42:01 auw2 sshd\[31934\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.parliament.gov.zm Nov 14 13:42:03 auw2 sshd\[31934\]: Failed password for invalid user 123456dg from 41.77.145.34 port 6147 ssh2 Nov 14 13:46:35 auw2 sshd\[32314\]: Invalid user snoopdog from 41.77.145.34 Nov 14 13:46:35 auw2 sshd\[32314\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.parliament.gov.zm |
2019-11-15 07:51:50 |
| 203.93.209.8 | attack | Nov 14 23:36:25 MK-Soft-VM5 sshd[16270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.93.209.8 Nov 14 23:36:28 MK-Soft-VM5 sshd[16270]: Failed password for invalid user sysadm from 203.93.209.8 port 38802 ssh2 ... |
2019-11-15 07:58:40 |
| 49.88.112.68 | attack | Nov 14 19:36:37 firewall sshd[3138]: Failed password for root from 49.88.112.68 port 26677 ssh2 Nov 14 19:37:22 firewall sshd[3149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.68 user=root Nov 14 19:37:25 firewall sshd[3149]: Failed password for root from 49.88.112.68 port 41496 ssh2 ... |
2019-11-15 07:29:33 |
| 106.13.23.141 | attackspambots | Invalid user a from 106.13.23.141 port 53952 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.23.141 Failed password for invalid user a from 106.13.23.141 port 53952 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.23.141 user=root Failed password for root from 106.13.23.141 port 60162 ssh2 |
2019-11-15 07:19:08 |
| 201.159.154.204 | attackbotsspam | Nov 15 00:19:12 lnxded64 sshd[31697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.159.154.204 |
2019-11-15 07:34:22 |
| 37.120.148.78 | attack | 3389BruteforceFW21 |
2019-11-15 07:18:18 |
| 49.236.203.163 | attack | Jul 7 11:16:43 vtv3 sshd\[17103\]: Invalid user jboss from 49.236.203.163 port 43970 Jul 7 11:16:43 vtv3 sshd\[17103\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.236.203.163 Jul 7 11:16:45 vtv3 sshd\[17103\]: Failed password for invalid user jboss from 49.236.203.163 port 43970 ssh2 Jul 7 11:20:50 vtv3 sshd\[19037\]: Invalid user amsftp from 49.236.203.163 port 54308 Jul 7 11:20:50 vtv3 sshd\[19037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.236.203.163 Jul 7 11:31:10 vtv3 sshd\[24136\]: Invalid user nice from 49.236.203.163 port 40306 Jul 7 11:31:10 vtv3 sshd\[24136\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.236.203.163 Jul 7 11:31:12 vtv3 sshd\[24136\]: Failed password for invalid user nice from 49.236.203.163 port 40306 ssh2 Jul 7 11:33:50 vtv3 sshd\[25159\]: Invalid user 1111 from 49.236.203.163 port 36808 Jul 7 11:33:50 vtv3 sshd\[25159\] |
2019-11-15 07:28:03 |
| 51.68.123.192 | attackbotsspam | Nov 15 00:15:10 SilenceServices sshd[28148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.123.192 Nov 15 00:18:43 SilenceServices sshd[31283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.123.192 |
2019-11-15 07:37:43 |
| 187.23.193.149 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/187.23.193.149/ BR - 1H : (485) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN28573 IP : 187.23.193.149 CIDR : 187.23.192.0/19 PREFIX COUNT : 1254 UNIQUE IP COUNT : 9653760 ATTACKS DETECTED ASN28573 : 1H - 1 3H - 5 6H - 17 12H - 33 24H - 62 DateTime : 2019-11-14 23:37:12 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-15 07:35:47 |
| 159.203.201.114 | attackspambots | 159.203.201.114 was recorded 5 times by 5 hosts attempting to connect to the following ports: 110. Incident counter (4h, 24h, all-time): 5, 5, 71 |
2019-11-15 07:23:32 |