City: Falkenstein
Region: Sachsen
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.251.42.90
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64159
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;148.251.42.90. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021301 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 01:45:09 CST 2025
;; MSG SIZE rcvd: 10690.42.251.148.in-addr.arpa domain name pointer static.90.42.251.148.clients.your-server.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
90.42.251.148.in-addr.arpa name = static.90.42.251.148.clients.your-server.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.175.167 | attackspambots | Time: Sat Sep 26 15:58:51 2020 +0000 IP: 222.186.175.167 (CN/China/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 26 15:58:38 47-1 sshd[71055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167 user=root Sep 26 15:58:40 47-1 sshd[71055]: Failed password for root from 222.186.175.167 port 1194 ssh2 Sep 26 15:58:43 47-1 sshd[71055]: Failed password for root from 222.186.175.167 port 1194 ssh2 Sep 26 15:58:47 47-1 sshd[71055]: Failed password for root from 222.186.175.167 port 1194 ssh2 Sep 26 15:58:50 47-1 sshd[71055]: Failed password for root from 222.186.175.167 port 1194 ssh2 |
2020-09-29 01:43:30 |
| 118.89.102.242 | attack | SSH login attempts. |
2020-09-29 02:13:53 |
| 106.54.140.165 | attackbotsspam | Time: Sat Sep 26 18:20:56 2020 +0000 IP: 106.54.140.165 (CN/China/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 26 17:46:33 activeserver sshd[25946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.140.165 user=root Sep 26 17:46:36 activeserver sshd[25946]: Failed password for root from 106.54.140.165 port 55044 ssh2 Sep 26 18:13:28 activeserver sshd[24313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.140.165 user=root Sep 26 18:13:29 activeserver sshd[24313]: Failed password for root from 106.54.140.165 port 49828 ssh2 Sep 26 18:20:52 activeserver sshd[9656]: Invalid user data from 106.54.140.165 port 46528 |
2020-09-29 02:09:17 |
| 5.39.95.38 | attack | 2020-09-28T14:08:18.545336sorsha.thespaminator.com sshd[28119]: Invalid user gpadmin from 5.39.95.38 port 56556 2020-09-28T14:08:20.694741sorsha.thespaminator.com sshd[28119]: Failed password for invalid user gpadmin from 5.39.95.38 port 56556 ssh2 ... |
2020-09-29 02:14:05 |
| 46.63.108.166 | attackspambots | (sshd) Failed SSH login from 46.63.108.166 (UA/Ukraine/pool-46-63-108-166.x-city.ua): 5 in the last 3600 secs |
2020-09-29 01:37:03 |
| 123.17.195.170 | attackspambots | 445/tcp 445/tcp [2020-09-27]2pkt |
2020-09-29 01:37:44 |
| 119.165.111.237 | attackbotsspam | Tried our host z. |
2020-09-29 02:13:40 |
| 118.174.211.220 | attackspam | 2020-09-28T11:27:06.652091vps773228.ovh.net sshd[25724]: Invalid user rapid from 118.174.211.220 port 40280 2020-09-28T11:27:06.666598vps773228.ovh.net sshd[25724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.174.211.220 2020-09-28T11:27:06.652091vps773228.ovh.net sshd[25724]: Invalid user rapid from 118.174.211.220 port 40280 2020-09-28T11:27:08.806356vps773228.ovh.net sshd[25724]: Failed password for invalid user rapid from 118.174.211.220 port 40280 ssh2 2020-09-28T11:31:43.108809vps773228.ovh.net sshd[25768]: Invalid user student1 from 118.174.211.220 port 50440 ... |
2020-09-29 02:00:14 |
| 120.92.117.182 | attackbots | $f2bV_matches |
2020-09-29 01:50:33 |
| 202.83.45.72 | attackspam | [MK-Root1] Blocked by UFW |
2020-09-29 02:02:09 |
| 197.53.245.138 | attack | 23/tcp [2020-09-27]1pkt |
2020-09-29 01:55:30 |
| 31.163.155.170 | attackspam | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-09-29 02:01:16 |
| 37.247.209.178 | attackspam | Time: Sun Sep 27 01:52:50 2020 +0000 IP: 37.247.209.178 (PL/Poland/apn-37-247-209-178.dynamic.gprs.plus.pl) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 27 01:48:05 activeserver sshd[6133]: Invalid user private from 37.247.209.178 port 39478 Sep 27 01:48:07 activeserver sshd[6133]: Failed password for invalid user private from 37.247.209.178 port 39478 ssh2 Sep 27 01:51:12 activeserver sshd[12841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.247.209.178 user=root Sep 27 01:51:15 activeserver sshd[12841]: Failed password for root from 37.247.209.178 port 55694 ssh2 Sep 27 01:52:46 activeserver sshd[16271]: Invalid user test from 37.247.209.178 port 35556 |
2020-09-29 01:57:30 |
| 18.234.97.74 | attack | Lines containing failures of 18.234.97.74 Sep 27 22:12:54 dns01 sshd[11689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.234.97.74 user=r.r Sep 27 22:12:56 dns01 sshd[11689]: Failed password for r.r from 18.234.97.74 port 41606 ssh2 Sep 27 22:12:56 dns01 sshd[11689]: Received disconnect from 18.234.97.74 port 41606:11: Bye Bye [preauth] Sep 27 22:12:56 dns01 sshd[11689]: Disconnected from authenticating user r.r 18.234.97.74 port 41606 [preauth] Sep 27 22:27:46 dns01 sshd[15223]: Invalid user kbe from 18.234.97.74 port 60414 Sep 27 22:27:46 dns01 sshd[15223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.234.97.74 Sep 27 22:27:48 dns01 sshd[15223]: Failed password for invalid user kbe from 18.234.97.74 port 60414 ssh2 Sep 27 22:27:48 dns01 sshd[15223]: Received disconnect from 18.234.97.74 port 60414:11: Bye Bye [preauth] Sep 27 22:27:48 dns01 sshd[15223]: Disconnected from inval........ ------------------------------ |
2020-09-29 01:53:22 |
| 193.29.13.31 | attack | ataque tcp intento de intrusion |
2020-09-29 02:02:05 |