City: Geislingen an der Steige
Region: Baden-Württemberg
Country: Germany
Internet Service Provider: Vodafone
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.172.198.39
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42405
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.172.198.39. IN A
;; AUTHORITY SECTION:
. 377 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022121400 1800 900 604800 86400
;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 14 16:59:34 CST 2022
;; MSG SIZE rcvd: 10739.198.172.149.in-addr.arpa domain name pointer ip-149-172-198-039.um42.pools.vodafone-ip.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
39.198.172.149.in-addr.arpa name = ip-149-172-198-039.um42.pools.vodafone-ip.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.248.159.69 | attackspam | 2019-11-21T20:48:39.297143abusebot-7.cloudsearch.cf sshd\[30946\]: Invalid user krten from 104.248.159.69 port 56342 |
2019-11-22 04:55:03 |
| 200.123.158.145 | attackspambots | Nov 21 08:00:27 hpm sshd\[18168\]: Invalid user nonah from 200.123.158.145 Nov 21 08:00:27 hpm sshd\[18168\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.123.158.145 Nov 21 08:00:30 hpm sshd\[18168\]: Failed password for invalid user nonah from 200.123.158.145 port 47347 ssh2 Nov 21 08:05:10 hpm sshd\[18552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.123.158.145 user=root Nov 21 08:05:12 hpm sshd\[18552\]: Failed password for root from 200.123.158.145 port 40841 ssh2 |
2019-11-22 05:04:01 |
| 111.177.32.83 | attackbots | Nov 21 17:51:40 sso sshd[32265]: Failed password for root from 111.177.32.83 port 51324 ssh2 ... |
2019-11-22 05:01:06 |
| 51.91.193.116 | attack | Basically logged into my outlook without my permission. |
2019-11-22 05:02:47 |
| 119.46.93.69 | attackbots | Port Scan 1433 |
2019-11-22 05:07:55 |
| 148.70.116.223 | attackspambots | Nov 21 10:24:16 plusreed sshd[22592]: Invalid user wwwrun from 148.70.116.223 ... |
2019-11-22 04:35:17 |
| 167.172.85.135 | attackspambots | SSH Brute Force, server-1 sshd[4439]: Failed password for root from 167.172.85.135 port 49062 ssh2 |
2019-11-22 04:50:10 |
| 189.112.18.254 | attackbotsspam | Fail2Ban Ban Triggered |
2019-11-22 05:04:23 |
| 31.14.138.86 | attackspambots | Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=31.14.138.86 |
2019-11-22 04:41:09 |
| 77.247.108.14 | attackbots | 11/21/2019-21:24:07.098789 77.247.108.14 Protocol: 17 ET SCAN Sipvicious Scan |
2019-11-22 05:02:36 |
| 185.164.72.118 | attackbots | Automatic report - Port Scan |
2019-11-22 04:54:36 |
| 99.108.141.4 | attackspam | k+ssh-bruteforce |
2019-11-22 04:30:31 |
| 181.174.125.86 | attackspam | Nov 21 07:36:37 web1 sshd\[29131\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.174.125.86 user=uucp Nov 21 07:36:39 web1 sshd\[29131\]: Failed password for uucp from 181.174.125.86 port 40320 ssh2 Nov 21 07:40:36 web1 sshd\[29506\]: Invalid user koraljka from 181.174.125.86 Nov 21 07:40:36 web1 sshd\[29506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.174.125.86 Nov 21 07:40:39 web1 sshd\[29506\]: Failed password for invalid user koraljka from 181.174.125.86 port 47750 ssh2 |
2019-11-22 04:43:46 |
| 129.204.47.217 | attack | Nov 21 17:28:44 ws19vmsma01 sshd[45226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.47.217 Nov 21 17:28:46 ws19vmsma01 sshd[45226]: Failed password for invalid user jarlin from 129.204.47.217 port 54373 ssh2 ... |
2019-11-22 04:34:48 |
| 150.95.54.138 | attackspambots | 150.95.54.138 - - \[21/Nov/2019:20:19:42 +0100\] "POST /wp-login.php HTTP/1.0" 200 7538 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 150.95.54.138 - - \[21/Nov/2019:20:19:45 +0100\] "POST /wp-login.php HTTP/1.0" 200 7363 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 150.95.54.138 - - \[21/Nov/2019:20:19:48 +0100\] "POST /wp-login.php HTTP/1.0" 200 7358 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-22 04:42:18 |