City: Ulm
Region: Baden-Württemberg
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.207.54.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39185
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;149.207.54.71. IN A
;; AUTHORITY SECTION:
. 594 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019091802 1800 900 604800 86400
;; Query time: 669 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 19 18:35:59 CST 2019
;; MSG SIZE rcvd: 117
71.54.207.149.in-addr.arpa has no PTR record
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
*** Can't find 71.54.207.149.in-addr.arpa.: No answer
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 80.82.77.227 | attackbots | Fail2Ban Ban Triggered |
2019-12-11 13:30:31 |
| 89.110.39.34 | attackbotsspam | invalid user |
2019-12-11 13:52:20 |
| 185.176.27.170 | attackbots | Dec 11 04:40:22 mail kernel: [7415725.689551] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.170 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=44466 PROTO=TCP SPT=45121 DPT=46071 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 11 04:43:44 mail kernel: [7415927.860354] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.170 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=6807 PROTO=TCP SPT=45121 DPT=4575 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 11 04:46:49 mail kernel: [7416112.187175] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.170 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=17946 PROTO=TCP SPT=45121 DPT=32989 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 11 04:48:58 mail kernel: [7416241.240323] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.170 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=4278 PROTO=TCP SPT=45121 DPT=13258 WINDOW=1024 RES=0x00 |
2019-12-11 13:47:41 |
| 217.111.239.37 | attack | Dec 10 19:21:06 auw2 sshd\[4113\]: Invalid user runion from 217.111.239.37 Dec 10 19:21:06 auw2 sshd\[4113\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.111.239.37 Dec 10 19:21:08 auw2 sshd\[4113\]: Failed password for invalid user runion from 217.111.239.37 port 33052 ssh2 Dec 10 19:26:26 auw2 sshd\[4672\]: Invalid user VMware from 217.111.239.37 Dec 10 19:26:26 auw2 sshd\[4672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.111.239.37 |
2019-12-11 13:33:19 |
| 110.136.240.30 | attackspam | Unauthorised access (Dec 11) SRC=110.136.240.30 LEN=52 TTL=248 ID=11568 DF TCP DPT=445 WINDOW=8192 SYN |
2019-12-11 13:26:18 |
| 122.171.118.247 | attackspam | fail2ban |
2019-12-11 13:37:11 |
| 114.67.74.49 | attack | Dec 10 19:31:00 web1 sshd\[5823\]: Invalid user lechtenberg from 114.67.74.49 Dec 10 19:31:00 web1 sshd\[5823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.74.49 Dec 10 19:31:01 web1 sshd\[5823\]: Failed password for invalid user lechtenberg from 114.67.74.49 port 50102 ssh2 Dec 10 19:37:56 web1 sshd\[6521\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.74.49 user=news Dec 10 19:37:58 web1 sshd\[6521\]: Failed password for news from 114.67.74.49 port 53490 ssh2 |
2019-12-11 13:40:41 |
| 112.85.42.89 | attackspam | Dec 11 05:47:06 ns381471 sshd[29427]: Failed password for root from 112.85.42.89 port 40943 ssh2 |
2019-12-11 13:43:56 |
| 36.250.182.201 | attackbotsspam | $f2bV_matches |
2019-12-11 13:29:08 |
| 13.77.142.89 | attackspam | Dec 10 19:24:57 web9 sshd\[29349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.77.142.89 user=root Dec 10 19:24:58 web9 sshd\[29349\]: Failed password for root from 13.77.142.89 port 50296 ssh2 Dec 10 19:30:47 web9 sshd\[30137\]: Invalid user cpm from 13.77.142.89 Dec 10 19:30:47 web9 sshd\[30137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.77.142.89 Dec 10 19:30:49 web9 sshd\[30137\]: Failed password for invalid user cpm from 13.77.142.89 port 60382 ssh2 |
2019-12-11 13:34:08 |
| 188.195.106.65 | attackbots | 2019-12-11T04:54:54.374145abusebot-4.cloudsearch.cf sshd\[8257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ipbcc36a41.dynamic.kabel-deutschland.de user=root |
2019-12-11 13:31:36 |
| 189.79.115.63 | attackspambots | Dec 10 18:47:49 php1 sshd\[8290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.79.115.63 user=root Dec 10 18:47:50 php1 sshd\[8290\]: Failed password for root from 189.79.115.63 port 42152 ssh2 Dec 10 18:55:04 php1 sshd\[9320\]: Invalid user kehaulani from 189.79.115.63 Dec 10 18:55:04 php1 sshd\[9320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.79.115.63 Dec 10 18:55:06 php1 sshd\[9320\]: Failed password for invalid user kehaulani from 189.79.115.63 port 50110 ssh2 |
2019-12-11 13:14:21 |
| 79.137.75.5 | attackbotsspam | 2019-12-11T05:25:11.489105abusebot-5.cloudsearch.cf sshd\[2898\]: Invalid user tatianna from 79.137.75.5 port 54676 |
2019-12-11 13:46:57 |
| 207.154.193.178 | attackspambots | Dec 11 00:22:19 ny01 sshd[8547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.193.178 Dec 11 00:22:21 ny01 sshd[8547]: Failed password for invalid user guest from 207.154.193.178 port 60804 ssh2 Dec 11 00:27:30 ny01 sshd[9450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.193.178 |
2019-12-11 13:30:47 |
| 71.6.199.23 | attackspam | 71.6.199.23 was recorded 6 times by 5 hosts attempting to connect to the following ports: 25565,55554,50070,5672,5060. Incident counter (4h, 24h, all-time): 6, 75, 2996 |
2019-12-11 13:50:21 |