City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.220.76.244
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6723
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;149.220.76.244. IN A
;; AUTHORITY SECTION:
. 3092 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019071801 1800 900 604800 86400
;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jul 19 03:18:35 CST 2019
;; MSG SIZE rcvd: 118Host 244.76.220.149.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 244.76.220.149.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.169.247.72 | attack | Jan 4 10:14:23 solowordpress sshd[30125]: Invalid user user from 92.169.247.72 port 44046 ... |
2020-01-04 17:39:54 |
| 129.211.125.167 | attackspambots | $f2bV_matches_ltvn |
2020-01-04 17:21:10 |
| 62.165.30.221 | attackspambots | Jan 4 04:17:42 debian sshd[27780]: Unable to negotiate with 62.165.30.221 port 32718: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Jan 4 04:20:46 debian sshd[27902]: Unable to negotiate with 62.165.30.221 port 51711: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2020-01-04 17:35:11 |
| 61.219.247.107 | attack | Jan 4 05:49:11 ArkNodeAT sshd\[31254\]: Invalid user ovt from 61.219.247.107 Jan 4 05:49:11 ArkNodeAT sshd\[31254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.219.247.107 Jan 4 05:49:13 ArkNodeAT sshd\[31254\]: Failed password for invalid user ovt from 61.219.247.107 port 56276 ssh2 |
2020-01-04 17:31:04 |
| 13.64.18.44 | attackspambots | Automatic report - SSH Brute-Force Attack |
2020-01-04 17:39:19 |
| 52.77.230.233 | attackbotsspam | Jan 2 18:55:06 newdogma sshd[19599]: Invalid user shuo from 52.77.230.233 port 48428 Jan 2 18:55:06 newdogma sshd[19599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.77.230.233 Jan 2 18:55:08 newdogma sshd[19599]: Failed password for invalid user shuo from 52.77.230.233 port 48428 ssh2 Jan 2 18:55:09 newdogma sshd[19599]: Received disconnect from 52.77.230.233 port 48428:11: Bye Bye [preauth] Jan 2 18:55:09 newdogma sshd[19599]: Disconnected from 52.77.230.233 port 48428 [preauth] Jan 2 19:13:13 newdogma sshd[20018]: Invalid user hb from 52.77.230.233 port 39012 Jan 2 19:13:13 newdogma sshd[20018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.77.230.233 Jan 2 19:13:15 newdogma sshd[20018]: Failed password for invalid user hb from 52.77.230.233 port 39012 ssh2 Jan 2 19:13:15 newdogma sshd[20018]: Received disconnect from 52.77.230.233 port 39012:11: Bye Bye [preauth] Jan........ ------------------------------- |
2020-01-04 17:50:16 |
| 92.74.47.131 | attack | Lines containing failures of 92.74.47.131 Jan 4 05:46:51 shared04 sshd[2501]: Invalid user admin from 92.74.47.131 port 44842 Jan 4 05:46:51 shared04 sshd[2501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.74.47.131 Jan 4 05:46:53 shared04 sshd[2501]: Failed password for invalid user admin from 92.74.47.131 port 44842 ssh2 Jan 4 05:46:53 shared04 sshd[2501]: Received disconnect from 92.74.47.131 port 44842:11: Bye Bye [preauth] Jan 4 05:46:53 shared04 sshd[2501]: Disconnected from invalid user admin 92.74.47.131 port 44842 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=92.74.47.131 |
2020-01-04 17:19:37 |
| 65.52.198.85 | attackbots | wp-login.php |
2020-01-04 18:00:07 |
| 88.247.82.8 | attack | " " |
2020-01-04 17:52:50 |
| 201.22.171.54 | attack | Automatic report - Port Scan Attack |
2020-01-04 17:52:14 |
| 52.243.42.115 | attackspambots | Jan 4 01:49:28 vps46666688 sshd[28840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.243.42.115 Jan 4 01:49:30 vps46666688 sshd[28840]: Failed password for invalid user qu from 52.243.42.115 port 56146 ssh2 ... |
2020-01-04 17:18:14 |
| 165.22.112.45 | attackspambots | Jan 4 05:49:18 nextcloud sshd\[7273\]: Invalid user mwc from 165.22.112.45 Jan 4 05:49:18 nextcloud sshd\[7273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.112.45 Jan 4 05:49:20 nextcloud sshd\[7273\]: Failed password for invalid user mwc from 165.22.112.45 port 49444 ssh2 ... |
2020-01-04 17:24:40 |
| 185.49.86.54 | attack | Jan 4 09:06:40 meumeu sshd[23466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.49.86.54 Jan 4 09:06:42 meumeu sshd[23466]: Failed password for invalid user wt from 185.49.86.54 port 34246 ssh2 Jan 4 09:07:59 meumeu sshd[23615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.49.86.54 ... |
2020-01-04 17:21:53 |
| 192.241.213.168 | attackspam | Invalid user tomio from 192.241.213.168 port 34434 |
2020-01-04 17:28:11 |
| 42.117.244.163 | attackbots | Unauthorized connection attempt detected from IP address 42.117.244.163 to port 23 |
2020-01-04 17:43:29 |