City: Friedrichshafen
Region: Baden-Württemberg
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.238.170.180
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15734
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.238.170.180.		IN	A
;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021300 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 22:20:18 CST 2025
;; MSG SIZE  rcvd: 108Host 180.170.238.149.in-addr.arpa. not found: 3(NXDOMAIN)Server:		183.60.83.19
Address:	183.60.83.19#53
** server can't find 180.170.238.149.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime | 
|---|---|---|---|
| 95.217.181.116 | attackbots | TCP Port Scanning | 2020-07-10 07:32:34 | 
| 34.83.165.129 | attackspambots | Forbidden directory scan :: 2020/07/09 20:19:02 [error] 14806#14806: *1444452 access forbidden by rule, client: 34.83.165.129, server: [censored_1], request: "GET /.env HTTP/1.1", host: "www.[censored_1]" | 2020-07-10 07:07:36 | 
| 189.51.203.23 | attackbotsspam | (smtpauth) Failed SMTP AUTH login from 189.51.203.23 (BR/Brazil/23.203.51.189.ns.net.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-10 00:48:51 plain authenticator failed for ([189.51.203.23]) [189.51.203.23]: 535 Incorrect authentication data (set_id=info) | 2020-07-10 07:16:30 | 
| 43.248.124.132 | attack | Jul 9 14:01:46 dignus sshd[32760]: Failed password for invalid user HTTP from 43.248.124.132 port 57344 ssh2 Jul 9 14:04:13 dignus sshd[577]: Invalid user dati from 43.248.124.132 port 58448 Jul 9 14:04:13 dignus sshd[577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.248.124.132 Jul 9 14:04:15 dignus sshd[577]: Failed password for invalid user dati from 43.248.124.132 port 58448 ssh2 Jul 9 14:06:42 dignus sshd[907]: Invalid user fax from 43.248.124.132 port 59552 ... | 2020-07-10 07:20:52 | 
| 106.12.205.137 | attack | Jul 9 22:08:54 IngegnereFirenze sshd[30761]: Failed password for invalid user chl from 106.12.205.137 port 53586 ssh2 ... | 2020-07-10 07:23:16 | 
| 115.59.20.253 | attackbots | Unauthorised access (Jul 9) SRC=115.59.20.253 LEN=40 TTL=47 ID=43126 TCP DPT=8080 WINDOW=41524 SYN | 2020-07-10 07:10:00 | 
| 222.186.30.112 | attackbotsspam | 2020-07-10T01:01:35.991169vps773228.ovh.net sshd[19381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.112 user=root 2020-07-10T01:01:37.894515vps773228.ovh.net sshd[19381]: Failed password for root from 222.186.30.112 port 27026 ssh2 2020-07-10T01:01:35.991169vps773228.ovh.net sshd[19381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.112 user=root 2020-07-10T01:01:37.894515vps773228.ovh.net sshd[19381]: Failed password for root from 222.186.30.112 port 27026 ssh2 2020-07-10T01:01:40.133390vps773228.ovh.net sshd[19381]: Failed password for root from 222.186.30.112 port 27026 ssh2 ... | 2020-07-10 07:09:34 | 
| 5.188.62.14 | attack | SSH Bruteforce on Honeypot | 2020-07-10 07:30:32 | 
| 212.64.43.52 | attack | Jul 9 21:52:03 roki-contabo sshd\[21847\]: Invalid user couchdb from 212.64.43.52 Jul 9 21:52:03 roki-contabo sshd\[21847\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.43.52 Jul 9 21:52:05 roki-contabo sshd\[21847\]: Failed password for invalid user couchdb from 212.64.43.52 port 40760 ssh2 Jul 9 22:18:37 roki-contabo sshd\[22515\]: Invalid user sales from 212.64.43.52 Jul 9 22:18:37 roki-contabo sshd\[22515\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.43.52 ... | 2020-07-10 07:31:37 | 
| 34.101.245.236 | attack | SSH Invalid Login | 2020-07-10 07:31:25 | 
| 218.92.0.223 | attack | Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) | 2020-07-10 07:24:50 | 
| 164.132.225.151 | attack | Jul 10 02:14:21 journals sshd\[108036\]: Invalid user roxanne from 164.132.225.151 Jul 10 02:14:21 journals sshd\[108036\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.225.151 Jul 10 02:14:22 journals sshd\[108036\]: Failed password for invalid user roxanne from 164.132.225.151 port 34687 ssh2 Jul 10 02:17:19 journals sshd\[108427\]: Invalid user juhee from 164.132.225.151 Jul 10 02:17:19 journals sshd\[108427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.225.151 ... | 2020-07-10 07:21:26 | 
| 185.93.75.247 | attackbots | 2020-07-0921:48:04dovecot_plainauthenticatorfailedfor\([195.226.207.220]\)[195.226.207.220]:41394:535Incorrectauthenticationdata\(set_id=info\)2020-07-0922:12:12dovecot_plainauthenticatorfailedfor\([177.23.62.198]\)[177.23.62.198]:60468:535Incorrectauthenticationdata\(set_id=info\)2020-07-0922:04:32dovecot_plainauthenticatorfailedfor\([91.82.63.195]\)[91.82.63.195]:4507:535Incorrectauthenticationdata\(set_id=info\)2020-07-0922:16:27dovecot_plainauthenticatorfailedfor\([189.8.11.14]\)[189.8.11.14]:38530:535Incorrectauthenticationdata\(set_id=info\)2020-07-0922:15:21dovecot_plainauthenticatorfailedfor\([191.53.238.104]\)[191.53.238.104]:41891:535Incorrectauthenticationdata\(set_id=info\)2020-07-0922:18:56dovecot_plainauthenticatorfailedfor\([186.216.67.176]\)[186.216.67.176]:52012:535Incorrectauthenticationdata\(set_id=info\)2020-07-0921:46:58dovecot_plainauthenticatorfailedfor\([177.71.14.207]\)[177.71.14.207]:2923:535Incorrectauthenticationdata\(set_id=info\)2020-07-0921:57:06dovecot_plainauthenticatorfailedf | 2020-07-10 07:11:35 | 
| 150.101.108.160 | attack | Jul 9 20:11:28 vlre-nyc-1 sshd\[5412\]: Invalid user userftp from 150.101.108.160 Jul 9 20:11:28 vlre-nyc-1 sshd\[5412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.101.108.160 Jul 9 20:11:30 vlre-nyc-1 sshd\[5412\]: Failed password for invalid user userftp from 150.101.108.160 port 34142 ssh2 Jul 9 20:18:54 vlre-nyc-1 sshd\[5526\]: Invalid user karsten from 150.101.108.160 Jul 9 20:18:54 vlre-nyc-1 sshd\[5526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.101.108.160 ... | 2020-07-10 07:04:23 | 
| 192.99.36.177 | attack | Attempts against non-existent wp-login | 2020-07-10 06:56:38 |