City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.242.1.196
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26224
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.242.1.196. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022001 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 21 04:20:51 CST 2025
;; MSG SIZE rcvd: 106196.1.242.149.in-addr.arpa domain name pointer h01c4.koerber.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
196.1.242.149.in-addr.arpa name = h01c4.koerber.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 93.113.111.197 | attackbots | 93.113.111.197 - - [26/Jun/2020:04:56:32 +0100] "POST /wp-login.php HTTP/1.1" 200 1968 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 93.113.111.197 - - [26/Jun/2020:04:56:33 +0100] "POST /wp-login.php HTTP/1.1" 200 1972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 93.113.111.197 - - [26/Jun/2020:04:56:33 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-06-26 12:32:10 |
| 14.240.28.16 | attackspambots | 1593143772 - 06/26/2020 05:56:12 Host: 14.240.28.16/14.240.28.16 Port: 445 TCP Blocked |
2020-06-26 12:53:52 |
| 46.38.150.191 | attackspam | 2020-06-26 04:26:19 auth_plain authenticator failed for (User) [46.38.150.191]: 535 Incorrect authentication data (set_id=pier@csmailer.org) 2020-06-26 04:26:59 auth_plain authenticator failed for (User) [46.38.150.191]: 535 Incorrect authentication data (set_id=niagara@csmailer.org) 2020-06-26 04:27:39 auth_plain authenticator failed for (User) [46.38.150.191]: 535 Incorrect authentication data (set_id=dev12@csmailer.org) 2020-06-26 04:28:17 auth_plain authenticator failed for (User) [46.38.150.191]: 535 Incorrect authentication data (set_id=gdm-japan-19q1@csmailer.org) 2020-06-26 04:28:57 auth_plain authenticator failed for (User) [46.38.150.191]: 535 Incorrect authentication data (set_id=u24@csmailer.org) ... |
2020-06-26 12:38:41 |
| 45.115.178.83 | attackbots | Jun 26 05:50:31 pve1 sshd[25408]: Failed password for root from 45.115.178.83 port 56098 ssh2 ... |
2020-06-26 12:32:32 |
| 213.169.39.218 | attackspambots | Jun 26 04:57:40 game-panel sshd[7925]: Failed password for root from 213.169.39.218 port 32822 ssh2 Jun 26 05:01:19 game-panel sshd[8174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.169.39.218 Jun 26 05:01:21 game-panel sshd[8174]: Failed password for invalid user mich from 213.169.39.218 port 58164 ssh2 |
2020-06-26 13:08:36 |
| 120.92.117.134 | attackbots | unauthorized connection attempt |
2020-06-26 12:28:09 |
| 1.212.68.75 | attack | Icarus honeypot on github |
2020-06-26 12:58:39 |
| 129.204.34.208 | attackspam | Jun 26 11:34:08 webhost01 sshd[2446]: Failed password for root from 129.204.34.208 port 46548 ssh2 ... |
2020-06-26 13:00:00 |
| 52.172.212.171 | attack | 2020-06-25 23:48:04.134078-0500 localhost sshd[36092]: Failed password for root from 52.172.212.171 port 32268 ssh2 |
2020-06-26 13:06:12 |
| 49.232.175.244 | attackbots | Jun 26 10:56:33 webhost01 sshd[1812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.175.244 Jun 26 10:56:35 webhost01 sshd[1812]: Failed password for invalid user mailman from 49.232.175.244 port 58284 ssh2 ... |
2020-06-26 12:29:20 |
| 61.181.80.253 | attackbots | Invalid user lingxi from 61.181.80.253 port 57752 |
2020-06-26 13:03:30 |
| 51.137.79.150 | attackspambots | " " |
2020-06-26 13:14:53 |
| 2a01:4f8:192:80c4::2 | attackspambots | [FriJun2605:55:59.6525992020][:error][pid13396:tid47316455143168][client2a01:4f8:192:80c4::2:58942][client2a01:4f8:192:80c4::2]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"MJ12bot"atREQUEST_HEADERS:User-Agent.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"380"][id"333515"][rev"4"][msg"Atomicorp.comWAFRules:MJ12Distributedbotdetected\(Disablethisruleifyouwanttoallowthisbot\)"][severity"WARNING"][tag"no_ar"][hostname"jack-in-the-box.ch"][uri"/robots.txt"][unique_id"XvVxz2eT8OLGm-9rn-L3rgAAAVQ"][FriJun2605:56:00.0193292020][:error][pid13461:tid47316368668416][client2a01:4f8:192:80c4::2:53274][client2a01:4f8:192:80c4::2]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"MJ12bot"atREQUEST_HEADERS:User-Agent.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"380"][id"333515"][rev"4"][msg"Atomicorp.comWAFRules:MJ12Distributedbotdetected\(Disablethisruleifyouwanttoallowthisbot\)"][severity"WARNING"][tag"no_ar"][hostnam |
2020-06-26 13:02:03 |
| 222.186.190.14 | attack | Jun 26 07:08:51 abendstille sshd\[12810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.14 user=root Jun 26 07:08:53 abendstille sshd\[12810\]: Failed password for root from 222.186.190.14 port 41388 ssh2 Jun 26 07:09:00 abendstille sshd\[12989\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.14 user=root Jun 26 07:09:02 abendstille sshd\[12989\]: Failed password for root from 222.186.190.14 port 20704 ssh2 Jun 26 07:09:15 abendstille sshd\[13102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.14 user=root ... |
2020-06-26 13:09:53 |
| 222.186.31.83 | attack | Jun 26 06:53:27 vpn01 sshd[3663]: Failed password for root from 222.186.31.83 port 25246 ssh2 ... |
2020-06-26 12:55:26 |