City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 160.100.196.96
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46218
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;160.100.196.96. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 02:41:37 CST 2025
;; MSG SIZE rcvd: 107Host 96.196.100.160.in-addr.arpa not found: 2(SERVFAIL)
server can't find 160.100.196.96.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 179.43.110.20 | attackspam | Unauthorised access (Nov 12) SRC=179.43.110.20 LEN=40 TTL=41 ID=25574 TCP DPT=23 WINDOW=3732 SYN |
2019-11-13 06:05:47 |
| 113.168.52.201 | attackspam | B: Magento admin pass test (wrong country) |
2019-11-13 06:14:05 |
| 167.172.173.174 | attackspambots | SSH login attempts with invalid user |
2019-11-13 06:10:54 |
| 192.236.209.46 | attackspam | from p-mtain004.msg.pkvw.co.charter.net ([107.14.70.244])
by dnvrco-fep08.email.rr.com
(InterMail vM.8.04.03.24 201-2389-100-172-20151028) with ESMTP
id <20191112130238.HCEZ7114.dnvrco-fep08.email.rr.com@p-mtain004.msg.pkvw.co.charter.net>
for |
2019-11-13 06:37:35 |
| 124.65.18.102 | attackbotsspam | 11/12/2019-17:27:24.252414 124.65.18.102 Protocol: 6 ET COMPROMISED Known Compromised or Hostile Host Traffic group 7 |
2019-11-13 06:38:55 |
| 42.114.30.237 | attackbots | B: Magento admin pass test (wrong country) |
2019-11-13 06:17:07 |
| 124.239.191.101 | attackspam | Nov 12 22:59:23 [host] sshd[32518]: Invalid user sftp from 124.239.191.101 Nov 12 22:59:23 [host] sshd[32518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.239.191.101 Nov 12 22:59:25 [host] sshd[32518]: Failed password for invalid user sftp from 124.239.191.101 port 41090 ssh2 |
2019-11-13 06:39:39 |
| 41.32.52.222 | attackspambots | B: Abusive content scan (200) |
2019-11-13 06:23:03 |
| 128.199.185.42 | attack | Nov 12 15:49:31 srv3 sshd\[28816\]: Invalid user md from 128.199.185.42 Nov 12 15:49:31 srv3 sshd\[28816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.185.42 Nov 12 15:49:33 srv3 sshd\[28816\]: Failed password for invalid user md from 128.199.185.42 port 35081 ssh2 ... |
2019-11-13 06:38:07 |
| 167.71.212.245 | attack | ssh failed login |
2019-11-13 06:09:28 |
| 218.92.0.192 | attack | 2019-11-12T09:45:16.118035Z \[cowrie.ssh.factory.CowrieSSHFactory\] New connection: 218.92.0.192:35950 \(107.175.91.48:22\) \[session: 9e1dfa765677\] 2019-11-12T09:45:55.849240Z \[cowrie.ssh.factory.CowrieSSHFactory\] New connection: 218.92.0.192:25169 \(107.175.91.48:22\) \[session: e39081fd4190\] 2019-11-12T09:46:37.064598Z \[cowrie.ssh.factory.CowrieSSHFactory\] New connection: 218.92.0.192:23818 \(107.175.91.48:22\) \[session: 3e53f4b23db9\] 2019-11-12T09:47:17.719096Z \[cowrie.ssh.factory.CowrieSSHFactory\] New connection: 218.92.0.192:21891 \(107.175.91.48:22\) \[session: 4e549f55306e\] 2019-11-12T09:47:58.164918Z \[cowrie.ssh.factory.CowrieSSHFactory\] New connection: 218.92.0.192:18062 \(107.175.91.48:22\) \[session: 3eee800dc778\] 2019-11-12T09:48:37.202463Z \[cowrie.ssh.factory.CowrieSSHFactory\] New connection: 218.92.0.192:10287 \(107.175.91.48:22\) \[session: 7896832343ae\] 2019-11-12T09:49:17.272229Z \[cowrie.ssh.factory.CowrieSSHFactory\] New connection: 218.92.0.192:137 ... |
2019-11-13 06:10:34 |
| 157.245.3.83 | attack | 'Fail2Ban' |
2019-11-13 06:13:39 |
| 159.89.160.91 | attack | $f2bV_matches |
2019-11-13 06:15:11 |
| 129.204.109.127 | attackbotsspam | Nov 12 10:31:16 php1 sshd\[4179\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.109.127 user=root Nov 12 10:31:18 php1 sshd\[4179\]: Failed password for root from 129.204.109.127 port 40666 ssh2 Nov 12 10:35:34 php1 sshd\[4686\]: Invalid user temp from 129.204.109.127 Nov 12 10:35:34 php1 sshd\[4686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.109.127 Nov 12 10:35:36 php1 sshd\[4686\]: Failed password for invalid user temp from 129.204.109.127 port 48566 ssh2 |
2019-11-13 06:36:49 |
| 132.232.43.115 | attackspambots | Automatically reported by fail2ban report script (powermetal_new) |
2019-11-13 06:33:34 |