City: Juelsminde
Region: Central Jutland
Country: Denmark
Internet Service Provider: unknown
Hostname: unknown
Organization: Tele Danmark
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.104.130.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42886
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.104.130.139. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019062201 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 22 23:27:45 CST 2019
;; MSG SIZE rcvd: 117139.130.104.2.in-addr.arpa domain name pointer 2-104-130-139-cable.dk.customer.tdc.net.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
139.130.104.2.in-addr.arpa name = 2-104-130-139-cable.dk.customer.tdc.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 188.166.148.161 | attackbots | abasicmove.de 188.166.148.161 \[18/Oct/2019:12:36:33 +0200\] "POST /wp-login.php HTTP/1.1" 200 5761 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" abasicmove.de 188.166.148.161 \[18/Oct/2019:12:36:33 +0200\] "POST /wp-login.php HTTP/1.1" 200 5560 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-18 19:17:30 |
| 211.219.80.99 | attackspambots | Oct 18 12:41:45 meumeu sshd[21808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.219.80.99 Oct 18 12:41:47 meumeu sshd[21808]: Failed password for invalid user gabriele from 211.219.80.99 port 35306 ssh2 Oct 18 12:46:57 meumeu sshd[22562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.219.80.99 ... |
2019-10-18 19:29:59 |
| 207.179.221.42 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/207.179.221.42/ US - 1H : (242) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN11062 IP : 207.179.221.42 CIDR : 207.179.192.0/18 PREFIX COUNT : 11 UNIQUE IP COUNT : 34560 WYKRYTE ATAKI Z ASN11062 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-18 05:43:47 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-18 19:27:23 |
| 94.172.166.228 | attack | Oct 15 01:21:00 srv05 sshd[7276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94-172-166-228.dynamic.chello.pl user=r.r Oct 15 01:21:02 srv05 sshd[7276]: Failed password for r.r from 94.172.166.228 port 58256 ssh2 Oct 15 01:21:02 srv05 sshd[7276]: Received disconnect from 94.172.166.228: 11: Bye Bye [preauth] Oct 15 01:33:30 srv05 sshd[8404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94-172-166-228.dynamic.chello.pl user=r.r Oct 15 01:33:32 srv05 sshd[8404]: Failed password for r.r from 94.172.166.228 port 33118 ssh2 Oct 15 01:33:32 srv05 sshd[8404]: Received disconnect from 94.172.166.228: 11: Bye Bye [preauth] Oct 15 01:37:28 srv05 sshd[8849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94-172-166-228.dynamic.chello.pl Oct 15 01:37:30 srv05 sshd[8849]: Failed password for invalid user web from 94.172.166.228 port 47118 ssh2 Oct 15 01:........ ------------------------------- |
2019-10-18 19:33:08 |
| 188.166.87.238 | attack | Oct 18 10:21:07 vpn01 sshd[8695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.87.238 Oct 18 10:21:09 vpn01 sshd[8695]: Failed password for invalid user dev from 188.166.87.238 port 36138 ssh2 ... |
2019-10-18 19:31:33 |
| 119.147.152.111 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-10-18 19:22:36 |
| 80.211.113.144 | attackbots | Automatic report - Banned IP Access |
2019-10-18 19:51:57 |
| 104.41.41.14 | attackbotsspam | WordPress wp-login brute force :: 104.41.41.14 0.052 BYPASS [18/Oct/2019:14:43:33 1100] [censored_2] "POST /wp-login.php HTTP/1.1" 200 4630 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-10-18 19:36:05 |
| 213.221.254.230 | attackbots | Oct 18 07:52:49 v22019058497090703 sshd[24068]: Failed password for root from 213.221.254.230 port 44958 ssh2 Oct 18 07:56:31 v22019058497090703 sshd[24342]: Failed password for ftp from 213.221.254.230 port 55964 ssh2 ... |
2019-10-18 19:24:42 |
| 115.159.25.60 | attack | 2019-10-18T10:39:43.741376hub.schaetter.us sshd\[11544\]: Invalid user 14 from 115.159.25.60 port 40870 2019-10-18T10:39:43.760219hub.schaetter.us sshd\[11544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.25.60 2019-10-18T10:39:45.579735hub.schaetter.us sshd\[11544\]: Failed password for invalid user 14 from 115.159.25.60 port 40870 ssh2 2019-10-18T10:44:30.842961hub.schaetter.us sshd\[11585\]: Invalid user handbook from 115.159.25.60 port 49634 2019-10-18T10:44:30.850991hub.schaetter.us sshd\[11585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.25.60 ... |
2019-10-18 19:43:10 |
| 103.209.20.36 | attackbots | Oct 18 06:31:05 web8 sshd\[27914\]: Invalid user hwang from 103.209.20.36 Oct 18 06:31:05 web8 sshd\[27914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.209.20.36 Oct 18 06:31:07 web8 sshd\[27914\]: Failed password for invalid user hwang from 103.209.20.36 port 56582 ssh2 Oct 18 06:36:10 web8 sshd\[30425\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.209.20.36 user=root Oct 18 06:36:12 web8 sshd\[30425\]: Failed password for root from 103.209.20.36 port 38480 ssh2 |
2019-10-18 19:23:43 |
| 45.67.15.140 | attackspam | [portscan] tcp/22 [SSH] [scan/connect: 4 time(s)] in blocklist.de:'listed [ssh]' in spfbl.net:'listed' *(RWIN=65535)(10180853) |
2019-10-18 19:24:26 |
| 197.242.151.224 | attackspam | Oct 18 12:57:36 sso sshd[12624]: Failed password for root from 197.242.151.224 port 51308 ssh2 ... |
2019-10-18 19:29:31 |
| 162.243.58.222 | attackspam | Oct 18 10:01:04 server sshd\[642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.58.222 user=root Oct 18 10:01:06 server sshd\[642\]: Failed password for root from 162.243.58.222 port 55382 ssh2 Oct 18 10:13:57 server sshd\[3804\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.58.222 user=root Oct 18 10:13:58 server sshd\[3804\]: Failed password for root from 162.243.58.222 port 58232 ssh2 Oct 18 10:17:57 server sshd\[4915\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.58.222 user=root ... |
2019-10-18 19:16:54 |
| 111.20.126.210 | attackspam | Oct 18 08:21:31 mail sshd\[22769\]: Invalid user testuser from 111.20.126.210 Oct 18 08:21:31 mail sshd\[22769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.20.126.210 Oct 18 08:21:33 mail sshd\[22769\]: Failed password for invalid user testuser from 111.20.126.210 port 46282 ssh2 ... |
2019-10-18 19:41:00 |