City: Hakenstedt
Region: Saxony-Anhalt
Country: Germany
Internet Service Provider: Telekom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.174.142.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36866
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;2.174.142.105. IN A
;; AUTHORITY SECTION:
. 369 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011300 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 13 18:56:19 CST 2022
;; MSG SIZE rcvd: 106Host 105.142.174.2.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 105.142.174.2.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 206.72.195.16 | attack | Jul 16 15:32:23 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=206.72.195.16 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=13839 PROTO=TCP SPT=45416 DPT=63389 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 16 15:39:58 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=206.72.195.16 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=31547 PROTO=TCP SPT=45416 DPT=3388 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 16 15:57:01 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=206.72.195.16 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=46880 PROTO=TCP SPT=45416 DPT=43389 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 16 16:47:21 *hidden* kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=206.72.195.16 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=3522 PROTO=TCP SPT=45416 DPT=3393 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 16 16:55:14 *hidden* ke ... |
2020-07-17 02:30:19 |
| 73.89.52.125 | attackspam | Jul 16 17:06:57 hosting sshd[26529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-73-89-52-125.hsd1.ma.comcast.net Jul 16 17:06:57 hosting sshd[26529]: Invalid user ezequiel from 73.89.52.125 port 58478 Jul 16 17:06:58 hosting sshd[26529]: Failed password for invalid user ezequiel from 73.89.52.125 port 58478 ssh2 Jul 16 17:25:40 hosting sshd[28655]: Invalid user ghu from 73.89.52.125 port 35497 ... |
2020-07-17 02:53:32 |
| 52.189.194.116 | attack | Jul 16 20:28:32 sd-69548 sshd[650514]: Invalid user ec2-user from 52.189.194.116 port 2174 Jul 16 20:28:33 sd-69548 sshd[650514]: Disconnected from invalid user ec2-user 52.189.194.116 port 2174 [preauth] ... |
2020-07-17 02:55:49 |
| 60.249.82.121 | attackbotsspam | 2020-07-16T19:29:30.773430snf-827550 sshd[22110]: Invalid user dev from 60.249.82.121 port 34214 2020-07-16T19:29:32.634548snf-827550 sshd[22110]: Failed password for invalid user dev from 60.249.82.121 port 34214 ssh2 2020-07-16T19:34:39.229917snf-827550 sshd[22227]: Invalid user cod4server from 60.249.82.121 port 49820 ... |
2020-07-17 02:57:36 |
| 46.36.27.120 | attackspam | Fail2Ban - SSH Bruteforce Attempt |
2020-07-17 02:53:47 |
| 106.13.68.101 | attack | Jul 16 18:35:55 ovpn sshd\[17049\]: Invalid user db2fenc1 from 106.13.68.101 Jul 16 18:35:55 ovpn sshd\[17049\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.68.101 Jul 16 18:35:57 ovpn sshd\[17049\]: Failed password for invalid user db2fenc1 from 106.13.68.101 port 42055 ssh2 Jul 16 18:57:13 ovpn sshd\[22372\]: Invalid user vitiello from 106.13.68.101 Jul 16 18:57:13 ovpn sshd\[22372\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.68.101 |
2020-07-17 02:54:58 |
| 183.89.215.69 | attack | Dovecot Invalid User Login Attempt. |
2020-07-17 02:49:27 |
| 156.247.13.9 | attackbots | (sshd) Failed SSH login from 156.247.13.9 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 16 18:41:27 grace sshd[32445]: Invalid user oracle from 156.247.13.9 port 56156 Jul 16 18:41:29 grace sshd[32445]: Failed password for invalid user oracle from 156.247.13.9 port 56156 ssh2 Jul 16 18:50:37 grace sshd[1405]: Invalid user sdp from 156.247.13.9 port 54178 Jul 16 18:50:39 grace sshd[1405]: Failed password for invalid user sdp from 156.247.13.9 port 54178 ssh2 Jul 16 18:54:16 grace sshd[1598]: Invalid user adva from 156.247.13.9 port 51726 |
2020-07-17 02:21:44 |
| 182.71.180.130 | attackbotsspam | Unauthorized connection attempt from IP address 182.71.180.130 on Port 445(SMB) |
2020-07-17 02:48:02 |
| 64.227.19.127 | attackbots | " " |
2020-07-17 02:47:33 |
| 191.235.64.211 | attack | Honeypot hit. |
2020-07-17 02:35:08 |
| 222.254.123.19 | attackspambots | Icarus honeypot on github |
2020-07-17 02:33:01 |
| 51.68.227.98 | attack | $f2bV_matches |
2020-07-17 02:44:48 |
| 50.59.66.34 | attack | Brute forcing RDP port 3389 |
2020-07-17 02:51:31 |
| 114.67.102.123 | attackbotsspam | 07/16/2020-14:37:01.028945 114.67.102.123 Protocol: 6 ET SCAN Potential SSH Scan |
2020-07-17 02:40:26 |