City: Duisburg
Region: Nordrhein-Westfalen
Country: Germany
Internet Service Provider: Vodafone
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.204.149.246
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51848
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;2.204.149.246. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021902 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 11:59:44 CST 2025
;; MSG SIZE rcvd: 106246.149.204.2.in-addr.arpa domain name pointer dslb-002-204-149-246.002.204.pools.vodafone-ip.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
246.149.204.2.in-addr.arpa name = dslb-002-204-149-246.002.204.pools.vodafone-ip.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.85.42.179 | attackspam | Sep 3 01:58:47 sshgateway sshd\[22249\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.179 user=root Sep 3 01:58:49 sshgateway sshd\[22249\]: Failed password for root from 112.85.42.179 port 58925 ssh2 Sep 3 01:59:04 sshgateway sshd\[22249\]: error: maximum authentication attempts exceeded for root from 112.85.42.179 port 58925 ssh2 \[preauth\] |
2019-09-03 10:08:31 |
| 177.135.93.227 | attackspambots | Sep 3 02:37:55 debian sshd\[671\]: Invalid user diradmin from 177.135.93.227 port 59902 Sep 3 02:37:55 debian sshd\[671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.135.93.227 ... |
2019-09-03 09:45:14 |
| 41.87.72.102 | attack | Sep 3 04:07:29 srv206 sshd[20998]: Invalid user dos from 41.87.72.102 ... |
2019-09-03 10:20:14 |
| 142.44.160.214 | attackspambots | Sep 3 03:39:22 lnxweb61 sshd[18208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.160.214 |
2019-09-03 10:26:20 |
| 77.247.110.155 | attack | CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2019-09-03 09:54:07 |
| 68.183.217.198 | attack | 68.183.217.198 - - [03/Sep/2019:01:05:44 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.217.198 - - [03/Sep/2019:01:05:45 +0200] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.217.198 - - [03/Sep/2019:01:05:45 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.217.198 - - [03/Sep/2019:01:05:45 +0200] "POST /wp-login.php HTTP/1.1" 200 1710 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.217.198 - - [03/Sep/2019:01:05:45 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.217.198 - - [03/Sep/2019:01:05:46 +0200] "POST /wp-login.php HTTP/1.1" 200 1710 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-09-03 10:19:57 |
| 62.234.128.242 | attack | Sep 3 01:10:19 MK-Soft-VM5 sshd\[6826\]: Invalid user ftptest from 62.234.128.242 port 53038 Sep 3 01:10:19 MK-Soft-VM5 sshd\[6826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.128.242 Sep 3 01:10:22 MK-Soft-VM5 sshd\[6826\]: Failed password for invalid user ftptest from 62.234.128.242 port 53038 ssh2 ... |
2019-09-03 09:44:20 |
| 178.128.174.202 | attackbotsspam | (sshd) Failed SSH login from 178.128.174.202 (-): 5 in the last 3600 secs |
2019-09-03 09:55:48 |
| 110.249.212.46 | attackbotsspam | A portscan was detected. Details about the event: Time.............: 2019-09-03 00:48:19 Source IP address: 110.249.212.46 |
2019-09-03 10:29:53 |
| 46.29.10.66 | attackbotsspam | [portscan] Port scan |
2019-09-03 09:57:45 |
| 193.70.87.215 | attackspambots | Sep 2 21:32:53 plusreed sshd[21712]: Invalid user contabilidad from 193.70.87.215 ... |
2019-09-03 09:44:41 |
| 218.98.26.166 | attack | Sep 2 04:59:39 itv-usvr-01 sshd[31139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.26.166 user=root Sep 2 04:59:41 itv-usvr-01 sshd[31139]: Failed password for root from 218.98.26.166 port 55046 ssh2 Sep 2 04:59:46 itv-usvr-01 sshd[31170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.26.166 user=root Sep 2 04:59:48 itv-usvr-01 sshd[31170]: Failed password for root from 218.98.26.166 port 15377 ssh2 Sep 2 04:59:55 itv-usvr-01 sshd[31172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.26.166 user=root Sep 2 04:59:56 itv-usvr-01 sshd[31172]: Failed password for root from 218.98.26.166 port 29245 ssh2 |
2019-09-03 10:13:19 |
| 45.115.178.195 | attackbotsspam | Sep 2 16:06:37 php2 sshd\[908\]: Invalid user filter from 45.115.178.195 Sep 2 16:06:37 php2 sshd\[908\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.115.178.195 Sep 2 16:06:39 php2 sshd\[908\]: Failed password for invalid user filter from 45.115.178.195 port 56870 ssh2 Sep 2 16:12:54 php2 sshd\[1660\]: Invalid user cjc from 45.115.178.195 Sep 2 16:12:54 php2 sshd\[1660\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.115.178.195 |
2019-09-03 10:30:32 |
| 80.211.51.116 | attack | Sep 2 15:58:39 sachi sshd\[15585\]: Invalid user sapdb from 80.211.51.116 Sep 2 15:58:39 sachi sshd\[15585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.51.116 Sep 2 15:58:41 sachi sshd\[15585\]: Failed password for invalid user sapdb from 80.211.51.116 port 53694 ssh2 Sep 2 16:02:56 sachi sshd\[15941\]: Invalid user xxxxxx from 80.211.51.116 Sep 2 16:02:56 sachi sshd\[15941\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.51.116 |
2019-09-03 10:10:08 |
| 45.55.80.186 | attackspam | Sep 3 04:54:58 www sshd\[47080\]: Invalid user toto from 45.55.80.186Sep 3 04:55:00 www sshd\[47080\]: Failed password for invalid user toto from 45.55.80.186 port 36580 ssh2Sep 3 04:58:40 www sshd\[47128\]: Invalid user git from 45.55.80.186 ... |
2019-09-03 10:06:55 |