City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.205.54.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8407
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;2.205.54.55. IN A
;; AUTHORITY SECTION:
. 569 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023052300 1800 900 604800 86400
;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 24 02:27:34 CST 2023
;; MSG SIZE rcvd: 10455.54.205.2.in-addr.arpa domain name pointer dslb-002-205-054-055.002.205.pools.vodafone-ip.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
55.54.205.2.in-addr.arpa name = dslb-002-205-054-055.002.205.pools.vodafone-ip.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.153.199.106 | attackspam | Port scan on 3 port(s): 3391 23389 35589 |
2019-10-30 05:12:35 |
| 88.12.15.13 | attackspambots | Oct 29 22:28:29 sauna sshd[81558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.12.15.13 Oct 29 22:28:31 sauna sshd[81558]: Failed password for invalid user git from 88.12.15.13 port 55745 ssh2 ... |
2019-10-30 05:14:20 |
| 51.38.95.12 | attackspam | Oct 30 03:36:02 webhost01 sshd[9695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.95.12 Oct 30 03:36:04 webhost01 sshd[9695]: Failed password for invalid user squirrelmail from 51.38.95.12 port 55780 ssh2 ... |
2019-10-30 05:24:48 |
| 115.239.238.46 | attackspam | Oct 29 20:12:40 h2177944 kernel: \[5252115.372357\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=115.239.238.46 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=4740 DF PROTO=TCP SPT=54287 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 Oct 29 20:23:57 h2177944 kernel: \[5252792.086428\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=115.239.238.46 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=11197 DF PROTO=TCP SPT=65334 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 Oct 29 20:36:12 h2177944 kernel: \[5253527.060048\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=115.239.238.46 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=30043 DF PROTO=TCP SPT=55137 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 Oct 29 20:51:13 h2177944 kernel: \[5254428.006194\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=115.239.238.46 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=19298 DF PROTO=TCP SPT=50688 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 Oct 29 21:02:21 h2177944 kernel: \[5255096.190545\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=115.239.238.46 |
2019-10-30 05:29:59 |
| 106.12.78.251 | attack | Oct 29 22:43:51 server sshd\[28102\]: Invalid user password123 from 106.12.78.251 port 39784 Oct 29 22:43:51 server sshd\[28102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.78.251 Oct 29 22:43:53 server sshd\[28102\]: Failed password for invalid user password123 from 106.12.78.251 port 39784 ssh2 Oct 29 22:48:37 server sshd\[14332\]: Invalid user qwerty123456 from 106.12.78.251 port 49388 Oct 29 22:48:37 server sshd\[14332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.78.251 |
2019-10-30 05:26:10 |
| 18.188.30.136 | spambotsattack | IP address used to send mail with hacked mail accounts |
2019-10-30 05:18:38 |
| 222.186.180.223 | attack | SSH bruteforce (Triggered fail2ban) |
2019-10-30 05:09:43 |
| 168.121.51.86 | attackspambots | Unauthorized connection attempt from IP address 168.121.51.86 on Port 445(SMB) |
2019-10-30 05:04:40 |
| 153.254.113.26 | attack | Oct 29 21:02:44 vps647732 sshd[26573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.254.113.26 Oct 29 21:02:47 vps647732 sshd[26573]: Failed password for invalid user vps from 153.254.113.26 port 53358 ssh2 ... |
2019-10-30 05:04:04 |
| 221.193.177.134 | attackbots | Oct 29 20:02:29 *** sshd[6934]: User root from 221.193.177.134 not allowed because not listed in AllowUsers |
2019-10-30 05:21:55 |
| 87.225.65.97 | attackbotsspam | Chat Spam |
2019-10-30 05:01:07 |
| 181.115.131.21 | attackspam | Unauthorized connection attempt from IP address 181.115.131.21 on Port 445(SMB) |
2019-10-30 05:23:49 |
| 18.220.149.92 | spambotsattack | IP address used to send mail with hacked mail accounts |
2019-10-30 05:17:27 |
| 70.89.88.1 | attack | Oct 29 21:51:34 vps691689 sshd[28943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.89.88.1 Oct 29 21:51:36 vps691689 sshd[28943]: Failed password for invalid user cht from 70.89.88.1 port 54461 ssh2 ... |
2019-10-30 05:11:39 |
| 106.51.141.20 | attackbots | Oct 29 21:53:06 server sshd\[7649\]: Invalid user tomcat from 106.51.141.20 Oct 29 21:53:06 server sshd\[7649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.141.20 Oct 29 21:53:09 server sshd\[7649\]: Failed password for invalid user tomcat from 106.51.141.20 port 36854 ssh2 Oct 29 23:16:33 server sshd\[29347\]: Invalid user suwit from 106.51.141.20 Oct 29 23:16:33 server sshd\[29347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.141.20 ... |
2019-10-30 05:00:50 |