City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.245.2.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10503
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;2.245.2.102. IN A
;; AUTHORITY SECTION:
. 476 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023100801 1800 900 604800 86400
;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 09 04:44:36 CST 2023
;; MSG SIZE rcvd: 104102.2.245.2.in-addr.arpa domain name pointer dynamic-002-245-002-102.2.245.pool.telefonica.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
102.2.245.2.in-addr.arpa name = dynamic-002-245-002-102.2.245.pool.telefonica.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.234.142.208 | attackspam | 49.234.142.208 was recorded 21 times by 16 hosts attempting to connect to the following ports: 2375,4243,2376,2377. Incident counter (4h, 24h, all-time): 21, 92, 247 |
2019-11-26 18:53:44 |
| 110.185.100.176 | attack | Nov 25 22:00:50 tdfoods sshd\[3962\]: Invalid user broderse from 110.185.100.176 Nov 25 22:00:50 tdfoods sshd\[3962\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.185.100.176 Nov 25 22:00:52 tdfoods sshd\[3962\]: Failed password for invalid user broderse from 110.185.100.176 port 42837 ssh2 Nov 25 22:05:48 tdfoods sshd\[4336\]: Invalid user guest from 110.185.100.176 Nov 25 22:05:48 tdfoods sshd\[4336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.185.100.176 |
2019-11-26 18:40:59 |
| 112.85.42.175 | attackbotsspam | Nov 26 11:48:47 vpn01 sshd[29037]: Failed password for root from 112.85.42.175 port 9847 ssh2 Nov 26 11:49:01 vpn01 sshd[29037]: error: maximum authentication attempts exceeded for root from 112.85.42.175 port 9847 ssh2 [preauth] ... |
2019-11-26 18:50:33 |
| 192.241.246.50 | attack | Nov 26 07:40:34 ks10 sshd[23547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.246.50 Nov 26 07:40:36 ks10 sshd[23547]: Failed password for invalid user katia from 192.241.246.50 port 54758 ssh2 ... |
2019-11-26 18:45:17 |
| 194.61.24.161 | attackspambots | Port Scan 3389 |
2019-11-26 18:40:30 |
| 222.252.25.241 | attack | Nov 26 10:25:19 arianus sshd\[20255\]: Unable to negotiate with 222.252.25.241 port 6256: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 \[preauth\] ... |
2019-11-26 19:07:18 |
| 159.203.17.176 | attackspambots | F2B jail: sshd. Time: 2019-11-26 11:39:02, Reported by: VKReport |
2019-11-26 19:11:00 |
| 52.42.253.100 | attack | 11/26/2019-11:29:07.732906 52.42.253.100 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-11-26 18:47:12 |
| 180.101.227.173 | attackspam | Nov 25 11:26:27 liveconfig01 sshd[22401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.101.227.173 user=r.r Nov 25 11:26:29 liveconfig01 sshd[22401]: Failed password for r.r from 180.101.227.173 port 54321 ssh2 Nov 25 11:26:29 liveconfig01 sshd[22401]: Received disconnect from 180.101.227.173 port 54321:11: Bye Bye [preauth] Nov 25 11:26:29 liveconfig01 sshd[22401]: Disconnected from 180.101.227.173 port 54321 [preauth] Nov 25 11:48:49 liveconfig01 sshd[23203]: Invalid user koethostnamez from 180.101.227.173 Nov 25 11:48:49 liveconfig01 sshd[23203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.101.227.173 Nov 25 11:48:51 liveconfig01 sshd[23203]: Failed password for invalid user koethostnamez from 180.101.227.173 port 58160 ssh2 Nov 25 11:48:51 liveconfig01 sshd[23203]: Received disconnect from 180.101.227.173 port 58160:11: Bye Bye [preauth] Nov 25 11:48:51 liveconfig01 sshd[........ ------------------------------- |
2019-11-26 18:52:48 |
| 132.232.9.15 | attack | Nov 26 07:29:16 mail1 sshd[1934]: Invalid user asfg from 132.232.9.15 port 55758 Nov 26 07:29:16 mail1 sshd[1934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.9.15 Nov 26 07:29:18 mail1 sshd[1934]: Failed password for invalid user asfg from 132.232.9.15 port 55758 ssh2 Nov 26 07:29:18 mail1 sshd[1934]: Received disconnect from 132.232.9.15 port 55758:11: Bye Bye [preauth] Nov 26 07:29:18 mail1 sshd[1934]: Disconnected from 132.232.9.15 port 55758 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=132.232.9.15 |
2019-11-26 18:46:26 |
| 118.24.104.152 | attackbotsspam | Nov 26 03:25:17 ldap01vmsma01 sshd[35755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.104.152 Nov 26 03:25:18 ldap01vmsma01 sshd[35755]: Failed password for invalid user zeuge from 118.24.104.152 port 47930 ssh2 ... |
2019-11-26 18:37:42 |
| 123.135.127.85 | attackbots | 11/26/2019-04:09:47.336488 123.135.127.85 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-11-26 18:42:09 |
| 34.219.255.111 | attackspambots | Automatic report - Web App Attack |
2019-11-26 19:03:03 |
| 213.135.154.57 | attackspam | Port 1433 Scan |
2019-11-26 19:09:21 |
| 31.179.144.190 | attackbotsspam | 2019-11-26 07:31:48,498 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 31.179.144.190 2019-11-26 08:03:06,673 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 31.179.144.190 2019-11-26 08:34:31,862 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 31.179.144.190 2019-11-26 09:09:39,190 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 31.179.144.190 2019-11-26 09:43:41,258 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 31.179.144.190 ... |
2019-11-26 19:01:32 |