City: Nürnberg
Region: Bayern
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.56.99.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58025
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;2.56.99.212. IN A
;; AUTHORITY SECTION:
. 446 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024040402 1800 900 604800 86400
;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 05 10:45:30 CST 2024
;; MSG SIZE rcvd: 104212.99.56.2.in-addr.arpa domain name pointer v2202312183353249761.megasrv.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
212.99.56.2.in-addr.arpa name = v2202312183353249761.megasrv.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.247.91.95 | attackspam | Sep 27 13:38:01 h2177944 kernel: \[2460542.655438\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=103.247.91.95 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=78 ID=12926 DF PROTO=TCP SPT=62335 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 Sep 27 14:01:52 h2177944 kernel: \[2461973.836445\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=103.247.91.95 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=76 ID=4042 DF PROTO=TCP SPT=57349 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 Sep 27 14:02:22 h2177944 kernel: \[2462003.483139\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=103.247.91.95 DST=85.214.117.9 LEN=40 TOS=0x08 PREC=0x20 TTL=61 ID=14532 DF PROTO=TCP SPT=57739 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 Sep 27 14:06:23 h2177944 kernel: \[2462244.614087\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=103.247.91.95 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=57 ID=614 DF PROTO=TCP SPT=64460 DPT=80 WINDOW=29200 RES=0x00 SYN URGP=0 Sep 27 14:24:36 h2177944 kernel: \[2463336.745094\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=103.247.91.95 DST=85.214.117. |
2019-09-28 00:45:35 |
| 182.101.207.194 | attackspam | \[Fri Sep 27 16:45:01 2019\] \[error\] \[client 182.101.207.194\] client denied by server configuration: /var/www/html/default/ \[Fri Sep 27 16:45:01 2019\] \[error\] \[client 182.101.207.194\] client denied by server configuration: /var/www/html/default/.noindex.html \[Fri Sep 27 16:45:06 2019\] \[error\] \[client 182.101.207.194\] client denied by server configuration: /var/www/html/default/index.action ... |
2019-09-28 00:19:58 |
| 131.221.80.129 | attackbots | Automated report - ssh fail2ban: Sep 27 17:31:05 authentication failure Sep 27 17:31:07 wrong password, user=git, port=2241, ssh2 Sep 27 17:35:43 authentication failure |
2019-09-28 00:23:30 |
| 121.130.88.44 | attackbots | Sep 27 04:44:35 hpm sshd\[10151\]: Invalid user ud from 121.130.88.44 Sep 27 04:44:35 hpm sshd\[10151\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.130.88.44 Sep 27 04:44:37 hpm sshd\[10151\]: Failed password for invalid user ud from 121.130.88.44 port 59644 ssh2 Sep 27 04:49:37 hpm sshd\[10559\]: Invalid user ivan from 121.130.88.44 Sep 27 04:49:37 hpm sshd\[10559\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.130.88.44 |
2019-09-28 00:14:49 |
| 59.92.178.177 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:10:35. |
2019-09-28 00:44:42 |
| 93.110.55.250 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:10:46. |
2019-09-28 00:25:31 |
| 103.31.13.0 | attack | " " |
2019-09-28 00:44:11 |
| 27.210.234.25 | attack | (Sep 27) LEN=40 TTL=49 ID=44604 TCP DPT=8080 WINDOW=60126 SYN (Sep 27) LEN=40 TTL=49 ID=57699 TCP DPT=8080 WINDOW=40272 SYN (Sep 27) LEN=40 TTL=49 ID=41605 TCP DPT=8080 WINDOW=16520 SYN (Sep 26) LEN=40 TTL=49 ID=22459 TCP DPT=8080 WINDOW=40272 SYN (Sep 26) LEN=40 TTL=49 ID=36272 TCP DPT=8080 WINDOW=40272 SYN (Sep 25) LEN=40 TTL=49 ID=7572 TCP DPT=8080 WINDOW=60126 SYN (Sep 25) LEN=40 TTL=49 ID=34099 TCP DPT=8080 WINDOW=60126 SYN (Sep 25) LEN=40 TTL=49 ID=16170 TCP DPT=8080 WINDOW=60126 SYN (Sep 25) LEN=40 TTL=49 ID=52711 TCP DPT=8080 WINDOW=16520 SYN (Sep 25) LEN=40 TTL=49 ID=33615 TCP DPT=8080 WINDOW=16520 SYN |
2019-09-28 00:12:32 |
| 80.197.250.58 | attackspambots | DATE:2019-09-27 14:01:33, IP:80.197.250.58, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc-bis) |
2019-09-28 00:05:48 |
| 185.175.93.3 | attackspambots | 09/27/2019-16:06:19.140203 185.175.93.3 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-09-28 00:05:25 |
| 94.97.104.135 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:10:46. |
2019-09-28 00:25:02 |
| 49.206.196.229 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:10:32. |
2019-09-28 00:51:13 |
| 81.30.180.26 | attackbots | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:10:39. |
2019-09-28 00:38:11 |
| 89.187.168.153 | attack | (From raphaesiseImmith@gmail.com) Hello! lakewoodfamilychiro.com Have you ever heard that you can send a message through the contact form? These forms are located on many sites. We sent you our message in the same way, and the fact that you received and read it shows the effectiveness of this method of sending messages. Since people in any case will read the letter received through the contact form. Our database includes more than 35 million websites from all over the world. The cost of sending one million messages 49 USD. There is a discount program for large orders. Free trial mailing of 50,000 messages to any country of your choice. This message is created automatically. Please use the contact details below to contact us. Contact us. Telegram - @FeedbackFormEU Skype FeedbackForm2019 Email - feedbackform@make-success.com |
2019-09-28 00:11:37 |
| 49.206.203.190 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 13:10:33. |
2019-09-28 00:50:45 |