City: unknown
Region: unknown
Country: unknown
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
bb'
; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> 2001:7c0:1300:500a::10:40
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 9871
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;2001:7c0:1300:500a::10:40. IN A
;; Query time: 0 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Sat Feb 19 00:35:35 CST 2022
;; MSG SIZE rcvd: 54
'0.4.0.0.0.1.0.0.0.0.0.0.0.0.0.0.a.0.0.5.0.0.3.1.0.c.7.0.1.0.0.2.ip6.arpa domain name pointer hs-offenburg.de.
0.4.0.0.0.1.0.0.0.0.0.0.0.0.0.0.a.0.0.5.0.0.3.1.0.c.7.0.1.0.0.2.ip6.arpa domain name pointer www.hs-offenburg.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
0.4.0.0.0.1.0.0.0.0.0.0.0.0.0.0.a.0.0.5.0.0.3.1.0.c.7.0.1.0.0.2.ip6.arpa name = hs-offenburg.de.
0.4.0.0.0.1.0.0.0.0.0.0.0.0.0.0.a.0.0.5.0.0.3.1.0.c.7.0.1.0.0.2.ip6.arpa name = www.hs-offenburg.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 114.216.220.74 | attackbots | lfd: (smtpauth) Failed SMTP AUTH login from 114.216.220.74 (CN/China/-): 5 in the last 3600 secs - Sun Sep 16 07:32:34 2018 |
2020-03-09 06:09:44 |
| 49.83.154.92 | attackbots | suspicious action Sun, 08 Mar 2020 18:33:06 -0300 |
2020-03-09 06:39:09 |
| 24.16.186.25 | attackspam | " " |
2020-03-09 06:27:29 |
| 122.227.230.11 | attackspam | Mar 9 04:33:23 itv-usvr-01 sshd[18147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.227.230.11 user=root Mar 9 04:33:25 itv-usvr-01 sshd[18147]: Failed password for root from 122.227.230.11 port 59240 ssh2 |
2020-03-09 06:30:04 |
| 180.107.63.18 | attackbotsspam | lfd: (smtpauth) Failed SMTP AUTH login from 180.107.63.18 (CN/China/-): 5 in the last 3600 secs - Sat Sep 15 00:53:37 2018 |
2020-03-09 06:20:57 |
| 49.83.155.146 | attackbotsspam | suspicious action Sun, 08 Mar 2020 18:33:28 -0300 |
2020-03-09 06:29:25 |
| 112.85.42.176 | attackspambots | Mar 8 23:21:20 v22018076622670303 sshd\[10136\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.176 user=root Mar 8 23:21:22 v22018076622670303 sshd\[10136\]: Failed password for root from 112.85.42.176 port 64518 ssh2 Mar 8 23:21:26 v22018076622670303 sshd\[10136\]: Failed password for root from 112.85.42.176 port 64518 ssh2 ... |
2020-03-09 06:35:13 |
| 49.64.140.92 | attack | lfd: (smtpauth) Failed SMTP AUTH login from 49.64.140.92 (CN/China/-): 5 in the last 3600 secs - Fri Sep 14 23:28:12 2018 |
2020-03-09 06:22:29 |
| 134.209.78.149 | attack | DigitalOcean BotNet attack - 10s of requests to non-existent pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks node-superagent/4.1.0 |
2020-03-09 06:28:38 |
| 106.13.180.225 | attackbotsspam | 3x Failed Password |
2020-03-09 06:44:20 |
| 222.186.175.140 | attack | Mar 8 22:57:45 sd-53420 sshd\[4104\]: User root from 222.186.175.140 not allowed because none of user's groups are listed in AllowGroups Mar 8 22:57:45 sd-53420 sshd\[4104\]: Failed none for invalid user root from 222.186.175.140 port 38144 ssh2 Mar 8 22:57:46 sd-53420 sshd\[4104\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.140 user=root Mar 8 22:57:47 sd-53420 sshd\[4104\]: Failed password for invalid user root from 222.186.175.140 port 38144 ssh2 Mar 8 22:57:51 sd-53420 sshd\[4104\]: Failed password for invalid user root from 222.186.175.140 port 38144 ssh2 ... |
2020-03-09 06:13:15 |
| 89.222.181.58 | attack | Mar 8 17:32:28 Tower sshd[38468]: Connection from 89.222.181.58 port 32796 on 192.168.10.220 port 22 rdomain "" Mar 8 17:32:33 Tower sshd[38468]: Invalid user usertest from 89.222.181.58 port 32796 Mar 8 17:32:33 Tower sshd[38468]: error: Could not get shadow information for NOUSER Mar 8 17:32:33 Tower sshd[38468]: Failed password for invalid user usertest from 89.222.181.58 port 32796 ssh2 Mar 8 17:32:33 Tower sshd[38468]: Received disconnect from 89.222.181.58 port 32796:11: Bye Bye [preauth] Mar 8 17:32:33 Tower sshd[38468]: Disconnected from invalid user usertest 89.222.181.58 port 32796 [preauth] |
2020-03-09 06:46:49 |
| 134.175.93.141 | attackbots | Mar 8 22:54:07 nextcloud sshd\[23641\]: Invalid user ftpuser from 134.175.93.141 Mar 8 22:54:07 nextcloud sshd\[23641\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.93.141 Mar 8 22:54:08 nextcloud sshd\[23641\]: Failed password for invalid user ftpuser from 134.175.93.141 port 56320 ssh2 |
2020-03-09 06:50:57 |
| 90.87.151.116 | attack | Scan detected and blocked 2020.03.08 22:33:26 |
2020-03-09 06:30:28 |
| 200.58.219.218 | attackbots | fail2ban |
2020-03-09 06:42:57 |