City: Magdeburg
Region: Saxony-Anhalt
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.211.214.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13697
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;213.211.214.21. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019070200 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 02 19:30:37 CST 2019
;; MSG SIZE rcvd: 11821.214.211.213.in-addr.arpa domain name pointer port-ip-213-211-214-21.reverse.mdcc-fun.de.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
21.214.211.213.in-addr.arpa name = port-ip-213-211-214-21.reverse.mdcc-fun.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.55.158.8 | attackbots | Dec 16 23:56:27 TORMINT sshd\[22671\]: Invalid user guillaume from 45.55.158.8 Dec 16 23:56:27 TORMINT sshd\[22671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.158.8 Dec 16 23:56:29 TORMINT sshd\[22671\]: Failed password for invalid user guillaume from 45.55.158.8 port 50758 ssh2 ... |
2019-12-17 13:24:25 |
| 129.28.191.55 | attackbots | Dec 17 05:42:32 nextcloud sshd\[12505\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.191.55 user=backup Dec 17 05:42:34 nextcloud sshd\[12505\]: Failed password for backup from 129.28.191.55 port 55744 ssh2 Dec 17 05:56:53 nextcloud sshd\[28703\]: Invalid user swire from 129.28.191.55 Dec 17 05:56:53 nextcloud sshd\[28703\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.191.55 ... |
2019-12-17 13:03:17 |
| 195.24.207.199 | attackbots | Dec 16 18:50:58 web1 sshd\[28039\]: Invalid user ashleym from 195.24.207.199 Dec 16 18:50:58 web1 sshd\[28039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.24.207.199 Dec 16 18:51:00 web1 sshd\[28039\]: Failed password for invalid user ashleym from 195.24.207.199 port 35078 ssh2 Dec 16 18:56:43 web1 sshd\[28640\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.24.207.199 user=root Dec 16 18:56:45 web1 sshd\[28640\]: Failed password for root from 195.24.207.199 port 38824 ssh2 |
2019-12-17 13:10:47 |
| 213.251.41.52 | attack | Dec 17 01:04:14 goofy sshd\[23389\]: Invalid user burry from 213.251.41.52 Dec 17 01:04:14 goofy sshd\[23389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.251.41.52 Dec 17 01:04:16 goofy sshd\[23389\]: Failed password for invalid user burry from 213.251.41.52 port 50776 ssh2 Dec 17 01:13:13 goofy sshd\[23897\]: Invalid user parties from 213.251.41.52 Dec 17 01:13:13 goofy sshd\[23897\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.251.41.52 |
2019-12-17 09:13:38 |
| 40.92.70.56 | attackbots | Dec 17 00:56:26 debian-2gb-vpn-nbg1-1 kernel: [911755.044727] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.70.56 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=9858 DF PROTO=TCP SPT=6183 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0 |
2019-12-17 09:19:31 |
| 148.70.113.96 | attack | ... |
2019-12-17 13:00:25 |
| 115.240.192.131 | attackspambots | 1576558592 - 12/17/2019 05:56:32 Host: 115.240.192.131/115.240.192.131 Port: 445 TCP Blocked |
2019-12-17 13:23:59 |
| 180.101.125.162 | attackbots | Dec 17 02:04:53 root sshd[10598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.101.125.162 Dec 17 02:04:55 root sshd[10598]: Failed password for invalid user ben from 180.101.125.162 port 57116 ssh2 Dec 17 02:12:02 root sshd[10741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.101.125.162 ... |
2019-12-17 09:14:52 |
| 193.112.129.199 | attack | Dec 17 05:56:26 tuxlinux sshd[53575]: Invalid user cic from 193.112.129.199 port 44228 Dec 17 05:56:26 tuxlinux sshd[53575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.129.199 Dec 17 05:56:26 tuxlinux sshd[53575]: Invalid user cic from 193.112.129.199 port 44228 Dec 17 05:56:26 tuxlinux sshd[53575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.129.199 Dec 17 05:56:26 tuxlinux sshd[53575]: Invalid user cic from 193.112.129.199 port 44228 Dec 17 05:56:26 tuxlinux sshd[53575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.129.199 Dec 17 05:56:28 tuxlinux sshd[53575]: Failed password for invalid user cic from 193.112.129.199 port 44228 ssh2 ... |
2019-12-17 13:26:59 |
| 195.78.63.197 | attackbotsspam | SSH brute-force: detected 38 distinct usernames within a 24-hour window. |
2019-12-17 09:17:38 |
| 182.254.172.63 | attackspambots | Dec 16 19:08:58 php1 sshd\[16963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.254.172.63 user=root Dec 16 19:09:00 php1 sshd\[16963\]: Failed password for root from 182.254.172.63 port 35878 ssh2 Dec 16 19:15:10 php1 sshd\[17738\]: Invalid user jc from 182.254.172.63 Dec 16 19:15:10 php1 sshd\[17738\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.254.172.63 Dec 16 19:15:12 php1 sshd\[17738\]: Failed password for invalid user jc from 182.254.172.63 port 52388 ssh2 |
2019-12-17 13:17:53 |
| 158.69.64.9 | attack | Dec 17 00:08:28 linuxvps sshd\[61853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.64.9 user=root Dec 17 00:08:30 linuxvps sshd\[61853\]: Failed password for root from 158.69.64.9 port 53662 ssh2 Dec 17 00:14:27 linuxvps sshd\[409\]: Invalid user guest from 158.69.64.9 Dec 17 00:14:27 linuxvps sshd\[409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.64.9 Dec 17 00:14:29 linuxvps sshd\[409\]: Failed password for invalid user guest from 158.69.64.9 port 33420 ssh2 |
2019-12-17 13:16:08 |
| 62.234.141.48 | attackspam | 2019-12-16T23:07:49.975391stark.klein-stark.info sshd\[8928\]: Invalid user jane from 62.234.141.48 port 35722 2019-12-16T23:07:49.984492stark.klein-stark.info sshd\[8928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.141.48 2019-12-16T23:07:51.349933stark.klein-stark.info sshd\[8928\]: Failed password for invalid user jane from 62.234.141.48 port 35722 ssh2 ... |
2019-12-17 09:11:39 |
| 202.83.17.223 | attackbots | Dec 17 06:08:45 sd-53420 sshd\[14487\]: Invalid user Beauty@123 from 202.83.17.223 Dec 17 06:08:45 sd-53420 sshd\[14487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.83.17.223 Dec 17 06:08:47 sd-53420 sshd\[14487\]: Failed password for invalid user Beauty@123 from 202.83.17.223 port 36530 ssh2 Dec 17 06:14:51 sd-53420 sshd\[16786\]: Invalid user joachi from 202.83.17.223 Dec 17 06:14:51 sd-53420 sshd\[16786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.83.17.223 ... |
2019-12-17 13:17:00 |
| 112.85.42.178 | attack | Dec 8 21:36:16 vtv3 sshd[21623]: Failed password for root from 112.85.42.178 port 20470 ssh2 Dec 8 21:36:20 vtv3 sshd[21623]: Failed password for root from 112.85.42.178 port 20470 ssh2 Dec 10 15:35:57 vtv3 sshd[17979]: Failed password for root from 112.85.42.178 port 44430 ssh2 Dec 10 15:36:01 vtv3 sshd[17979]: Failed password for root from 112.85.42.178 port 44430 ssh2 Dec 10 15:36:05 vtv3 sshd[17979]: Failed password for root from 112.85.42.178 port 44430 ssh2 Dec 10 15:36:10 vtv3 sshd[17979]: Failed password for root from 112.85.42.178 port 44430 ssh2 Dec 10 18:43:31 vtv3 sshd[14252]: Failed password for root from 112.85.42.178 port 63978 ssh2 Dec 10 18:43:36 vtv3 sshd[14252]: Failed password for root from 112.85.42.178 port 63978 ssh2 Dec 10 18:43:40 vtv3 sshd[14252]: Failed password for root from 112.85.42.178 port 63978 ssh2 Dec 10 18:43:44 vtv3 sshd[14252]: Failed password for root from 112.85.42.178 port 63978 ssh2 Dec 10 20:50:56 vtv3 sshd[13127]: Failed password for root from 112.85.42.178 port 2 |
2019-12-17 13:14:28 |