City: unknown
Region: unknown
Country: unknown
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
bb'
; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> 2600:141b:9000:493::2a5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 3435
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;2600:141b:9000:493::2a5. IN A
;; Query time: 0 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Sat Feb 19 03:01:32 CST 2022
;; MSG SIZE rcvd: 52
'5.a.2.0.0.0.0.0.0.0.0.0.0.0.0.0.3.9.4.0.0.0.0.9.b.1.4.1.0.0.6.2.ip6.arpa domain name pointer g2600-141b-9000-0493-0000-0000-0000-02a5.deploy.static.akamaitechnologies.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
5.a.2.0.0.0.0.0.0.0.0.0.0.0.0.0.3.9.4.0.0.0.0.9.b.1.4.1.0.0.6.2.ip6.arpa name = g2600-141b-9000-0493-0000-0000-0000-02a5.deploy.static.akamaitechnologies.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 177.98.68.159 | attackbotsspam | DATE:2019-09-07 02:36:20, IP:177.98.68.159, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc) |
2019-09-07 15:56:03 |
| 37.49.227.109 | attackbots | Scanning random ports - tries to find possible vulnerable services |
2019-09-07 15:27:05 |
| 116.203.218.192 | attack | Sep 6 21:41:44 hcbb sshd\[24918\]: Invalid user ubuntu from 116.203.218.192 Sep 6 21:41:44 hcbb sshd\[24918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.192.218.203.116.clients.your-server.de Sep 6 21:41:46 hcbb sshd\[24918\]: Failed password for invalid user ubuntu from 116.203.218.192 port 42544 ssh2 Sep 6 21:45:37 hcbb sshd\[25224\]: Invalid user 1 from 116.203.218.192 Sep 6 21:45:37 hcbb sshd\[25224\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.192.218.203.116.clients.your-server.de |
2019-09-07 15:58:39 |
| 103.214.41.29 | attack | Helo |
2019-09-07 15:15:24 |
| 132.232.94.184 | attackspam | fail2ban honeypot |
2019-09-07 15:52:23 |
| 94.177.175.17 | attackbotsspam | Sep 7 07:18:51 hb sshd\[8990\]: Invalid user web1 from 94.177.175.17 Sep 7 07:18:51 hb sshd\[8990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.175.17 Sep 7 07:18:54 hb sshd\[8990\]: Failed password for invalid user web1 from 94.177.175.17 port 40802 ssh2 Sep 7 07:23:05 hb sshd\[9353\]: Invalid user webpass from 94.177.175.17 Sep 7 07:23:05 hb sshd\[9353\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.175.17 |
2019-09-07 15:29:17 |
| 182.61.132.165 | attackbots | Sep 6 21:18:29 eddieflores sshd\[11164\]: Invalid user 1234 from 182.61.132.165 Sep 6 21:18:29 eddieflores sshd\[11164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.132.165 Sep 6 21:18:31 eddieflores sshd\[11164\]: Failed password for invalid user 1234 from 182.61.132.165 port 57502 ssh2 Sep 6 21:23:55 eddieflores sshd\[11592\]: Invalid user deployer from 182.61.132.165 Sep 6 21:23:55 eddieflores sshd\[11592\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.132.165 |
2019-09-07 15:53:55 |
| 189.6.45.130 | attackspam | Sep 6 14:30:48 hpm sshd\[27892\]: Invalid user test from 189.6.45.130 Sep 6 14:30:48 hpm sshd\[27892\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.6.45.130 Sep 6 14:30:49 hpm sshd\[27892\]: Failed password for invalid user test from 189.6.45.130 port 44160 ssh2 Sep 6 14:36:12 hpm sshd\[28316\]: Invalid user ftp from 189.6.45.130 Sep 6 14:36:12 hpm sshd\[28316\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.6.45.130 |
2019-09-07 15:55:33 |
| 27.216.24.112 | attack | Unauthorised access (Sep 7) SRC=27.216.24.112 LEN=40 TTL=49 ID=7597 TCP DPT=8080 WINDOW=2671 SYN Unauthorised access (Sep 7) SRC=27.216.24.112 LEN=40 TTL=49 ID=43451 TCP DPT=8080 WINDOW=34765 SYN Unauthorised access (Sep 6) SRC=27.216.24.112 LEN=40 TTL=49 ID=51149 TCP DPT=8080 WINDOW=55445 SYN Unauthorised access (Sep 6) SRC=27.216.24.112 LEN=40 TTL=49 ID=25333 TCP DPT=8080 WINDOW=55445 SYN Unauthorised access (Sep 6) SRC=27.216.24.112 LEN=40 TTL=49 ID=2761 TCP DPT=8080 WINDOW=55445 SYN Unauthorised access (Sep 5) SRC=27.216.24.112 LEN=40 TTL=49 ID=44733 TCP DPT=8080 WINDOW=34765 SYN Unauthorised access (Sep 3) SRC=27.216.24.112 LEN=40 TTL=49 ID=50329 TCP DPT=8080 WINDOW=55445 SYN |
2019-09-07 15:38:29 |
| 134.209.203.238 | attackspam | [munged]::443 134.209.203.238 - - [07/Sep/2019:02:35:31 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 134.209.203.238 - - [07/Sep/2019:02:35:43 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 134.209.203.238 - - [07/Sep/2019:02:35:46 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 134.209.203.238 - - [07/Sep/2019:02:35:54 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 134.209.203.238 - - [07/Sep/2019:02:35:57 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 134.209.203.238 - - [07/Sep/2019:02:36:09 +0200] "POST /[munged]: HTTP/1.1" 200 9080 "-" "Mozilla/5. |
2019-09-07 15:58:17 |
| 104.207.147.223 | attack | RDP Bruteforce |
2019-09-07 15:49:54 |
| 179.99.220.253 | attack | Sep 7 09:42:24 vps01 sshd[7251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.99.220.253 Sep 7 09:42:26 vps01 sshd[7251]: Failed password for invalid user nagios from 179.99.220.253 port 53906 ssh2 |
2019-09-07 15:47:45 |
| 81.16.8.220 | attack | Sep 6 20:20:03 vtv3 sshd\[12807\]: Invalid user ts3 from 81.16.8.220 port 50646 Sep 6 20:20:03 vtv3 sshd\[12807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.16.8.220 Sep 6 20:20:05 vtv3 sshd\[12807\]: Failed password for invalid user ts3 from 81.16.8.220 port 50646 ssh2 Sep 6 20:24:57 vtv3 sshd\[15131\]: Invalid user teamspeak from 81.16.8.220 port 42656 Sep 6 20:24:57 vtv3 sshd\[15131\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.16.8.220 Sep 6 20:37:37 vtv3 sshd\[21695\]: Invalid user minecraft from 81.16.8.220 port 60484 Sep 6 20:37:37 vtv3 sshd\[21695\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.16.8.220 Sep 6 20:37:39 vtv3 sshd\[21695\]: Failed password for invalid user minecraft from 81.16.8.220 port 60484 ssh2 Sep 6 20:41:55 vtv3 sshd\[23842\]: Invalid user server from 81.16.8.220 port 47600 Sep 6 20:41:55 vtv3 sshd\[23842\]: pam_unix\(sshd |
2019-09-07 15:50:42 |
| 45.40.194.129 | attackspam | Sep 6 21:19:38 lcprod sshd\[24886\]: Invalid user oracle123 from 45.40.194.129 Sep 6 21:19:38 lcprod sshd\[24886\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.40.194.129 Sep 6 21:19:40 lcprod sshd\[24886\]: Failed password for invalid user oracle123 from 45.40.194.129 port 60708 ssh2 Sep 6 21:25:16 lcprod sshd\[25396\]: Invalid user d3v from 45.40.194.129 Sep 6 21:25:16 lcprod sshd\[25396\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.40.194.129 |
2019-09-07 15:38:59 |
| 34.68.136.212 | attack | Sep 6 21:31:19 lcprod sshd\[26029\]: Invalid user demo3 from 34.68.136.212 Sep 6 21:31:19 lcprod sshd\[26029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.136.68.34.bc.googleusercontent.com Sep 6 21:31:21 lcprod sshd\[26029\]: Failed password for invalid user demo3 from 34.68.136.212 port 51180 ssh2 Sep 6 21:35:17 lcprod sshd\[26428\]: Invalid user live from 34.68.136.212 Sep 6 21:35:17 lcprod sshd\[26428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.136.68.34.bc.googleusercontent.com |
2019-09-07 16:01:32 |