City: Nürnberg
Region: Bayern
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
b'
; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> 2a03:4000:3b:133:18b4:26ff:fe81:c222
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 41788
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;2a03:4000:3b:133:18b4:26ff:fe81:c222. IN A
;; Query time: 0 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Thu Apr 03 14:41:25 CST 2025
;; MSG SIZE rcvd: 65
'
b'Host 2.2.2.c.1.8.e.f.f.f.6.2.4.b.8.1.3.3.1.0.b.3.0.0.0.0.0.4.3.0.a.2.ip6.arpa not found: 3(NXDOMAIN)
'
server can't find 2a03:4000:3b:133:18b4:26ff:fe81:c222.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.175.208.73 | attack | Dec 31 20:04:50 plusreed sshd[14089]: Invalid user vagrant from 185.175.208.73 Dec 31 20:04:50 plusreed sshd[14089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.175.208.73 Dec 31 20:04:50 plusreed sshd[14089]: Invalid user vagrant from 185.175.208.73 Dec 31 20:04:51 plusreed sshd[14089]: Failed password for invalid user vagrant from 185.175.208.73 port 33506 ssh2 Dec 31 20:09:32 plusreed sshd[15423]: Invalid user mkt from 185.175.208.73 ... |
2020-01-01 09:18:17 |
| 193.70.39.175 | attackspambots | Jan 1 06:26:29 itv-usvr-02 sshd[30671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.39.175 user=root Jan 1 06:26:31 itv-usvr-02 sshd[30671]: Failed password for root from 193.70.39.175 port 52402 ssh2 Jan 1 06:31:23 itv-usvr-02 sshd[30725]: Invalid user hung from 193.70.39.175 port 57820 Jan 1 06:31:23 itv-usvr-02 sshd[30725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.39.175 Jan 1 06:31:23 itv-usvr-02 sshd[30725]: Invalid user hung from 193.70.39.175 port 57820 Jan 1 06:31:25 itv-usvr-02 sshd[30725]: Failed password for invalid user hung from 193.70.39.175 port 57820 ssh2 |
2020-01-01 09:21:44 |
| 49.144.175.196 | attackbots | Jan 1 05:58:24 mail kernel: [2874445.649777] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=49.144.175.196 DST=91.205.173.180 LEN=48 TOS=0x00 PREC=0x00 TTL=117 ID=4317 DF PROTO=TCP SPT=11209 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 Jan 1 05:58:27 mail kernel: [2874448.705373] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=49.144.175.196 DST=91.205.173.180 LEN=48 TOS=0x00 PREC=0x00 TTL=117 ID=5604 DF PROTO=TCP SPT=11209 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 Jan 1 05:58:33 mail kernel: [2874454.705382] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=49.144.175.196 DST=91.205.173.180 LEN=48 TOS=0x00 PREC=0x00 TTL=117 ID=8191 DF PROTO=TCP SPT=11209 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 |
2020-01-01 13:12:47 |
| 185.176.27.6 | attack | Jan 1 01:54:58 h2177944 kernel: \[1038741.412850\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.6 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=34137 PROTO=TCP SPT=48406 DPT=3981 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 1 01:54:58 h2177944 kernel: \[1038741.412865\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.6 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=34137 PROTO=TCP SPT=48406 DPT=3981 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 1 02:06:07 h2177944 kernel: \[1039410.335166\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.6 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=20409 PROTO=TCP SPT=48406 DPT=5374 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 1 02:13:07 h2177944 kernel: \[1039830.549125\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.6 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=46793 PROTO=TCP SPT=48406 DPT=8348 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 1 02:13:07 h2177944 kernel: \[1039830.549138\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.6 DST=85.214.117.9 LEN= |
2020-01-01 09:15:57 |
| 85.237.35.86 | attack | Automatic report - Port Scan Attack |
2020-01-01 13:03:15 |
| 185.53.88.47 | attack | 01/01/2020-05:58:28.639504 185.53.88.47 Protocol: 17 ET SCAN Sipvicious Scan |
2020-01-01 13:15:14 |
| 182.61.55.154 | attack | SSH Brute-Force reported by Fail2Ban |
2020-01-01 13:19:58 |
| 203.133.51.8 | attack | 12/31/2019-23:49:30.279840 203.133.51.8 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2020-01-01 09:17:53 |
| 139.199.14.128 | attackspam | SSH authentication failure x 6 reported by Fail2Ban ... |
2020-01-01 09:10:40 |
| 35.160.48.160 | attackbotsspam | 01/01/2020-06:14:31.778454 35.160.48.160 Protocol: 6 SURICATA TLS invalid record/traffic |
2020-01-01 13:17:07 |
| 218.241.251.217 | attack | Lines containing failures of 218.241.251.217 Dec 31 23:26:55 mailserver sshd[18730]: Invalid user ching from 218.241.251.217 port 2788 Dec 31 23:26:55 mailserver sshd[18730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.241.251.217 Dec 31 23:26:57 mailserver sshd[18730]: Failed password for invalid user ching from 218.241.251.217 port 2788 ssh2 Dec 31 23:26:57 mailserver sshd[18730]: Received disconnect from 218.241.251.217 port 2788:11: Bye Bye [preauth] Dec 31 23:26:57 mailserver sshd[18730]: Disconnected from invalid user ching 218.241.251.217 port 2788 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=218.241.251.217 |
2020-01-01 09:22:13 |
| 66.249.79.51 | attack | Automatic report - Banned IP Access |
2020-01-01 09:13:39 |
| 218.92.0.184 | attack | Dec 31 20:12:45 plusreed sshd[16215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.184 user=root Dec 31 20:12:47 plusreed sshd[16215]: Failed password for root from 218.92.0.184 port 56247 ssh2 ... |
2020-01-01 09:14:18 |
| 159.138.149.42 | attack | Unauthorized access detected from banned ip |
2020-01-01 13:13:04 |
| 66.249.79.54 | attackbotsspam | Automatic report - Banned IP Access |
2020-01-01 09:13:59 |