City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.121.174.51
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3899
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;3.121.174.51. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 20:05:39 CST 2025
;; MSG SIZE rcvd: 10551.174.121.3.in-addr.arpa domain name pointer ec2-3-121-174-51.eu-central-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
51.174.121.3.in-addr.arpa name = ec2-3-121-174-51.eu-central-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 101.36.138.61 | attackspambots | Oct 3 03:06:41 server2 sshd\[12653\]: User root from 101.36.138.61 not allowed because not listed in AllowUsers Oct 3 03:06:42 server2 sshd\[12657\]: User root from 101.36.138.61 not allowed because not listed in AllowUsers Oct 3 03:06:51 server2 sshd\[12665\]: User root from 101.36.138.61 not allowed because not listed in AllowUsers Oct 3 03:06:53 server2 sshd\[12667\]: User root from 101.36.138.61 not allowed because not listed in AllowUsers Oct 3 03:06:56 server2 sshd\[12669\]: User root from 101.36.138.61 not allowed because not listed in AllowUsers Oct 3 03:07:01 server2 sshd\[12673\]: User root from 101.36.138.61 not allowed because not listed in AllowUsers |
2019-10-03 10:16:04 |
| 90.131.132.180 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/90.131.132.180/ SE - 1H : (118) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : SE NAME ASN : ASN1257 IP : 90.131.132.180 CIDR : 90.131.0.0/16 PREFIX COUNT : 263 UNIQUE IP COUNT : 4174848 WYKRYTE ATAKI Z ASN1257 : 1H - 1 3H - 4 6H - 6 12H - 7 24H - 12 DateTime : 2019-10-02 23:23:27 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery |
2019-10-03 09:59:43 |
| 164.132.193.27 | attackspam | Oct 3 05:59:58 vps647732 sshd[27231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.193.27 Oct 3 05:59:59 vps647732 sshd[27231]: Failed password for invalid user sshvpn from 164.132.193.27 port 36828 ssh2 ... |
2019-10-03 12:03:32 |
| 111.230.247.243 | attack | Oct 3 03:36:35 rotator sshd\[3174\]: Invalid user bariton from 111.230.247.243Oct 3 03:36:37 rotator sshd\[3174\]: Failed password for invalid user bariton from 111.230.247.243 port 50330 ssh2Oct 3 03:41:00 rotator sshd\[3990\]: Invalid user db2inst1 from 111.230.247.243Oct 3 03:41:02 rotator sshd\[3990\]: Failed password for invalid user db2inst1 from 111.230.247.243 port 37169 ssh2Oct 3 03:45:24 rotator sshd\[4846\]: Invalid user apidoc from 111.230.247.243Oct 3 03:45:26 rotator sshd\[4846\]: Failed password for invalid user apidoc from 111.230.247.243 port 52236 ssh2 ... |
2019-10-03 09:53:48 |
| 222.186.15.204 | attackspambots | 2019-10-03T11:20:57.222429enmeeting.mahidol.ac.th sshd\[8144\]: User root from 222.186.15.204 not allowed because not listed in AllowUsers 2019-10-03T11:20:57.635272enmeeting.mahidol.ac.th sshd\[8144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.204 user=root 2019-10-03T11:20:59.345516enmeeting.mahidol.ac.th sshd\[8144\]: Failed password for invalid user root from 222.186.15.204 port 32091 ssh2 ... |
2019-10-03 12:22:04 |
| 203.99.51.79 | attackspam | Sep 30 13:26:27 shenron sshd[1216]: Invalid user admin from 203.99.51.79 Sep 30 13:26:27 shenron sshd[1216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.99.51.79 Sep 30 13:26:30 shenron sshd[1216]: Failed password for invalid user admin from 203.99.51.79 port 33416 ssh2 Sep 30 13:26:30 shenron sshd[1216]: Connection closed by 203.99.51.79 port 33416 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=203.99.51.79 |
2019-10-03 12:14:34 |
| 34.67.64.119 | attack | Calling not existent HTTP content (400 or 404). |
2019-10-03 09:56:32 |
| 185.53.91.70 | attackbotsspam | 10/03/2019-03:01:56.480253 185.53.91.70 Protocol: 17 ET SCAN Sipvicious Scan |
2019-10-03 09:58:08 |
| 117.1.67.76 | attackspam | Oct 2 23:23:13 andromeda sshd\[56675\]: Invalid user admin from 117.1.67.76 port 59344 Oct 2 23:23:13 andromeda sshd\[56675\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.1.67.76 Oct 2 23:23:16 andromeda sshd\[56675\]: Failed password for invalid user admin from 117.1.67.76 port 59344 ssh2 |
2019-10-03 10:09:39 |
| 147.135.209.139 | attackspam | 2019-08-18 18:23:07,269 fail2ban.actions [878]: NOTICE [sshd] Ban 147.135.209.139 2019-08-18 21:30:55,125 fail2ban.actions [878]: NOTICE [sshd] Ban 147.135.209.139 2019-08-19 00:38:27,090 fail2ban.actions [878]: NOTICE [sshd] Ban 147.135.209.139 ... |
2019-10-03 12:09:42 |
| 106.13.121.175 | attackbotsspam | Oct 3 04:11:33 vtv3 sshd\[29405\]: Invalid user user1 from 106.13.121.175 port 36463 Oct 3 04:11:33 vtv3 sshd\[29405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.121.175 Oct 3 04:11:35 vtv3 sshd\[29405\]: Failed password for invalid user user1 from 106.13.121.175 port 36463 ssh2 Oct 3 04:15:08 vtv3 sshd\[30972\]: Invalid user admin from 106.13.121.175 port 50311 Oct 3 04:15:08 vtv3 sshd\[30972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.121.175 Oct 3 04:25:48 vtv3 sshd\[4167\]: Invalid user tomcat from 106.13.121.175 port 35387 Oct 3 04:25:48 vtv3 sshd\[4167\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.121.175 Oct 3 04:25:49 vtv3 sshd\[4167\]: Failed password for invalid user tomcat from 106.13.121.175 port 35387 ssh2 Oct 3 04:29:15 vtv3 sshd\[5566\]: Invalid user elasticsearch from 106.13.121.175 port 49234 Oct 3 04:29:15 vtv3 sshd\ |
2019-10-03 12:16:50 |
| 138.59.216.7 | attackbotsspam | Oct 2 17:54:43 eddieflores sshd\[11140\]: Invalid user jason3 from 138.59.216.7 Oct 2 17:54:43 eddieflores sshd\[11140\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-138-59-216-7.ubaconecttelecom.net.br Oct 2 17:54:45 eddieflores sshd\[11140\]: Failed password for invalid user jason3 from 138.59.216.7 port 57780 ssh2 Oct 2 17:59:58 eddieflores sshd\[11590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-138-59-216-7.ubaconecttelecom.net.br user=root Oct 2 18:00:00 eddieflores sshd\[11590\]: Failed password for root from 138.59.216.7 port 50665 ssh2 |
2019-10-03 12:00:53 |
| 118.25.7.83 | attack | Oct 3 03:02:27 XXX sshd[58217]: Invalid user test from 118.25.7.83 port 55742 |
2019-10-03 12:04:33 |
| 77.40.3.223 | attack | 2019-10-02 dovecot_login authenticator failed for \(localhost.localdomain\) \[77.40.3.223\]: 535 Incorrect authentication data \(set_id=info@**REMOVED**.de\) 2019-10-03 dovecot_login authenticator failed for \(localhost.localdomain\) \[77.40.3.223\]: 535 Incorrect authentication data \(set_id=infodesk@**REMOVED**.de\) 2019-10-03 dovecot_login authenticator failed for \(localhost.localdomain\) \[77.40.3.223\]: 535 Incorrect authentication data \(set_id=inbox@**REMOVED**.de\) |
2019-10-03 12:04:55 |
| 14.162.151.134 | attack | 445/tcp 445/tcp 445/tcp [2019-10-03]3pkt |
2019-10-03 12:11:05 |