City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
        ; <<>> DiG 9.10.3-P4-Ubuntu <<>> 37.5.160.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60457
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;37.5.160.140.			IN	A
;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021900 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 19 21:51:30 CST 2025
;; MSG SIZE  rcvd: 105
        140.160.5.37.in-addr.arpa domain name pointer ip2505a08c.dynamic.kabel-deutschland.de.
        Server:		183.60.83.19
Address:	183.60.83.19#53
Non-authoritative answer:
140.160.5.37.in-addr.arpa	name = ip2505a08c.dynamic.kabel-deutschland.de.
Authoritative answers can be found from:
        | IP | Type | Details | Datetime | 
|---|---|---|---|
| 185.176.221.164 | attack | proto=tcp . spt=58551 . dpt=3389 . src=185.176.221.164 . dst=xx.xx.4.1 . (listed on Alienvault Jul 27) (156)  | 
                    2019-07-28 10:22:58 | 
| 50.100.116.5 | attackbotsspam | Automatic report - Port Scan Attack  | 
                    2019-07-28 10:16:34 | 
| 185.123.220.150 | attackbots | SASL Brute Force  | 
                    2019-07-28 10:12:43 | 
| 194.190.93.136 | attack | proto=tcp . spt=50242 . dpt=25 . (listed on Blocklist de Jul 27) (157)  | 
                    2019-07-28 10:21:17 | 
| 217.21.193.20 | attackbotsspam | Port scan: Attack repeated for 24 hours  | 
                    2019-07-28 10:12:07 | 
| 91.103.196.170 | attackspambots | proto=tcp . spt=59457 . dpt=25 . (listed on Blocklist de Jul 27) (147)  | 
                    2019-07-28 10:44:40 | 
| 144.217.4.14 | attack | SSH Bruteforce @ SigaVPN honeypot  | 
                    2019-07-28 10:32:16 | 
| 185.65.135.180 | attack | frenzy  | 
                    2019-07-28 10:15:36 | 
| 183.230.199.54 | attackspam | Jul 28 03:53:13 mail sshd\[3804\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.230.199.54 user=root Jul 28 03:53:15 mail sshd\[3804\]: Failed password for root from 183.230.199.54 port 50062 ssh2 Jul 28 03:55:14 mail sshd\[4078\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.230.199.54 user=root Jul 28 03:55:16 mail sshd\[4078\]: Failed password for root from 183.230.199.54 port 58886 ssh2 Jul 28 03:57:19 mail sshd\[4303\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.230.199.54 user=root  | 
                    2019-07-28 10:17:41 | 
| 109.70.100.19 | attackbots | Wordpress attack  | 
                    2019-07-28 10:17:08 | 
| 139.59.79.56 | attack | Jul 28 02:37:38 *** sshd[9403]: User root from 139.59.79.56 not allowed because not listed in AllowUsers  | 
                    2019-07-28 10:42:52 | 
| 45.122.222.253 | attack | Jul 27 20:06:33 askasleikir sshd[30995]: Failed password for root from 45.122.222.253 port 50880 ssh2  | 
                    2019-07-28 10:37:08 | 
| 195.201.115.206 | attack | Jul 27 16:53:27 penfold sshd[3347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.201.115.206 user=r.r Jul 27 16:53:29 penfold sshd[3347]: Failed password for r.r from 195.201.115.206 port 34252 ssh2 Jul 27 16:53:29 penfold sshd[3347]: Received disconnect from 195.201.115.206 port 34252:11: Bye Bye [preauth] Jul 27 16:53:29 penfold sshd[3347]: Disconnected from 195.201.115.206 port 34252 [preauth] Jul 27 16:59:18 penfold sshd[3508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.201.115.206 user=r.r Jul 27 16:59:20 penfold sshd[3508]: Failed password for r.r from 195.201.115.206 port 51454 ssh2 Jul 27 16:59:20 penfold sshd[3508]: Received disconnect from 195.201.115.206 port 51454:11: Bye Bye [preauth] Jul 27 16:59:20 penfold sshd[3508]: Disconnected from 195.201.115.206 port 51454 [preauth] Jul 27 17:03:24 penfold sshd[3660]: pam_unix(sshd:auth): authentication failure; logname........ -------------------------------  | 
                    2019-07-28 10:24:32 | 
| 185.255.46.100 | attackbots | proto=tcp . spt=56622 . dpt=25 . (listed on Blocklist de Jul 27) (152)  | 
                    2019-07-28 10:29:33 | 
| 60.250.103.199 | attackspam | 19/7/27@21:15:09: FAIL: Alarm-Intrusion address from=60.250.103.199 ...  | 
                    2019-07-28 10:30:23 |