City: unknown
Region: unknown
Country: Germany
Internet Service Provider: A100 ROW GmbH
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackbotsspam | Unsolicited bulk porn & phishing - varying ISPs (primarily Chinanet); repetitive redirects from blacklisted IP 92.63.192.124 & .151; spam volume up to 15/day. Spam link 4-gkb.ru = 92.63.192.151 NVFOPServer-net (previous IP 92.63.192.124) - repetitive redirects: - www.benaughty.com = 2.17.43.33, 2.17.43.17 Akamai - walkondates.com = 52.57.168.236, 52.58.193.171 Amazon - retargetcore.com = 52.29.68.89, 35.158.186.87 Amazon - t.insigit.com = 52.28.205.175, 54.93.35.219 Amazon - uf.noclef.com = 3.121.133.104, 52.59.105.243 Amazon Unsolicited bulk spam - unimplemented.likethin.eu, China Mobile Communications Corporation - 120.208.209.206 Sender domain harmsenheftrucks.nl = 136.144.206.196 TransIP BV |
2019-10-12 23:33:54 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.29.68.89
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7301
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.29.68.89. IN A
;; AUTHORITY SECTION:
. 390 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019101200 1800 900 604800 86400
;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 12 23:33:50 CST 2019
;; MSG SIZE rcvd: 11589.68.29.52.in-addr.arpa domain name pointer ec2-52-29-68-89.eu-central-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
89.68.29.52.in-addr.arpa name = ec2-52-29-68-89.eu-central-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.236.95.55 | attackbotsspam | SSH Brute Force, server-1 sshd[21252]: Failed password for root from 104.236.95.55 port 53596 ssh2 |
2019-07-27 20:45:20 |
| 45.77.172.164 | attack | Automatic report - Banned IP Access |
2019-07-27 20:53:41 |
| 170.150.135.36 | attack | icarus github smtp honeypot |
2019-07-27 20:43:30 |
| 186.154.147.166 | attackbotsspam | port scan and connect, tcp 80 (http) |
2019-07-27 20:28:32 |
| 49.81.94.118 | attackbotsspam | Brute force SMTP login attempts. |
2019-07-27 20:59:37 |
| 78.39.67.210 | attackbotsspam | SS1,DEF GET /admin//config.php |
2019-07-27 20:49:19 |
| 51.89.22.60 | attack | 2019-07-27T18:03:47.303066enmeeting.mahidol.ac.th sshd\[23770\]: User root from 60.ip-51-89-22.eu not allowed because not listed in AllowUsers 2019-07-27T18:03:47.429035enmeeting.mahidol.ac.th sshd\[23770\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.ip-51-89-22.eu user=root 2019-07-27T18:03:49.900284enmeeting.mahidol.ac.th sshd\[23770\]: Failed password for invalid user root from 51.89.22.60 port 37928 ssh2 ... |
2019-07-27 20:11:44 |
| 95.211.218.197 | attackspam | Jul 27 11:23:49 eventyay sshd[16204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.211.218.197 Jul 27 11:23:51 eventyay sshd[16204]: Failed password for invalid user BnCyfjuZ3 from 95.211.218.197 port 52142 ssh2 Jul 27 11:28:01 eventyay sshd[17184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.211.218.197 ... |
2019-07-27 20:47:15 |
| 206.189.41.34 | attackbotsspam | Jul 27 06:02:07 localhost sshd\[29692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.41.34 user=root Jul 27 06:02:09 localhost sshd\[29692\]: Failed password for root from 206.189.41.34 port 57497 ssh2 ... |
2019-07-27 20:34:48 |
| 191.53.251.238 | attackbotsspam | Jul 27 01:01:17 web1 postfix/smtpd[14884]: warning: unknown[191.53.251.238]: SASL PLAIN authentication failed: authentication failure ... |
2019-07-27 20:40:05 |
| 165.22.182.168 | attack | Jul 27 11:37:17 OPSO sshd\[27764\]: Invalid user opendoor@2016 from 165.22.182.168 port 42498 Jul 27 11:37:17 OPSO sshd\[27764\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.182.168 Jul 27 11:37:19 OPSO sshd\[27764\]: Failed password for invalid user opendoor@2016 from 165.22.182.168 port 42498 ssh2 Jul 27 11:41:39 OPSO sshd\[28346\]: Invalid user nosmoking!@\# from 165.22.182.168 port 37642 Jul 27 11:41:39 OPSO sshd\[28346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.182.168 |
2019-07-27 20:23:39 |
| 81.229.157.51 | attackbotsspam | Jul 27 10:17:55 mout sshd[7037]: Connection closed by 81.229.157.51 port 57578 [preauth] |
2019-07-27 20:27:04 |
| 103.103.181.18 | attackspam | Automated report - ssh fail2ban: Jul 27 14:14:11 wrong password, user=root, port=60280, ssh2 Jul 27 14:39:39 wrong password, user=root, port=48742, ssh2 |
2019-07-27 20:46:10 |
| 212.126.108.172 | attack | email spam |
2019-07-27 20:28:02 |
| 138.97.93.66 | attackbots | Jul 27 08:01:00 srv-4 sshd\[15043\]: Invalid user admin from 138.97.93.66 Jul 27 08:01:00 srv-4 sshd\[15043\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.93.66 Jul 27 08:01:01 srv-4 sshd\[15043\]: Failed password for invalid user admin from 138.97.93.66 port 43972 ssh2 ... |
2019-07-27 20:58:25 |