City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 53.2.90.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44215
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;53.2.90.109. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020900 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 00:35:33 CST 2025
;; MSG SIZE rcvd: 104Host 109.90.2.53.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 109.90.2.53.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 211.24.110.125 | attackbots | $f2bV_matches |
2020-02-27 01:04:48 |
| 211.72.239.243 | attackbots | Feb 26 15:47:19 amit sshd\[16838\]: Invalid user magda from 211.72.239.243 Feb 26 15:47:19 amit sshd\[16838\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.72.239.243 Feb 26 15:47:21 amit sshd\[16838\]: Failed password for invalid user magda from 211.72.239.243 port 56992 ssh2 ... |
2020-02-27 00:28:13 |
| 62.210.136.166 | attack | Feb 26 16:43:59 debian-2gb-nbg1-2 kernel: \[4991035.463375\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=62.210.136.166 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=29678 PROTO=TCP SPT=47429 DPT=22024 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-02-27 01:02:07 |
| 88.214.26.53 | attack | Port 8632 scan denied |
2020-02-27 00:59:19 |
| 194.26.29.104 | attackbotsspam | scans 44 times in preceeding hours on the ports (in chronological order) 34170 34207 34143 34455 34265 34256 34307 34412 34025 34291 34152 34275 34421 34130 34109 34032 34011 34240 34211 34224 34428 34145 34300 34024 34363 34203 34388 34219 34338 34492 34249 34212 34292 34050 34006 34135 34018 34354 34474 34446 34390 34052 34123 34090 resulting in total of 236 scans from 194.26.29.0/24 block. |
2020-02-27 01:06:23 |
| 142.93.212.85 | attack | RDP Brute-Force (honeypot 9) |
2020-02-27 00:20:31 |
| 170.106.38.214 | attackbotsspam | scans 2 times in preceeding hours on the ports (in chronological order) 5803 1935 |
2020-02-27 00:52:44 |
| 211.35.76.241 | attack | $f2bV_matches |
2020-02-27 00:39:36 |
| 222.186.175.212 | attack | Feb 26 17:30:21 silence02 sshd[22217]: Failed password for root from 222.186.175.212 port 7626 ssh2 Feb 26 17:30:31 silence02 sshd[22217]: Failed password for root from 222.186.175.212 port 7626 ssh2 Feb 26 17:30:35 silence02 sshd[22217]: Failed password for root from 222.186.175.212 port 7626 ssh2 Feb 26 17:30:35 silence02 sshd[22217]: error: maximum authentication attempts exceeded for root from 222.186.175.212 port 7626 ssh2 [preauth] |
2020-02-27 00:33:33 |
| 193.57.40.38 | attackbots | Port 443 (HTTPS) access denied |
2020-02-27 00:48:44 |
| 144.217.34.148 | attackbots | Port 38305 scan denied |
2020-02-27 00:53:05 |
| 2.136.191.82 | attackspam | ES_MAINT-AS3352_<177>1582724189 [1:2403306:55566] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 4 [Classification: Misc Attack] [Priority: 2] {TCP} 2.136.191.82:52810 |
2020-02-27 00:34:18 |
| 82.223.197.204 | attackbotsspam | Lines containing failures of 82.223.197.204 Feb 25 07:15:47 shared11 sshd[9511]: Invalid user odoo from 82.223.197.204 port 38628 Feb 25 07:15:47 shared11 sshd[9511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.223.197.204 Feb 25 07:15:49 shared11 sshd[9511]: Failed password for invalid user odoo from 82.223.197.204 port 38628 ssh2 Feb 25 07:15:49 shared11 sshd[9511]: Received disconnect from 82.223.197.204 port 38628:11: Bye Bye [preauth] Feb 25 07:15:49 shared11 sshd[9511]: Disconnected from invalid user odoo 82.223.197.204 port 38628 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=82.223.197.204 |
2020-02-27 00:37:25 |
| 195.3.146.88 | attack | scans 4 times in preceeding hours on the ports (in chronological order) 63389 43389 3392 33789 |
2020-02-27 00:48:21 |
| 139.59.169.37 | attack | Feb 26 17:00:13 vpn01 sshd[29446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.169.37 Feb 26 17:00:15 vpn01 sshd[29446]: Failed password for invalid user narciso from 139.59.169.37 port 34436 ssh2 ... |
2020-02-27 00:43:15 |