City: Frankfurt am Main
Region: Hesse
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 54.93.35.219 | attackbots | Unsolicited bulk porn & phishing - varying ISPs (primarily Chinanet); repetitive redirects from blacklisted IP 92.63.192.124 & .151; spam volume up to 15/day. Spam link 4-gkb.ru = 92.63.192.151 NVFOPServer-net (previous IP 92.63.192.124) - repetitive redirects: - www.benaughty.com = 2.17.43.33, 2.17.43.17 Akamai - walkondates.com = 52.57.168.236, 52.58.193.171 Amazon - retargetcore.com = 52.29.68.89, 35.158.186.87 Amazon - t.insigit.com = 52.28.205.175, 54.93.35.219 Amazon - uf.noclef.com = 3.121.133.104, 52.59.105.243 Amazon Unsolicited bulk spam - unimplemented.likethin.eu, China Mobile Communications Corporation - 120.208.209.206 Sender domain harmsenheftrucks.nl = 136.144.206.196 TransIP BV |
2019-10-12 22:25:34 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.93.3.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8851
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.93.3.64. IN A
;; AUTHORITY SECTION:
. 598 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030500 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 05 13:44:56 CST 2022
;; MSG SIZE rcvd: 103
64.3.93.54.in-addr.arpa domain name pointer ec2-54-93-3-64.eu-central-1.compute.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
64.3.93.54.in-addr.arpa name = ec2-54-93-3-64.eu-central-1.compute.amazonaws.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.15.87.199 | attackspambots | Aug 31 02:17:40 srv206 sshd[30999]: Invalid user terrariaserver from 51.15.87.199 Aug 31 02:17:40 srv206 sshd[30999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.87.199 Aug 31 02:17:40 srv206 sshd[30999]: Invalid user terrariaserver from 51.15.87.199 Aug 31 02:17:42 srv206 sshd[30999]: Failed password for invalid user terrariaserver from 51.15.87.199 port 34402 ssh2 ... |
2019-08-31 09:17:57 |
| 191.179.86.211 | attackspam | 19/8/30@12:17:40: FAIL: IoT-Telnet address from=191.179.86.211 ... |
2019-08-31 08:58:05 |
| 60.170.101.25 | attackspam | Telnet/23 MH Probe, BF, Hack - |
2019-08-31 08:44:20 |
| 104.131.113.106 | attackbotsspam | Invalid user rpcuser from 104.131.113.106 port 36972 |
2019-08-31 09:16:26 |
| 125.123.90.52 | attackbots | SSH invalid-user multiple login try |
2019-08-31 08:48:54 |
| 195.43.189.10 | attackbotsspam | Invalid user jude from 195.43.189.10 port 52562 |
2019-08-31 08:32:40 |
| 121.8.124.244 | attack | Aug 30 22:04:10 MK-Soft-VM5 sshd\[10058\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.8.124.244 user=root Aug 30 22:04:12 MK-Soft-VM5 sshd\[10058\]: Failed password for root from 121.8.124.244 port 1628 ssh2 Aug 30 22:07:37 MK-Soft-VM5 sshd\[10061\]: Invalid user mysql from 121.8.124.244 port 13828 ... |
2019-08-31 09:15:14 |
| 213.150.76.74 | attackbots | port scan and connect, tcp 81 (hosts2-ns) |
2019-08-31 09:17:07 |
| 118.187.6.24 | attack | fraudulent SSH attempt |
2019-08-31 08:34:57 |
| 45.82.34.36 | attackbotsspam | Aug 30 18:18:00 server postfix/smtpd[17122]: NOQUEUE: reject: RCPT from stocking.geomaticvista.com[45.82.34.36]: 554 5.7.1 Service unavailable; Client host [45.82.34.36] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= |
2019-08-31 08:49:26 |
| 200.56.60.5 | attack | Aug 31 05:08:18 itv-usvr-02 sshd[27050]: Invalid user info5 from 200.56.60.5 port 32223 Aug 31 05:08:18 itv-usvr-02 sshd[27050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.56.60.5 Aug 31 05:08:18 itv-usvr-02 sshd[27050]: Invalid user info5 from 200.56.60.5 port 32223 Aug 31 05:08:20 itv-usvr-02 sshd[27050]: Failed password for invalid user info5 from 200.56.60.5 port 32223 ssh2 Aug 31 05:18:04 itv-usvr-02 sshd[27151]: Invalid user glavbuh from 200.56.60.5 port 32793 |
2019-08-31 09:07:56 |
| 129.204.67.235 | attackspambots | Aug 31 03:17:33 www1 sshd\[63930\]: Invalid user Jewel from 129.204.67.235Aug 31 03:17:35 www1 sshd\[63930\]: Failed password for invalid user Jewel from 129.204.67.235 port 52972 ssh2Aug 31 03:22:08 www1 sshd\[64450\]: Invalid user odoo from 129.204.67.235Aug 31 03:22:10 www1 sshd\[64450\]: Failed password for invalid user odoo from 129.204.67.235 port 38246 ssh2Aug 31 03:26:35 www1 sshd\[64960\]: Invalid user backend from 129.204.67.235Aug 31 03:26:37 www1 sshd\[64960\]: Failed password for invalid user backend from 129.204.67.235 port 51766 ssh2 ... |
2019-08-31 09:06:07 |
| 123.148.145.86 | attack | Attempt to log in with non-existing username "admin" /wp-login.php |
2019-08-31 08:31:39 |
| 187.10.94.19 | attackbots | Aug 30 18:13:33 aat-srv002 sshd[7394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.10.94.19 Aug 30 18:13:34 aat-srv002 sshd[7394]: Failed password for invalid user oracle from 187.10.94.19 port 50804 ssh2 Aug 30 18:18:46 aat-srv002 sshd[7548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.10.94.19 Aug 30 18:18:48 aat-srv002 sshd[7548]: Failed password for invalid user teamspeak from 187.10.94.19 port 40018 ssh2 ... |
2019-08-31 08:51:54 |
| 54.37.66.73 | attack | Aug 30 22:14:30 marvibiene sshd[45137]: Invalid user om from 54.37.66.73 port 36018 Aug 30 22:14:30 marvibiene sshd[45137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.66.73 Aug 30 22:14:30 marvibiene sshd[45137]: Invalid user om from 54.37.66.73 port 36018 Aug 30 22:14:32 marvibiene sshd[45137]: Failed password for invalid user om from 54.37.66.73 port 36018 ssh2 ... |
2019-08-31 08:52:48 |