City: Usingen
Region: Hessen
Country: Germany
Internet Service Provider: Telekom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.155.3.37
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60672
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;80.155.3.37. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 10:12:31 CST 2025
;; MSG SIZE rcvd: 104Host 37.3.155.80.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 37.3.155.80.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 195.231.3.208 | attackbots | May 25 09:03:34 relay postfix/smtpd\[10626\]: warning: unknown\[195.231.3.208\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 25 09:04:03 relay postfix/smtpd\[9456\]: warning: unknown\[195.231.3.208\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 25 09:05:16 relay postfix/smtpd\[9456\]: warning: unknown\[195.231.3.208\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 25 09:15:32 relay postfix/smtpd\[9456\]: warning: unknown\[195.231.3.208\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 25 09:16:11 relay postfix/smtpd\[12294\]: warning: unknown\[195.231.3.208\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-05-25 15:32:20 |
| 54.37.71.203 | attackbotsspam | May 25 08:34:31 cdc sshd[32742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.71.203 user=root May 25 08:34:33 cdc sshd[32742]: Failed password for invalid user root from 54.37.71.203 port 41912 ssh2 |
2020-05-25 15:37:16 |
| 1.29.148.252 | attack | IP reached maximum auth failures |
2020-05-25 16:05:08 |
| 65.49.20.122 | attackspam | nft/Honeypot/22/73e86 |
2020-05-25 15:40:35 |
| 123.7.63.49 | attackbots | prod6 ... |
2020-05-25 15:49:53 |
| 103.98.176.248 | attack | (sshd) Failed SSH login from 103.98.176.248 (ID/Indonesia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 25 09:38:53 s1 sshd[22600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.98.176.248 user=root May 25 09:38:55 s1 sshd[22600]: Failed password for root from 103.98.176.248 port 55146 ssh2 May 25 09:50:23 s1 sshd[22963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.98.176.248 user=root May 25 09:50:26 s1 sshd[22963]: Failed password for root from 103.98.176.248 port 48452 ssh2 May 25 09:54:46 s1 sshd[23084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.98.176.248 user=root |
2020-05-25 15:30:38 |
| 167.114.55.91 | attackbots | $f2bV_matches |
2020-05-25 15:28:04 |
| 221.203.41.74 | attack | May 25 09:44:20 gw1 sshd[18865]: Failed password for root from 221.203.41.74 port 40783 ssh2 ... |
2020-05-25 15:31:42 |
| 164.132.108.195 | attackbots | fail2ban -- 164.132.108.195 ... |
2020-05-25 15:45:29 |
| 212.47.238.68 | attackbotsspam | 212.47.238.68 - - \[25/May/2020:07:55:57 +0200\] "POST /wp-login.php HTTP/1.0" 200 7318 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 212.47.238.68 - - \[25/May/2020:07:55:59 +0200\] "POST /wp-login.php HTTP/1.0" 200 7318 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 212.47.238.68 - - \[25/May/2020:07:55:59 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 802 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-05-25 16:01:56 |
| 176.31.31.185 | attackbots | May 25 08:39:20 ns382633 sshd\[22107\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.31.185 user=root May 25 08:39:22 ns382633 sshd\[22107\]: Failed password for root from 176.31.31.185 port 43493 ssh2 May 25 08:41:41 ns382633 sshd\[22680\]: Invalid user takahashi from 176.31.31.185 port 35769 May 25 08:41:41 ns382633 sshd\[22680\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.31.185 May 25 08:41:43 ns382633 sshd\[22680\]: Failed password for invalid user takahashi from 176.31.31.185 port 35769 ssh2 |
2020-05-25 15:44:54 |
| 106.13.228.33 | attack | Invalid user kpu from 106.13.228.33 port 49324 |
2020-05-25 16:07:15 |
| 210.56.23.100 | attackspam | May 25 09:53:24 gw1 sshd[19333]: Failed password for root from 210.56.23.100 port 35256 ssh2 ... |
2020-05-25 15:45:54 |
| 111.229.125.124 | attackspambots | May 25 06:22:34 ns381471 sshd[31360]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.125.124 May 25 06:22:36 ns381471 sshd[31360]: Failed password for invalid user michel from 111.229.125.124 port 53344 ssh2 |
2020-05-25 15:41:40 |
| 106.13.175.211 | attack | May 24 21:35:31 web1 sshd\[6648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.175.211 user=root May 24 21:35:33 web1 sshd\[6648\]: Failed password for root from 106.13.175.211 port 60846 ssh2 May 24 21:38:22 web1 sshd\[6968\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.175.211 user=root May 24 21:38:24 web1 sshd\[6968\]: Failed password for root from 106.13.175.211 port 56960 ssh2 May 24 21:41:01 web1 sshd\[7288\]: Invalid user test from 106.13.175.211 May 24 21:41:01 web1 sshd\[7288\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.175.211 |
2020-05-25 16:09:23 |