City: unknown
Region: unknown
Country: Germany
Internet Service Provider: FNorden e.V. - Freifunk Hannover
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspambots | Apr 5 14:42:59 mail postfix/smtpd[71779]: lost connection after STARTTLS from leintor.e.ffh.zone[81.3.6.94] |
2020-04-05 23:54:37 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 81.3.6.162 | attackbots | TCP port : 23 |
2020-10-05 02:30:47 |
| 81.3.6.166 | attack | TCP port : 23 |
2020-10-05 02:03:40 |
| 81.3.6.164 | attackspam | TCP port : 23 |
2020-10-05 01:12:11 |
| 81.3.6.162 | attackspambots | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-10-04 18:13:53 |
| 81.3.6.166 | attack | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-10-04 17:46:54 |
| 81.3.6.164 | attack |
|
2020-10-04 16:54:12 |
| 81.3.6.162 | attack | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-09-18 19:36:29 |
| 81.3.6.164 | attackbots | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-09-18 19:34:52 |
| 81.3.6.164 | attackspambots | *Port Scan* detected from 81.3.6.164 (DE/Germany/Lower Saxony/Hanover (Linden-Limmer)/w3.tutanota.de). 4 hits in the last 256 seconds |
2020-08-26 12:19:41 |
| 81.3.6.170 | attack | Scan |
2020-08-22 17:02:27 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.3.6.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34624
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.3.6.94. IN A
;; AUTHORITY SECTION:
. 444 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020040500 1800 900 604800 86400
;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 05 23:54:30 CST 2020
;; MSG SIZE rcvd: 113
94.6.3.81.in-addr.arpa domain name pointer leintor.e.ffh.zone.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
94.6.3.81.in-addr.arpa name = leintor.e.ffh.zone.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 191.53.117.24 | attackspam | Autoban 191.53.117.24 AUTH/CONNECT |
2019-07-22 04:37:18 |
| 191.53.223.100 | attackspam | Autoban 191.53.223.100 AUTH/CONNECT |
2019-07-22 04:09:11 |
| 81.205.159.8 | attack | Sun, 21 Jul 2019 18:28:34 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-22 04:39:11 |
| 104.168.6.40 | attackbots | Many RDP login attempts detected by IDS script |
2019-07-22 04:10:41 |
| 95.47.172.54 | attack | Sun, 21 Jul 2019 18:28:47 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-22 03:57:39 |
| 191.53.199.59 | attack | Autoban 191.53.199.59 AUTH/CONNECT |
2019-07-22 04:18:26 |
| 191.53.195.161 | attack | Autoban 191.53.195.161 AUTH/CONNECT |
2019-07-22 04:30:28 |
| 191.53.199.179 | attackspam | Autoban 191.53.199.179 AUTH/CONNECT |
2019-07-22 04:17:58 |
| 191.53.223.175 | attackspambots | Autoban 191.53.223.175 AUTH/CONNECT |
2019-07-22 04:04:55 |
| 103.61.37.165 | attackspam | Jul 21 12:22:15 newdogma sshd[25398]: Invalid user aj from 103.61.37.165 port 59589 Jul 21 12:22:16 newdogma sshd[25398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.61.37.165 Jul 21 12:22:18 newdogma sshd[25398]: Failed password for invalid user aj from 103.61.37.165 port 59589 ssh2 Jul 21 12:22:18 newdogma sshd[25398]: Received disconnect from 103.61.37.165 port 59589:11: Bye Bye [preauth] Jul 21 12:22:18 newdogma sshd[25398]: Disconnected from 103.61.37.165 port 59589 [preauth] Jul 21 12:55:33 newdogma sshd[25640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.61.37.165 user=proxy Jul 21 12:55:35 newdogma sshd[25640]: Failed password for proxy from 103.61.37.165 port 56245 ssh2 Jul 21 12:55:35 newdogma sshd[25640]: Received disconnect from 103.61.37.165 port 56245:11: Bye Bye [preauth] Jul 21 12:55:35 newdogma sshd[25640]: Disconnected from 103.61.37.165 port 56245 [preauth........ ------------------------------- |
2019-07-22 04:42:06 |
| 117.193.75.98 | attackspam | Sun, 21 Jul 2019 18:28:41 +0000 likely compromised host or open proxy. ddos rate spidering |
2019-07-22 04:17:05 |
| 191.53.195.95 | attackspambots | Autoban 191.53.195.95 AUTH/CONNECT |
2019-07-22 04:27:37 |
| 107.160.241.182 | attackbotsspam | 2019-07-21T20:28:38.9636971240 sshd\[3237\]: Invalid user oracle from 107.160.241.182 port 51244 2019-07-21T20:28:38.9686611240 sshd\[3237\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.160.241.182 2019-07-21T20:28:41.0843221240 sshd\[3237\]: Failed password for invalid user oracle from 107.160.241.182 port 51244 ssh2 ... |
2019-07-22 04:12:59 |
| 157.230.91.45 | attackbotsspam | Jul 21 21:12:19 debian sshd\[18468\]: Invalid user nexus from 157.230.91.45 port 55662 Jul 21 21:12:19 debian sshd\[18468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.91.45 ... |
2019-07-22 04:19:02 |
| 191.37.35.146 | attack | Autoban 191.37.35.146 AUTH/CONNECT |
2019-07-22 04:41:32 |