City: unknown
Region: unknown
Country: Austria
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.13.41.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39716
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;85.13.41.3. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 00:45:37 CST 2025
;; MSG SIZE rcvd: 1033.41.13.85.in-addr.arpa domain name pointer at-lnz-led-voice-gw-01.jm-data.at.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
3.41.13.85.in-addr.arpa name = at-lnz-led-voice-gw-01.jm-data.at.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 165.227.101.226 | attackspam | SSH Invalid Login |
2020-09-11 07:57:41 |
| 51.158.118.70 | attack | 2020-09-10 19:24:24 wonderland sshd[14720]: Disconnected from invalid user root 51.158.118.70 port 52500 [preauth] |
2020-09-11 07:26:49 |
| 122.248.33.1 | attack | Sep 11 04:36:06 itv-usvr-02 sshd[29850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.248.33.1 user=root Sep 11 04:40:17 itv-usvr-02 sshd[30082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.248.33.1 user=root Sep 11 04:44:23 itv-usvr-02 sshd[30203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.248.33.1 user=root |
2020-09-11 07:32:23 |
| 5.188.87.58 | attackspam | Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-09-10T23:14:08Z |
2020-09-11 07:30:45 |
| 125.142.190.126 | attack | Lines containing failures of 125.142.190.126 Sep 10 19:24:46 mellenthin sshd[13175]: Invalid user admin from 125.142.190.126 port 40642 Sep 10 19:24:46 mellenthin sshd[13175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.142.190.126 Sep 10 19:24:48 mellenthin sshd[13175]: Failed password for invalid user admin from 125.142.190.126 port 40642 ssh2 Sep 10 19:24:48 mellenthin sshd[13175]: Connection closed by invalid user admin 125.142.190.126 port 40642 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=125.142.190.126 |
2020-09-11 07:28:50 |
| 176.148.130.19 | attackbotsspam | Sep 10 22:01:06 ssh2 sshd[18387]: User root from rqp06-h01-176-148-130-19.dsl.sta.abo.bbox.fr not allowed because not listed in AllowUsers Sep 10 22:01:06 ssh2 sshd[18387]: Failed password for invalid user root from 176.148.130.19 port 47558 ssh2 Sep 10 22:01:07 ssh2 sshd[18387]: Connection closed by invalid user root 176.148.130.19 port 47558 [preauth] ... |
2020-09-11 07:49:47 |
| 178.174.148.58 | attackspam | Sep 10 20:43:46 vm0 sshd[31022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.174.148.58 ... |
2020-09-11 07:25:39 |
| 181.46.164.9 | attack | (cxs) cxs mod_security triggered by 181.46.164.9 (AR/Argentina/cpe-181-46-164-9.telecentro-reversos.com.ar): 1 in the last 3600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_CXS; Logs: [Thu Sep 10 18:55:20.401814 2020] [:error] [pid 3943566:tid 47466712020736] [client 181.46.164.9:17461] [client 181.46.164.9] ModSecurity: Access denied with code 403 (phase 2). File "/tmp/20200910-185518-X1padp1cg7rkBOBCfBdcDgAAAA0-file-JRUfUL" rejected by the approver script "/etc/cxs/cxscgi.sh": 0 [file "/etc/apache2/conf.d/modsec_vendor_configs/configserver/00_configserver.conf"] [line "7"] [id "1010101"] [msg "ConfigServer Exploit Scanner (cxs) triggered"] [severity "CRITICAL"] [hostname "gastro-ptuj.si"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "X1padp1cg7rkBOBCfBdcDgAAAA0"], referer: http://gastro-ptuj.si/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php |
2020-09-11 07:48:40 |
| 14.117.238.146 | attackbots | SP-Scan 52443:8080 detected 2020.09.10 22:45:51 blocked until 2020.10.30 14:48:38 |
2020-09-11 07:39:45 |
| 127.0.0.1 | attack | Test Connectivity |
2020-09-11 07:40:15 |
| 36.250.229.115 | attackspambots | Sep 11 02:57:19 dhoomketu sshd[3000146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.250.229.115 Sep 11 02:57:19 dhoomketu sshd[3000146]: Invalid user git1 from 36.250.229.115 port 59550 Sep 11 02:57:21 dhoomketu sshd[3000146]: Failed password for invalid user git1 from 36.250.229.115 port 59550 ssh2 Sep 11 02:59:10 dhoomketu sshd[3000178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.250.229.115 user=root Sep 11 02:59:11 dhoomketu sshd[3000178]: Failed password for root from 36.250.229.115 port 60118 ssh2 ... |
2020-09-11 07:39:15 |
| 217.55.75.111 | attackbots | DATE:2020-09-10 18:54:30, IP:217.55.75.111, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq) |
2020-09-11 07:30:17 |
| 185.220.101.134 | attackbots | 2020-09-10 17:32:18.291418-0500 localhost sshd[40294]: Failed password for root from 185.220.101.134 port 9494 ssh2 |
2020-09-11 07:43:56 |
| 213.102.85.36 | attack | Sep 10 18:55:51 andromeda sshd\[5788\]: Invalid user cablecom from 213.102.85.36 port 58489 Sep 10 18:55:53 andromeda sshd\[5788\]: Failed password for invalid user cablecom from 213.102.85.36 port 58489 ssh2 Sep 10 18:55:56 andromeda sshd\[5829\]: Failed password for root from 213.102.85.36 port 58198 ssh2 |
2020-09-11 07:24:10 |
| 138.197.180.29 | attack | Sep 10 12:55:34 mail sshd\[63192\]: Invalid user admin from 138.197.180.29 Sep 10 12:55:34 mail sshd\[63192\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.180.29 ... |
2020-09-11 07:37:03 |