City: Spremberg
Region: Brandenburg
Country: Germany
Internet Service Provider: Telekom
Hostname: unknown
Organization: Deutsche Telekom AG
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 91.45.36.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7813
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;91.45.36.138. IN A
;; AUTHORITY SECTION:
. 2786 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019083101 1800 900 604800 86400
;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Sep 01 00:51:22 CST 2019
;; MSG SIZE rcvd: 116
138.36.45.91.in-addr.arpa domain name pointer p5B2D248A.dip0.t-ipconnect.de.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
138.36.45.91.in-addr.arpa name = p5B2D248A.dip0.t-ipconnect.de.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.131.1.137 | attackspam | 2019-10-22T20:41:45.127098abusebot-4.cloudsearch.cf sshd\[27131\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.1.137 user=root |
2019-10-23 05:07:31 |
| 45.136.109.215 | attackspam | Oct 22 22:49:46 h2177944 kernel: \[4653249.898953\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.215 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=1856 PROTO=TCP SPT=43015 DPT=4665 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 22:50:48 h2177944 kernel: \[4653312.055361\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.215 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=57749 PROTO=TCP SPT=43015 DPT=1051 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 22:51:03 h2177944 kernel: \[4653326.648559\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.215 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=59087 PROTO=TCP SPT=43015 DPT=1330 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 22:51:15 h2177944 kernel: \[4653339.276414\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.215 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=17697 PROTO=TCP SPT=43015 DPT=3292 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 22:52:57 h2177944 kernel: \[4653440.690317\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.215 DST=85.214.1 |
2019-10-23 04:53:05 |
| 106.13.110.74 | attackbots | Oct 22 22:35:47 root sshd[21524]: Failed password for root from 106.13.110.74 port 35212 ssh2 Oct 22 22:56:38 root sshd[21749]: Failed password for root from 106.13.110.74 port 40868 ssh2 ... |
2019-10-23 05:09:36 |
| 5.196.75.47 | attackbotsspam | SSH Bruteforce attack |
2019-10-23 04:55:43 |
| 45.136.109.249 | attack | Oct 22 21:41:15 h2177944 kernel: \[4649139.825708\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.249 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=45321 PROTO=TCP SPT=55312 DPT=5528 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 21:47:32 h2177944 kernel: \[4649516.776744\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.249 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=57623 PROTO=TCP SPT=55312 DPT=4992 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 22:09:45 h2177944 kernel: \[4650849.819298\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.249 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=27951 PROTO=TCP SPT=55312 DPT=4982 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 22:11:13 h2177944 kernel: \[4650937.858393\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.249 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=64394 PROTO=TCP SPT=55312 DPT=5165 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 22:21:22 h2177944 kernel: \[4651546.839401\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.249 DST=85.214. |
2019-10-23 04:54:25 |
| 142.93.218.11 | attackspambots | Oct 22 23:08:07 dedicated sshd[28191]: Failed password for invalid user teste from 142.93.218.11 port 58526 ssh2 Oct 22 23:12:46 dedicated sshd[28758]: Invalid user seeb from 142.93.218.11 port 39544 Oct 22 23:12:46 dedicated sshd[28758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.218.11 Oct 22 23:12:46 dedicated sshd[28758]: Invalid user seeb from 142.93.218.11 port 39544 Oct 22 23:12:48 dedicated sshd[28758]: Failed password for invalid user seeb from 142.93.218.11 port 39544 ssh2 |
2019-10-23 05:14:08 |
| 129.211.27.10 | attack | Oct 22 20:47:34 venus sshd\[25053\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.27.10 user=root Oct 22 20:47:36 venus sshd\[25053\]: Failed password for root from 129.211.27.10 port 43880 ssh2 Oct 22 20:51:53 venus sshd\[25082\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.27.10 user=root ... |
2019-10-23 05:09:05 |
| 109.160.108.147 | attackspambots | 60001/tcp 9200/tcp [2019-10-14/22]2pkt |
2019-10-23 04:51:00 |
| 81.22.45.116 | attack | Oct 22 22:38:28 mc1 kernel: \[3063057.325058\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.116 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=34336 PROTO=TCP SPT=56757 DPT=20412 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 22:39:45 mc1 kernel: \[3063134.472717\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.116 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=56617 PROTO=TCP SPT=56757 DPT=20228 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 22:39:46 mc1 kernel: \[3063135.436709\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.116 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=14926 PROTO=TCP SPT=56757 DPT=20402 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-23 04:46:06 |
| 168.205.36.29 | attack | 445/tcp 445/tcp [2019-10-04/22]2pkt |
2019-10-23 04:56:05 |
| 118.24.40.130 | attackspambots | 2019-10-22T20:45:22.977130abusebot-5.cloudsearch.cf sshd\[25558\]: Invalid user ts3bot from 118.24.40.130 port 58956 |
2019-10-23 04:51:23 |
| 111.13.139.225 | attack | Oct 22 20:01:32 game-panel sshd[1782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.13.139.225 Oct 22 20:01:34 game-panel sshd[1782]: Failed password for invalid user mm from 111.13.139.225 port 56342 ssh2 Oct 22 20:10:57 game-panel sshd[2200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.13.139.225 |
2019-10-23 05:07:59 |
| 211.251.237.70 | attack | Oct 22 22:15:19 vpn01 sshd[20892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.251.237.70 Oct 22 22:15:21 vpn01 sshd[20892]: Failed password for invalid user zimbra from 211.251.237.70 port 51358 ssh2 ... |
2019-10-23 05:08:42 |
| 194.37.92.48 | attack | Oct 22 22:36:57 dedicated sshd[24196]: Invalid user admin from 194.37.92.48 port 37937 |
2019-10-23 04:39:27 |
| 62.234.85.224 | attackspambots | Oct 22 22:23:33 OPSO sshd\[30964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.85.224 user=root Oct 22 22:23:34 OPSO sshd\[30964\]: Failed password for root from 62.234.85.224 port 35172 ssh2 Oct 22 22:27:38 OPSO sshd\[31597\]: Invalid user beeidigung from 62.234.85.224 port 43280 Oct 22 22:27:38 OPSO sshd\[31597\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.85.224 Oct 22 22:27:40 OPSO sshd\[31597\]: Failed password for invalid user beeidigung from 62.234.85.224 port 43280 ssh2 |
2019-10-23 04:51:56 |