City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 91.64.166.228
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25499
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;91.64.166.228. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021701 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 04:53:56 CST 2025
;; MSG SIZE rcvd: 106228.166.64.91.in-addr.arpa domain name pointer ip5b40a6e4.dynamic.kabel-deutschland.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
228.166.64.91.in-addr.arpa name = ip5b40a6e4.dynamic.kabel-deutschland.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.21.217.122 | attackspam | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2020-05-12 08:18:40 |
| 200.41.86.59 | attack | 2020-05-12T01:23:46.611272sd-86998 sshd[24436]: Invalid user deploy from 200.41.86.59 port 33706 2020-05-12T01:23:46.616964sd-86998 sshd[24436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.41.86.59 2020-05-12T01:23:46.611272sd-86998 sshd[24436]: Invalid user deploy from 200.41.86.59 port 33706 2020-05-12T01:23:48.879060sd-86998 sshd[24436]: Failed password for invalid user deploy from 200.41.86.59 port 33706 ssh2 2020-05-12T01:27:50.258850sd-86998 sshd[24972]: Invalid user ubuntu from 200.41.86.59 port 42850 ... |
2020-05-12 07:50:55 |
| 162.243.141.93 | attack | 389/tcp 5800/tcp 8140/tcp... [2020-05-01/11]7pkt,7pt.(tcp) |
2020-05-12 08:23:49 |
| 185.143.223.244 | attackspambots | Multiport scan 22 ports : 2289(x3) 3383(x4) 3384(x5) 3385(x6) 3386(x6) 3387(x6) 3388(x19) 3390(x27) 3391(x21) 3392(x18) 3393(x19) 3394(x18) 3395(x7) 3396(x7) 3397(x4) 3398(x4) 3399(x3) 4489(x2) 5589(x2) 6689(x2) 7789(x3) 8889(x3) |
2020-05-12 07:53:27 |
| 187.188.156.72 | attackspambots | 1433/tcp 445/tcp... [2020-03-27/05-10]6pkt,2pt.(tcp) |
2020-05-12 07:52:46 |
| 51.38.134.150 | attack | May 5 22:14:40 localhost sshd[126570]: Invalid user fsd from 51.38.134.150 port 60626 May 5 22:14:40 localhost sshd[126570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.134.150 May 5 22:14:40 localhost sshd[126570]: Invalid user fsd from 51.38.134.150 port 60626 May 5 22:14:42 localhost sshd[126570]: Failed password for invalid user fsd from 51.38.134.150 port 60626 ssh2 May 5 22:28:53 localhost sshd[130112]: Invalid user administrador from 51.38.134.150 port 40212 May 5 22:28:53 localhost sshd[130112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.134.150 May 5 22:28:53 localhost sshd[130112]: Invalid user administrador from 51.38.134.150 port 40212 May 5 22:28:55 localhost sshd[130112]: Failed password for invalid user administrador from 51.38.134.150 port 40212 ssh2 May 5 22:33:13 localhost sshd[131288]: Invalid user rapa from 51.38.134.150 port 45760 ........ ------------------------------------- |
2020-05-12 07:45:59 |
| 91.187.123.233 | attack | 1433/tcp 445/tcp... [2020-03-15/05-11]7pkt,2pt.(tcp) |
2020-05-12 08:35:18 |
| 89.248.168.217 | attackbots | 89.248.168.217 was recorded 10 times by 7 hosts attempting to connect to the following ports: 1081,1101. Incident counter (4h, 24h, all-time): 10, 62, 20272 |
2020-05-12 08:36:55 |
| 149.28.192.197 | attackspambots | ET SCAN Sipvicious Scan - port: 5060 proto: UDP cat: Attempted Information Leak |
2020-05-12 08:24:24 |
| 104.206.128.34 | attackspambots | GPL SNMP public access udp - port: 161 proto: UDP cat: Attempted Information Leak |
2020-05-12 08:27:31 |
| 103.253.146.142 | attack | $f2bV_matches |
2020-05-12 08:28:22 |
| 104.140.188.58 | attackbots | ET SCAN Suspicious inbound to PostgreSQL port 5432 - port: 5432 proto: TCP cat: Potentially Bad Traffic |
2020-05-12 08:27:54 |
| 104.206.128.50 | attackbotsspam | May 12 01:23:04 debian-2gb-nbg1-2 kernel: \[11498249.144012\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.206.128.50 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=54321 PROTO=TCP SPT=54713 DPT=1543 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-05-12 08:27:03 |
| 95.38.61.185 | attackspambots | 1433/tcp 445/tcp... [2020-03-15/05-11]10pkt,2pt.(tcp) |
2020-05-12 08:29:08 |
| 91.196.222.194 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 83 - port: 11211 proto: TCP cat: Misc Attack |
2020-05-12 08:34:59 |