City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 92.224.76.196
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39461
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;92.224.76.196. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021301 1800 900 604800 86400
;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 06:48:50 CST 2025
;; MSG SIZE rcvd: 106196.76.224.92.in-addr.arpa domain name pointer dynamic-092-224-076-196.92.224.pool.telefonica.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
196.76.224.92.in-addr.arpa name = dynamic-092-224-076-196.92.224.pool.telefonica.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 184.105.139.68 | attackspam | 1561182121 - 06/22/2019 12:42:01 Host: scan-02.shadowserver.org/184.105.139.68 Port: 21 TCP Blocked ... |
2019-06-22 18:55:43 |
| 104.237.253.203 | attack | NAME : DEDFIBERCO CIDR : 104.237.224.0/19 | STATUS : 200 ROBOT {Looking for resource vulnerabilities} DDoS Attack USA - Delaware - block certain countries :) IP: 104.237.253.203 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-06-22 18:48:55 |
| 209.95.51.11 | attackbotsspam | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.95.51.11 user=root Failed password for root from 209.95.51.11 port 45320 ssh2 Failed password for root from 209.95.51.11 port 45320 ssh2 Failed password for root from 209.95.51.11 port 45320 ssh2 Failed password for root from 209.95.51.11 port 45320 ssh2 |
2019-06-22 19:12:50 |
| 179.97.24.234 | attackbots | DATE:2019-06-22_06:24:53, IP:179.97.24.234, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2019-06-22 18:48:29 |
| 92.242.198.250 | attackspambots | Jun 22 06:20:42 mxgate1 postfix/postscreen[10273]: CONNECT from [92.242.198.250]:60679 to [176.31.12.44]:25 Jun 22 06:20:42 mxgate1 postfix/dnsblog[10315]: addr 92.242.198.250 listed by domain cbl.abuseat.org as 127.0.0.2 Jun 22 06:20:42 mxgate1 postfix/dnsblog[10311]: addr 92.242.198.250 listed by domain zen.spamhaus.org as 127.0.0.3 Jun 22 06:20:42 mxgate1 postfix/dnsblog[10311]: addr 92.242.198.250 listed by domain zen.spamhaus.org as 127.0.0.4 Jun 22 06:20:42 mxgate1 postfix/dnsblog[10312]: addr 92.242.198.250 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Jun 22 06:20:42 mxgate1 postfix/dnsblog[10314]: addr 92.242.198.250 listed by domain bl.spamcop.net as 127.0.0.2 Jun 22 06:20:42 mxgate1 postfix/dnsblog[10313]: addr 92.242.198.250 listed by domain b.barracudacentral.org as 127.0.0.2 Jun 22 06:20:43 mxgate1 postfix/postscreen[10273]: PREGREET 18 after 0.99 from [92.242.198.250]:60679: HELO ijytkek.com Jun 22 06:20:43 mxgate1 postfix/postscreen[10273]: DNSBL ra........ ------------------------------- |
2019-06-22 18:44:41 |
| 52.160.192.165 | attack | Jun 22 00:24:06 localhost kernel: [12421639.493846] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=52.160.192.165 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x00 TTL=244 ID=13517 PROTO=UDP SPT=30219 DPT=111 LEN=48 Jun 22 00:24:06 localhost kernel: [12421639.493875] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=52.160.192.165 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x00 TTL=244 ID=13517 PROTO=UDP SPT=30219 DPT=111 LEN=48 Jun 22 00:24:18 localhost kernel: [12421652.071158] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=52.160.192.165 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x00 TTL=244 ID=23253 PROTO=UDP SPT=30219 DPT=111 LEN=48 Jun 22 00:24:18 localhost kernel: [12421652.071182] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=52.160.192.165 DST=[mungedIP2] LEN=68 TOS=0x00 PREC=0x00 TTL=244 ID=23253 PROTO=UDP SPT=30219 DPT=111 LEN=48 |
2019-06-22 18:55:20 |
| 191.53.221.81 | attackbots | SMTP-sasl brute force ... |
2019-06-22 18:35:51 |
| 94.102.51.78 | attack | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.102.51.78 user=root Failed password for root from 94.102.51.78 port 39414 ssh2 Failed password for root from 94.102.51.78 port 39414 ssh2 Failed password for root from 94.102.51.78 port 39414 ssh2 Failed password for root from 94.102.51.78 port 39414 ssh2 |
2019-06-22 18:46:13 |
| 62.173.151.168 | attackbotsspam | *Port Scan* detected from 62.173.151.168 (RU/Russia/www.jhh.ij). 4 hits in the last 90 seconds |
2019-06-22 18:42:20 |
| 116.89.53.66 | attackspam | Automatic report - Web App Attack |
2019-06-22 18:29:59 |
| 86.125.178.205 | attackspambots | Jun 18 07:57:22 our-server-hostname sshd[22234]: reveeclipse mapping checking getaddrinfo for 86-125-178-205.rdsnet.ro [86.125.178.205] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 18 07:57:22 our-server-hostname sshd[22234]: Invalid user bibby from 86.125.178.205 Jun 18 07:57:22 our-server-hostname sshd[22234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.125.178.205 Jun 18 07:57:24 our-server-hostname sshd[22234]: Failed password for invalid user bibby from 86.125.178.205 port 51340 ssh2 Jun 18 08:27:49 our-server-hostname sshd[1267]: reveeclipse mapping checking getaddrinfo for 86-125-178-205.rdsnet.ro [86.125.178.205] failed - POSSIBLE BREAK-IN ATTEMPT! Jun 18 08:27:49 our-server-hostname sshd[1267]: Invalid user spam from 86.125.178.205 Jun 18 08:27:49 our-server-hostname sshd[1267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.125.178.205 Jun 18 08:27:50 our-server-hostname ss........ ------------------------------- |
2019-06-22 18:46:44 |
| 218.80.251.10 | attack | Jun 22 06:24:56 mail kernel: \[223041.558114\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=218.80.251.10 DST=91.205.173.180 LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=18736 DF PROTO=TCP SPT=63894 DPT=65353 WINDOW=8192 RES=0x00 SYN URGP=0 Jun 22 06:24:59 mail kernel: \[223044.608408\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=218.80.251.10 DST=91.205.173.180 LEN=52 TOS=0x00 PREC=0x00 TTL=52 ID=23348 DF PROTO=TCP SPT=63894 DPT=65353 WINDOW=8192 RES=0x00 SYN URGP=0 Jun 22 06:25:05 mail kernel: \[223050.621653\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=218.80.251.10 DST=91.205.173.180 LEN=48 TOS=0x00 PREC=0x00 TTL=52 ID=32178 DF PROTO=TCP SPT=63894 DPT=65353 WINDOW=65535 RES=0x00 SYN URGP=0 |
2019-06-22 18:43:34 |
| 91.61.38.231 | attackspambots | SSH login attempts brute force. |
2019-06-22 18:34:44 |
| 58.242.83.38 | attack | Jun 22 04:26:20 **** sshd[22561]: User root from 58.242.83.38 not allowed because not listed in AllowUsers |
2019-06-22 18:32:39 |
| 154.86.6.254 | attack | *Port Scan* detected from 154.86.6.254 (HK/Hong Kong/-). 4 hits in the last 291 seconds |
2019-06-22 18:44:22 |