City: Neumarkt in der Oberpfalz
Region: Bavaria
Country: Germany
Internet Service Provider: Telekom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 93.229.61.234
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46606
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;93.229.61.234. IN A
;; AUTHORITY SECTION:
. 175 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020041801 1800 900 604800 86400
;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 19 06:10:30 CST 2020
;; MSG SIZE rcvd: 117234.61.229.93.in-addr.arpa domain name pointer p5DE53DEA.dip0.t-ipconnect.de.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
234.61.229.93.in-addr.arpa name = p5DE53DEA.dip0.t-ipconnect.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 80.211.246.150 | attackbotsspam | Sep 16 01:09:54 mail kernel: [2559317.528528] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=80.211.246.150 DST=77.73.69.240 LEN=435 TOS=0x00 PREC=0x00 TTL=57 ID=30840 DF PROTO=UDP SPT=5108 DPT=1382 LEN=415 Sep 16 01:09:54 mail kernel: [2559317.528635] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=80.211.246.150 DST=77.73.69.240 LEN=435 TOS=0x00 PREC=0x00 TTL=57 ID=30843 DF PROTO=UDP SPT=5108 DPT=1385 LEN=415 Sep 16 01:09:54 mail kernel: [2559317.528649] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=80.211.246.150 DST=77.73.69.240 LEN=435 TOS=0x00 PREC=0x00 TTL=57 ID=30841 DF PROTO=UDP SPT=5108 DPT=1383 LEN=415 Sep 16 01:09:54 mail kernel: [2559317.528688] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=80.211.246.150 DST=77.73.69.240 LEN=433 TOS=0x00 PREC=0x00 TTL=57 ID=30846 DF PROTO=UDP SPT=5108 DPT=1388 LEN=413 Sep 16 01:09:54 mail kernel: [2559317.528701] [UFW BLOCK] IN=eth0 OUT= MAC=00:16 |
2019-09-16 16:33:14 |
| 193.169.255.132 | attack | 2019-09-16T08:14:26.227364beta postfix/smtpd[1203]: warning: unknown[193.169.255.132]: SASL LOGIN authentication failed: authentication failure 2019-09-16T08:22:33.018772beta postfix/smtpd[1289]: warning: unknown[193.169.255.132]: SASL LOGIN authentication failed: authentication failure 2019-09-16T08:30:42.607751beta postfix/smtpd[1289]: warning: unknown[193.169.255.132]: SASL LOGIN authentication failed: authentication failure ... |
2019-09-16 15:57:29 |
| 49.112.236.82 | attack | " " |
2019-09-16 16:29:51 |
| 92.50.249.92 | attackbotsspam | F2B jail: sshd. Time: 2019-09-16 10:29:54, Reported by: VKReport |
2019-09-16 16:37:42 |
| 180.97.220.246 | attackbots | Scanning random ports - tries to find possible vulnerable services |
2019-09-16 16:20:25 |
| 164.68.118.21 | attackspam | Sep 16 03:57:23 plex sshd[10209]: Invalid user antoine from 164.68.118.21 port 37150 |
2019-09-16 15:55:59 |
| 190.190.40.203 | attack | Sep 15 22:04:42 hiderm sshd\[4343\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.190.40.203 user=root Sep 15 22:04:44 hiderm sshd\[4343\]: Failed password for root from 190.190.40.203 port 41970 ssh2 Sep 15 22:09:52 hiderm sshd\[4934\]: Invalid user mask from 190.190.40.203 Sep 15 22:09:52 hiderm sshd\[4934\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.190.40.203 Sep 15 22:09:54 hiderm sshd\[4934\]: Failed password for invalid user mask from 190.190.40.203 port 55854 ssh2 |
2019-09-16 16:11:22 |
| 49.207.180.197 | attackbotsspam | Sep 4 05:34:51 vtv3 sshd\[28630\]: Invalid user nivaldo from 49.207.180.197 port 31063 Sep 4 05:34:51 vtv3 sshd\[28630\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.180.197 Sep 4 05:34:52 vtv3 sshd\[28630\]: Failed password for invalid user nivaldo from 49.207.180.197 port 31063 ssh2 Sep 4 05:39:20 vtv3 sshd\[31097\]: Invalid user ts3server from 49.207.180.197 port 51259 Sep 4 05:39:20 vtv3 sshd\[31097\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.180.197 Sep 4 05:59:05 vtv3 sshd\[8715\]: Invalid user wu from 49.207.180.197 port 63341 Sep 4 05:59:05 vtv3 sshd\[8715\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.180.197 Sep 4 05:59:06 vtv3 sshd\[8715\]: Failed password for invalid user wu from 49.207.180.197 port 63341 ssh2 Sep 4 06:03:37 vtv3 sshd\[11115\]: Invalid user jia from 49.207.180.197 port 3702 Sep 4 06:03:37 vtv3 sshd\[11115\]: |
2019-09-16 15:48:08 |
| 201.238.239.151 | attack | Sep 15 14:40:39 hcbb sshd\[13639\]: Invalid user devahuti from 201.238.239.151 Sep 15 14:40:39 hcbb sshd\[13639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.238.239.151 Sep 15 14:40:41 hcbb sshd\[13639\]: Failed password for invalid user devahuti from 201.238.239.151 port 48908 ssh2 Sep 15 14:46:00 hcbb sshd\[14092\]: Invalid user cadman from 201.238.239.151 Sep 15 14:46:00 hcbb sshd\[14092\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.238.239.151 |
2019-09-16 16:07:34 |
| 106.13.59.131 | attackspam | ssh failed login |
2019-09-16 15:54:57 |
| 123.31.47.20 | attack | web-1 [ssh] SSH Attack |
2019-09-16 15:52:31 |
| 111.67.99.214 | attackbots | 10 attempts against mh-mag-customerspam-ban on hill.magehost.pro |
2019-09-16 16:12:39 |
| 170.130.187.22 | attackbotsspam | 3389BruteforceFW21 |
2019-09-16 16:31:11 |
| 183.111.125.172 | attackbotsspam | Automatic report - Banned IP Access |
2019-09-16 16:09:59 |
| 192.99.238.156 | attackbotsspam | Sep 16 04:01:30 TORMINT sshd\[15993\]: Invalid user ink from 192.99.238.156 Sep 16 04:01:30 TORMINT sshd\[15993\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.238.156 Sep 16 04:01:33 TORMINT sshd\[15993\]: Failed password for invalid user ink from 192.99.238.156 port 42950 ssh2 ... |
2019-09-16 16:17:10 |