City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 93.237.78.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33501
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;93.237.78.141. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 23:33:32 CST 2025
;; MSG SIZE rcvd: 106
141.78.237.93.in-addr.arpa domain name pointer p5ded4e8d.dip0.t-ipconnect.de.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
141.78.237.93.in-addr.arpa name = p5ded4e8d.dip0.t-ipconnect.de.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 129.146.110.88 | attack | [TueJul0714:02:34.0733572020][:error][pid3015:tid47247920740096][client129.146.110.88:52096][client129.146.110.88]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"218"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][hostname"mail.agilityrossoblu.ch"][uri"/"][unique_id"XwRkWpoMeYGAtFjxm8GOZgAAAJU"][TueJul0714:02:35.4041202020][:error][pid2541:tid47247891322624][client129.146.110.88:52506][client129.146.110.88]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"218"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][hostname" |
2020-07-07 20:42:50 |
| 120.92.151.17 | attack | (sshd) Failed SSH login from 120.92.151.17 (CN/China/-): 5 in the last 3600 secs |
2020-07-07 20:47:56 |
| 106.12.217.204 | attack | 2020-07-07T12:26:13.990974shield sshd\[22258\]: Invalid user micro from 106.12.217.204 port 34886 2020-07-07T12:26:13.995206shield sshd\[22258\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.217.204 2020-07-07T12:26:15.983909shield sshd\[22258\]: Failed password for invalid user micro from 106.12.217.204 port 34886 ssh2 2020-07-07T12:27:40.214701shield sshd\[22590\]: Invalid user mani from 106.12.217.204 port 52742 2020-07-07T12:27:40.217911shield sshd\[22590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.217.204 |
2020-07-07 20:36:25 |
| 120.237.228.182 | attackbotsspam | Dovecot Invalid User Login Attempt. |
2020-07-07 21:18:14 |
| 196.219.89.250 | attackbotsspam | Unauthorized connection attempt from IP address 196.219.89.250 on Port 445(SMB) |
2020-07-07 21:05:36 |
| 61.164.213.198 | attack | Jul 7 12:45:54 onepixel sshd[3446640]: Invalid user inspur from 61.164.213.198 port 51209 Jul 7 12:45:54 onepixel sshd[3446640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.164.213.198 Jul 7 12:45:54 onepixel sshd[3446640]: Invalid user inspur from 61.164.213.198 port 51209 Jul 7 12:45:57 onepixel sshd[3446640]: Failed password for invalid user inspur from 61.164.213.198 port 51209 ssh2 Jul 7 12:46:48 onepixel sshd[3447050]: Invalid user qqq from 61.164.213.198 port 55165 |
2020-07-07 20:53:38 |
| 122.52.196.85 | attack | Unauthorized connection attempt from IP address 122.52.196.85 on Port 445(SMB) |
2020-07-07 21:17:49 |
| 172.96.160.48 | attackbots | UDP port : 5060 |
2020-07-07 21:15:01 |
| 14.177.239.248 | attackbots | Unauthorized connection attempt from IP address 14.177.239.248 on Port 445(SMB) |
2020-07-07 20:40:40 |
| 118.24.121.240 | attackspam | Jul 7 14:37:38 lnxmail61 sshd[31080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.121.240 Jul 7 14:37:38 lnxmail61 sshd[31080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.121.240 |
2020-07-07 20:59:10 |
| 87.251.74.18 | attackbots |
|
2020-07-07 20:49:42 |
| 124.40.244.150 | attackspam | WordPress XMLRPC scan :: 124.40.244.150 1.676 - [07/Jul/2020:12:02:37 0000] www.[censored_1] "POST /xmlrpc.php HTTP/1.1" 503 18223 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "HTTP/1.1" |
2020-07-07 20:51:01 |
| 145.239.91.163 | attackspam | Automatic report - Banned IP Access |
2020-07-07 21:01:53 |
| 192.99.144.170 | attack | Jul 7 14:47:54 buvik sshd[20665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.144.170 user=root Jul 7 14:47:56 buvik sshd[20665]: Failed password for root from 192.99.144.170 port 56446 ssh2 Jul 7 14:50:58 buvik sshd[21133]: Invalid user norma from 192.99.144.170 ... |
2020-07-07 20:56:59 |
| 212.70.149.82 | attack | Jul 7 14:32:05 v22019058497090703 postfix/smtpd[10270]: warning: unknown[212.70.149.82]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 7 14:32:33 v22019058497090703 postfix/smtpd[10270]: warning: unknown[212.70.149.82]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 7 14:33:01 v22019058497090703 postfix/smtpd[10270]: warning: unknown[212.70.149.82]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-07-07 20:38:23 |