City: Oberhausen
Region: North Rhine-Westphalia
Country: Germany
Internet Service Provider: Telekom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 93.238.111.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40833
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;93.238.111.147. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 08:02:49 CST 2022
;; MSG SIZE rcvd: 107147.111.238.93.in-addr.arpa domain name pointer p5dee6f93.dip0.t-ipconnect.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
147.111.238.93.in-addr.arpa name = p5dee6f93.dip0.t-ipconnect.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.118.38.36 | attackbotsspam | Sep 19 15:28:23 webserver postfix/smtpd\[4206\]: warning: unknown\[92.118.38.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 15:29:02 webserver postfix/smtpd\[4206\]: warning: unknown\[92.118.38.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 15:29:41 webserver postfix/smtpd\[3399\]: warning: unknown\[92.118.38.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 15:30:20 webserver postfix/smtpd\[30670\]: warning: unknown\[92.118.38.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 19 15:30:58 webserver postfix/smtpd\[3399\]: warning: unknown\[92.118.38.36\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-09-19 21:31:22 |
| 171.218.202.195 | attackbots | Probing for vulnerable services |
2019-09-19 21:46:22 |
| 104.248.211.51 | attackbots | Sep 19 09:34:21 plusreed sshd[1002]: Invalid user deploy from 104.248.211.51 ... |
2019-09-19 21:50:15 |
| 209.97.168.14 | attackspambots | Sep 19 16:29:32 server sshd\[26178\]: Invalid user tibero6 from 209.97.168.14 port 30349 Sep 19 16:29:32 server sshd\[26178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.168.14 Sep 19 16:29:34 server sshd\[26178\]: Failed password for invalid user tibero6 from 209.97.168.14 port 30349 ssh2 Sep 19 16:34:17 server sshd\[21799\]: Invalid user fernie from 209.97.168.14 port 9246 Sep 19 16:34:17 server sshd\[21799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.168.14 |
2019-09-19 21:39:08 |
| 34.67.50.221 | attack | SSH bruteforce |
2019-09-19 21:42:12 |
| 192.241.249.53 | attackbotsspam | Sep 19 13:51:42 microserver sshd[6857]: Invalid user alex from 192.241.249.53 port 60687 Sep 19 13:51:42 microserver sshd[6857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.249.53 Sep 19 13:51:44 microserver sshd[6857]: Failed password for invalid user alex from 192.241.249.53 port 60687 ssh2 Sep 19 13:56:39 microserver sshd[7517]: Invalid user user from 192.241.249.53 port 54867 Sep 19 13:56:39 microserver sshd[7517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.249.53 Sep 19 14:11:09 microserver sshd[9462]: Invalid user teamspeak3 from 192.241.249.53 port 36845 Sep 19 14:11:09 microserver sshd[9462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.249.53 Sep 19 14:11:11 microserver sshd[9462]: Failed password for invalid user teamspeak3 from 192.241.249.53 port 36845 ssh2 Sep 19 14:16:06 microserver sshd[10107]: Invalid user test2 from 192.241.249.53 port 589 |
2019-09-19 21:08:51 |
| 119.29.104.238 | attack | Invalid user hamish from 119.29.104.238 port 50896 |
2019-09-19 21:53:09 |
| 106.13.88.44 | attack | Sep 19 15:12:00 mail sshd\[6687\]: Invalid user pid from 106.13.88.44 port 54408 Sep 19 15:12:00 mail sshd\[6687\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.88.44 Sep 19 15:12:01 mail sshd\[6687\]: Failed password for invalid user pid from 106.13.88.44 port 54408 ssh2 Sep 19 15:18:10 mail sshd\[7501\]: Invalid user test from 106.13.88.44 port 40276 Sep 19 15:18:10 mail sshd\[7501\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.88.44 |
2019-09-19 21:37:06 |
| 14.189.147.85 | attackspambots | 2019-09-19T11:54:27.153055+01:00 suse sshd[19579]: Invalid user admin from 14.189.147.85 port 35926 2019-09-19T11:54:30.392614+01:00 suse sshd[19579]: error: PAM: User not known to the underlying authentication module for illegal user admin from 14.189.147.85 2019-09-19T11:54:27.153055+01:00 suse sshd[19579]: Invalid user admin from 14.189.147.85 port 35926 2019-09-19T11:54:30.392614+01:00 suse sshd[19579]: error: PAM: User not known to the underlying authentication module for illegal user admin from 14.189.147.85 2019-09-19T11:54:27.153055+01:00 suse sshd[19579]: Invalid user admin from 14.189.147.85 port 35926 2019-09-19T11:54:30.392614+01:00 suse sshd[19579]: error: PAM: User not known to the underlying authentication module for illegal user admin from 14.189.147.85 2019-09-19T11:54:30.433750+01:00 suse sshd[19579]: Failed keyboard-interactive/pam for invalid user admin from 14.189.147.85 port 35926 ssh2 ... |
2019-09-19 21:20:21 |
| 80.82.65.74 | attackspambots | 09/19/2019-07:33:14.770803 80.82.65.74 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 84 |
2019-09-19 21:18:32 |
| 222.186.30.152 | attackbots | Sep 19 15:25:30 jane sshd[24877]: Failed password for root from 222.186.30.152 port 44239 ssh2 Sep 19 15:25:34 jane sshd[24877]: Failed password for root from 222.186.30.152 port 44239 ssh2 ... |
2019-09-19 21:34:31 |
| 110.47.218.84 | attackspam | $f2bV_matches |
2019-09-19 21:17:19 |
| 111.255.28.144 | attackspam | Unauthorised access (Sep 19) SRC=111.255.28.144 LEN=40 PREC=0x20 TTL=52 ID=22748 TCP DPT=23 WINDOW=58676 SYN |
2019-09-19 21:30:55 |
| 222.186.42.15 | attackspam | 2019-09-19T13:20:54.638075abusebot-6.cloudsearch.cf sshd\[3071\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.15 user=root |
2019-09-19 21:23:23 |
| 197.44.227.179 | attackbotsspam | 2019-09-19T11:53:54.331520+01:00 suse sshd[19556]: User root from 197.44.227.179 not allowed because not listed in AllowUsers 2019-09-19T11:53:57.382940+01:00 suse sshd[19556]: error: PAM: Authentication failure for illegal user root from 197.44.227.179 2019-09-19T11:53:54.331520+01:00 suse sshd[19556]: User root from 197.44.227.179 not allowed because not listed in AllowUsers 2019-09-19T11:53:57.382940+01:00 suse sshd[19556]: error: PAM: Authentication failure for illegal user root from 197.44.227.179 2019-09-19T11:53:54.331520+01:00 suse sshd[19556]: User root from 197.44.227.179 not allowed because not listed in AllowUsers 2019-09-19T11:53:57.382940+01:00 suse sshd[19556]: error: PAM: Authentication failure for illegal user root from 197.44.227.179 2019-09-19T11:53:57.387832+01:00 suse sshd[19556]: Failed keyboard-interactive/pam for invalid user root from 197.44.227.179 port 54305 ssh2 ... |
2019-09-19 21:35:45 |