City: Nauheim
Region: Hessen
Country: Germany
Internet Service Provider: Telekom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 93.241.159.152
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47911
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;93.241.159.152. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025031500 1800 900 604800 86400
;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 15 17:27:25 CST 2025
;; MSG SIZE rcvd: 107Host 152.159.241.93.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 152.159.241.93.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 201.217.4.220 | attackspambots | Jul 15 07:28:55 ip-172-31-1-72 sshd\[14831\]: Invalid user tracy from 201.217.4.220 Jul 15 07:28:55 ip-172-31-1-72 sshd\[14831\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.217.4.220 Jul 15 07:28:57 ip-172-31-1-72 sshd\[14831\]: Failed password for invalid user tracy from 201.217.4.220 port 51354 ssh2 Jul 15 07:35:07 ip-172-31-1-72 sshd\[14950\]: Invalid user mata from 201.217.4.220 Jul 15 07:35:07 ip-172-31-1-72 sshd\[14950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.217.4.220 |
2019-07-15 16:41:40 |
| 119.155.13.196 | attackspam | Bot ignores robot.txt restrictions |
2019-07-15 16:12:17 |
| 186.64.71.61 | attack | Jul 15 08:19:22 rigel postfix/smtpd[32407]: warning: hostname host61.186-64-71.nodosud.com.ar does not resolve to address 186.64.71.61 Jul 15 08:19:22 rigel postfix/smtpd[32407]: connect from unknown[186.64.71.61] Jul 15 08:19:25 rigel postfix/smtpd[32407]: warning: unknown[186.64.71.61]: SASL CRAM-MD5 authentication failed: authentication failure Jul 15 08:19:26 rigel postfix/smtpd[32407]: warning: unknown[186.64.71.61]: SASL PLAIN authentication failed: authentication failure Jul 15 08:19:27 rigel postfix/smtpd[32407]: warning: unknown[186.64.71.61]: SASL LOGIN authentication failed: authentication failure ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=186.64.71.61 |
2019-07-15 16:56:53 |
| 54.36.130.88 | attackbots | Jul 15 08:15:19 mail sshd\[8810\]: Invalid user shawn from 54.36.130.88 port 37246 Jul 15 08:15:19 mail sshd\[8810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.130.88 Jul 15 08:15:21 mail sshd\[8810\]: Failed password for invalid user shawn from 54.36.130.88 port 37246 ssh2 Jul 15 08:20:06 mail sshd\[8875\]: Invalid user venta from 54.36.130.88 port 37898 Jul 15 08:20:06 mail sshd\[8875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.130.88 ... |
2019-07-15 16:46:16 |
| 106.13.47.252 | attack | Apr 10 14:22:17 vtv3 sshd\[19339\]: Invalid user albertz from 106.13.47.252 port 36018 Apr 10 14:22:17 vtv3 sshd\[19339\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.47.252 Apr 10 14:22:20 vtv3 sshd\[19339\]: Failed password for invalid user albertz from 106.13.47.252 port 36018 ssh2 Apr 10 14:26:49 vtv3 sshd\[21741\]: Invalid user postgres from 106.13.47.252 port 52404 Apr 10 14:26:49 vtv3 sshd\[21741\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.47.252 Jul 15 01:37:15 vtv3 sshd\[15857\]: Invalid user admin from 106.13.47.252 port 53772 Jul 15 01:37:15 vtv3 sshd\[15857\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.47.252 Jul 15 01:37:17 vtv3 sshd\[15857\]: Failed password for invalid user admin from 106.13.47.252 port 53772 ssh2 Jul 15 01:40:44 vtv3 sshd\[17693\]: Invalid user worker from 106.13.47.252 port 56988 Jul 15 01:40:44 vtv3 sshd\[17693\ |
2019-07-15 16:49:34 |
| 87.205.15.147 | attackbots | Jul 15 11:06:38 zeus sshd[9037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.205.15.147 Jul 15 11:06:40 zeus sshd[9037]: Failed password for invalid user a from 87.205.15.147 port 54895 ssh2 Jul 15 11:08:50 zeus sshd[9242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.205.15.147 ... |
2019-07-15 16:50:10 |
| 221.167.9.20 | attack | Jul 15 08:05:34 reporting2 sshd[5747]: User r.r from 221.167.9.20 not allowed because not listed in AllowUsers Jul 15 08:05:34 reporting2 sshd[5747]: Failed password for invalid user r.r from 221.167.9.20 port 41442 ssh2 Jul 15 08:05:35 reporting2 sshd[5747]: Failed password for invalid user r.r from 221.167.9.20 port 41442 ssh2 Jul 15 08:05:35 reporting2 sshd[5747]: Failed password for invalid user r.r from 221.167.9.20 port 41442 ssh2 Jul 15 08:05:35 reporting2 sshd[5747]: Failed password for invalid user r.r from 221.167.9.20 port 41442 ssh2 Jul 15 08:05:36 reporting2 sshd[5747]: Failed password for invalid user r.r from 221.167.9.20 port 41442 ssh2 Jul 15 08:05:36 reporting2 sshd[5747]: Failed password for invalid user r.r from 221.167.9.20 port 41442 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=221.167.9.20 |
2019-07-15 16:52:34 |
| 164.132.38.167 | attackbots | Jul 15 13:43:09 vibhu-HP-Z238-Microtower-Workstation sshd\[3081\]: Invalid user moses from 164.132.38.167 Jul 15 13:43:09 vibhu-HP-Z238-Microtower-Workstation sshd\[3081\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.38.167 Jul 15 13:43:11 vibhu-HP-Z238-Microtower-Workstation sshd\[3081\]: Failed password for invalid user moses from 164.132.38.167 port 59175 ssh2 Jul 15 13:47:54 vibhu-HP-Z238-Microtower-Workstation sshd\[7993\]: Invalid user demo from 164.132.38.167 Jul 15 13:47:54 vibhu-HP-Z238-Microtower-Workstation sshd\[7993\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.38.167 ... |
2019-07-15 17:02:30 |
| 5.55.44.38 | attack | Telnet Server BruteForce Attack |
2019-07-15 16:09:26 |
| 119.29.52.46 | attack | Jul 15 09:29:30 minden010 sshd[547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.52.46 Jul 15 09:29:32 minden010 sshd[547]: Failed password for invalid user janine from 119.29.52.46 port 38524 ssh2 Jul 15 09:33:48 minden010 sshd[2148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.52.46 ... |
2019-07-15 16:42:44 |
| 198.228.145.150 | attackspambots | Jul 15 10:11:03 srv206 sshd[24382]: Invalid user nagios from 198.228.145.150 ... |
2019-07-15 16:32:55 |
| 111.223.75.181 | attackbots | Jul 15 06:51:36 our-server-hostname postfix/smtpd[16672]: connect from unknown[111.223.75.181] Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul 15 06:51:39 our-server-hostname postfix/smtpd[16672]: lost connection after RCPT from unknown[111.223.75.181] Jul 15 06:51:39 our-server-hostname postfix/smtpd[16672]: disconnect from unknown[111.223.75.181] Jul 15 08:30:55 our-server-hostname postfix/smtpd[21310]: connect from unknown[111.223.75.181] Jul x@x Jul x@x Jul 15 08:30:58 our-server-hostname postfix/smtpd[21310]: lost connection after RCPT from unknown[111.223.75.181] Jul 15 08:30:58 our-server-hostname postfix/smtpd[21310]: disconnect from unknown[111.223.75.181] Jul 15 10:08:41 our-server-hostname postfix/smtpd[11711]: connect from unknown[111.223.75.181] Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul x@x Jul 15 10:08:52 our-server-hostname postfix/smtpd[11711]: t........ ------------------------------- |
2019-07-15 16:55:08 |
| 151.236.32.126 | attackspambots | Jul 15 14:03:26 areeb-Workstation sshd\[21961\]: Invalid user passwd from 151.236.32.126 Jul 15 14:03:26 areeb-Workstation sshd\[21961\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.236.32.126 Jul 15 14:03:28 areeb-Workstation sshd\[21961\]: Failed password for invalid user passwd from 151.236.32.126 port 54996 ssh2 ... |
2019-07-15 16:48:34 |
| 178.128.55.52 | attackbotsspam | Jul 15 08:18:23 MainVPS sshd[14442]: Invalid user pramod from 178.128.55.52 port 50794 Jul 15 08:18:23 MainVPS sshd[14442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.55.52 Jul 15 08:18:23 MainVPS sshd[14442]: Invalid user pramod from 178.128.55.52 port 50794 Jul 15 08:18:25 MainVPS sshd[14442]: Failed password for invalid user pramod from 178.128.55.52 port 50794 ssh2 Jul 15 08:27:23 MainVPS sshd[15077]: Invalid user user9 from 178.128.55.52 port 48546 ... |
2019-07-15 16:25:46 |
| 185.137.111.132 | attackspam | Jul 15 07:56:37 marvibiene postfix/smtpd[16844]: warning: unknown[185.137.111.132]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 15 07:58:00 marvibiene postfix/smtpd[16846]: warning: unknown[185.137.111.132]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-07-15 16:51:38 |