City: Köln
Region: North Rhine-Westphalia
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.114.104.224
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32710
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.114.104.224. IN A
;; AUTHORITY SECTION:
. 339 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020093002 1800 900 604800 86400
;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 01 18:21:50 CST 2020
;; MSG SIZE rcvd: 118224.104.114.94.in-addr.arpa domain name pointer ip-94-114-104-224.unity-media.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
224.104.114.94.in-addr.arpa name = ip-94-114-104-224.unity-media.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 36.90.154.11 | attackbotsspam | Unauthorized connection attempt from IP address 36.90.154.11 on Port 445(SMB) |
2020-08-08 01:54:50 |
| 218.92.0.171 | attackspam | Aug 7 19:24:33 eventyay sshd[20512]: Failed password for root from 218.92.0.171 port 40935 ssh2 Aug 7 19:24:36 eventyay sshd[20512]: Failed password for root from 218.92.0.171 port 40935 ssh2 Aug 7 19:24:39 eventyay sshd[20512]: Failed password for root from 218.92.0.171 port 40935 ssh2 Aug 7 19:24:46 eventyay sshd[20512]: error: maximum authentication attempts exceeded for root from 218.92.0.171 port 40935 ssh2 [preauth] ... |
2020-08-08 01:26:18 |
| 123.56.26.222 | attackspam | 123.56.26.222 - - [07/Aug/2020:13:51:59 +0200] "POST /xmlrpc.php HTTP/1.1" 403 613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 123.56.26.222 - - [07/Aug/2020:14:03:14 +0200] "POST /xmlrpc.php HTTP/1.1" 403 12786 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-08 01:24:05 |
| 139.59.18.197 | attackspam | Aug 7 22:26:00 itv-usvr-02 sshd[10671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.18.197 user=root Aug 7 22:31:01 itv-usvr-02 sshd[10907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.18.197 user=root Aug 7 22:35:43 itv-usvr-02 sshd[11118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.18.197 user=root |
2020-08-08 01:41:01 |
| 147.135.211.127 | attack | 147.135.211.127 - - \[07/Aug/2020:16:14:27 +0200\] "POST /wp-login.php HTTP/1.0" 200 6906 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 147.135.211.127 - - \[07/Aug/2020:16:14:28 +0200\] "POST /wp-login.php HTTP/1.0" 200 6728 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 147.135.211.127 - - \[07/Aug/2020:16:14:29 +0200\] "POST /wp-login.php HTTP/1.0" 200 6722 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-08-08 01:55:42 |
| 182.75.216.74 | attack | k+ssh-bruteforce |
2020-08-08 01:40:44 |
| 2.47.150.85 | attackbotsspam | Unauthorized connection attempt from IP address 2.47.150.85 on Port 445(SMB) |
2020-08-08 02:05:00 |
| 124.43.9.184 | attack | Aug 7 13:48:02 ovpn sshd\[13522\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.43.9.184 user=root Aug 7 13:48:04 ovpn sshd\[13522\]: Failed password for root from 124.43.9.184 port 49540 ssh2 Aug 7 14:00:42 ovpn sshd\[18711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.43.9.184 user=root Aug 7 14:00:44 ovpn sshd\[18711\]: Failed password for root from 124.43.9.184 port 48898 ssh2 Aug 7 14:02:39 ovpn sshd\[19555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.43.9.184 user=root |
2020-08-08 01:56:10 |
| 119.45.138.220 | attackspam | 2020-08-07T13:53:36.257696amanda2.illicoweb.com sshd\[41779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.138.220 user=root 2020-08-07T13:53:38.586147amanda2.illicoweb.com sshd\[41779\]: Failed password for root from 119.45.138.220 port 58272 ssh2 2020-08-07T13:55:53.891133amanda2.illicoweb.com sshd\[42202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.138.220 user=root 2020-08-07T13:55:56.028660amanda2.illicoweb.com sshd\[42202\]: Failed password for root from 119.45.138.220 port 37248 ssh2 2020-08-07T14:03:01.309393amanda2.illicoweb.com sshd\[43446\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.138.220 user=root ... |
2020-08-08 01:37:34 |
| 188.159.101.248 | attackspambots | W 31101,/var/log/nginx/access.log,-,- |
2020-08-08 01:51:17 |
| 45.129.33.26 | attackspambots | Attempted to establish connection to non opened port 4469 |
2020-08-08 01:36:09 |
| 80.82.77.245 | attackspam | 08/07/2020-13:23:03.463941 80.82.77.245 Protocol: 17 ET DROP Dshield Block Listed Source group 1 |
2020-08-08 01:30:41 |
| 128.199.123.0 | attackbots | Aug 7 18:35:14 nextcloud sshd\[5247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.123.0 user=root Aug 7 18:35:16 nextcloud sshd\[5247\]: Failed password for root from 128.199.123.0 port 48908 ssh2 Aug 7 18:39:33 nextcloud sshd\[9680\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.123.0 user=root |
2020-08-08 01:35:14 |
| 114.5.192.201 | attackbotsspam | Unauthorized connection attempt from IP address 114.5.192.201 on Port 445(SMB) |
2020-08-08 01:59:33 |
| 217.182.77.186 | attackbots | Aug 7 19:30:19 piServer sshd[6481]: Failed password for root from 217.182.77.186 port 53132 ssh2 Aug 7 19:33:13 piServer sshd[6751]: Failed password for root from 217.182.77.186 port 44262 ssh2 ... |
2020-08-08 01:46:47 |