City: Rosenheim
Region: Bavaria
Country: Germany
Internet Service Provider: Vodafone
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.218.60.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54629
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.218.60.141. IN A
;; AUTHORITY SECTION:
. 418 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019120801 1800 900 604800 86400
;; Query time: 123 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 09 04:29:35 CST 2019
;; MSG SIZE rcvd: 117141.60.218.94.in-addr.arpa domain name pointer dslb-094-218-060-141.094.218.pools.vodafone-ip.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
141.60.218.94.in-addr.arpa name = dslb-094-218-060-141.094.218.pools.vodafone-ip.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 115.95.178.174 | attackspambots | Jun 30 02:01:45 MK-Soft-Root2 sshd\[11976\]: Invalid user hadoop from 115.95.178.174 port 59606 Jun 30 02:01:45 MK-Soft-Root2 sshd\[11976\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.95.178.174 Jun 30 02:01:48 MK-Soft-Root2 sshd\[11976\]: Failed password for invalid user hadoop from 115.95.178.174 port 59606 ssh2 ... |
2019-06-30 10:36:35 |
| 118.96.187.5 | attackbotsspam | SSH-BruteForce |
2019-06-30 11:03:24 |
| 103.88.33.80 | attackbots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-29 17:22:40,323 INFO [amun_request_handler] PortScan Detected on Port: 445 (103.88.33.80) |
2019-06-30 10:27:40 |
| 118.70.180.42 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-30 00:10:00,227 INFO [amun_request_handler] PortScan Detected on Port: 445 (118.70.180.42) |
2019-06-30 10:32:58 |
| 61.157.78.139 | attack | ssh failed login |
2019-06-30 10:41:13 |
| 113.160.37.4 | attackspam | Jun 30 03:54:17 XXX sshd[20884]: Invalid user hadoop from 113.160.37.4 port 54150 |
2019-06-30 10:53:29 |
| 181.40.66.136 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-29 17:17:15,459 INFO [amun_request_handler] PortScan Detected on Port: 445 (181.40.66.136) |
2019-06-30 10:50:11 |
| 193.112.220.76 | attack | Jun 29 20:49:22 bouncer sshd\[6698\]: Invalid user ellie from 193.112.220.76 port 55512 Jun 29 20:49:22 bouncer sshd\[6698\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.220.76 Jun 29 20:49:24 bouncer sshd\[6698\]: Failed password for invalid user ellie from 193.112.220.76 port 55512 ssh2 ... |
2019-06-30 10:41:30 |
| 186.216.154.189 | attackbotsspam | Jun 29 14:48:55 web1 postfix/smtpd[29349]: warning: unknown[186.216.154.189]: SASL PLAIN authentication failed: authentication failure ... |
2019-06-30 10:58:40 |
| 95.172.96.56 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-29 18:48:32,714 INFO [shellcode_manager] (95.172.96.56) no match, writing hexdump (06cb1cdc794ded1faa9f8ed0bf4f6df0 :10711) - SMB (Unknown) |
2019-06-30 10:37:36 |
| 41.205.83.6 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-29 17:16:51,403 INFO [amun_request_handler] PortScan Detected on Port: 445 (41.205.83.6) |
2019-06-30 10:57:55 |
| 140.129.1.237 | attack | Jun 30 03:38:12 debian sshd\[26565\]: Invalid user test from 140.129.1.237 port 37624 Jun 30 03:38:12 debian sshd\[26565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.129.1.237 ... |
2019-06-30 11:00:21 |
| 5.59.133.122 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-29 17:20:06,439 INFO [amun_request_handler] PortScan Detected on Port: 445 (5.59.133.122) |
2019-06-30 10:34:30 |
| 51.254.249.208 | attackspambots | Automatic report generated by Wazuh |
2019-06-30 10:49:18 |
| 81.22.45.219 | attackbots | Jun 30 03:57:34 h2177944 kernel: \[184303.372688\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.219 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=49368 PROTO=TCP SPT=44113 DPT=5566 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 30 04:14:12 h2177944 kernel: \[185301.033415\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.219 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=46132 PROTO=TCP SPT=44113 DPT=10020 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 30 04:19:23 h2177944 kernel: \[185611.676644\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.219 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=44435 PROTO=TCP SPT=44113 DPT=8939 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 30 04:24:04 h2177944 kernel: \[185892.638853\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.219 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=46346 PROTO=TCP SPT=44113 DPT=5456 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 30 04:27:20 h2177944 kernel: \[186089.143263\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.219 DST=85.214.117.9 LEN=40 T |
2019-06-30 10:38:59 |