City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.222.22.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50456
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.222.22.104. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021101 1800 900 604800 86400
;; Query time: 42 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 04:53:22 CST 2025
;; MSG SIZE rcvd: 106104.22.222.94.in-addr.arpa domain name pointer dslb-094-222-022-104.094.222.pools.vodafone-ip.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
104.22.222.94.in-addr.arpa name = dslb-094-222-022-104.094.222.pools.vodafone-ip.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.175.93.4 | attack | 07/16/2020-01:18:48.300078 185.175.93.4 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-07-16 13:49:10 |
| 46.229.168.144 | attackbots | Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools |
2020-07-16 14:15:19 |
| 218.92.0.185 | attack | Triggered by Fail2Ban at Ares web server |
2020-07-16 14:04:23 |
| 218.92.0.145 | attackspam | Jul 16 05:36:41 django-0 sshd[10893]: Failed password for root from 218.92.0.145 port 62387 ssh2 Jul 16 05:36:55 django-0 sshd[10893]: error: maximum authentication attempts exceeded for root from 218.92.0.145 port 62387 ssh2 [preauth] Jul 16 05:36:55 django-0 sshd[10893]: Disconnecting: Too many authentication failures for root [preauth] ... |
2020-07-16 13:38:31 |
| 123.136.128.13 | attackbotsspam | Jul 16 07:12:38 mout sshd[26365]: Invalid user web from 123.136.128.13 port 48237 |
2020-07-16 13:43:05 |
| 37.24.224.146 | attack | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-07-16T03:44:51Z and 2020-07-16T03:54:33Z |
2020-07-16 13:40:16 |
| 196.27.127.61 | attackbotsspam | Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-07-16 13:43:57 |
| 119.254.12.66 | attack | Banned for a week because repeated abuses, for example SSH, but not only |
2020-07-16 13:50:33 |
| 104.47.45.33 | attack | I am Julie Leach from Michigan, A 50-year old mother of 3 children and 11 grandchildren. So at this point my family and i have decided to donate $5,000,000.00 USD to Two(2) lucky individuals worldwide as part of What we promised God to do is he make us a Winner. It’s a donation tagged to you and your family and also for you to help the less fortunate, sick, handicapped, and not excluding the cancer patients etc. so if you are getting this mail from me it means you have been chosen by my Humble family and I with the assistance from Power ball Lottery and Gaming (PLG), Google, and Microsoft Corporation who assisted me to collect mailing Data's for random selection, which I found you through "Microsoft Powered Message". Then ask for personal information |
2020-07-16 13:57:26 |
| 218.92.0.249 | attack | $f2bV_matches |
2020-07-16 13:48:51 |
| 118.27.14.123 | attackbots | Invalid user spencer from 118.27.14.123 port 55702 |
2020-07-16 13:47:05 |
| 211.108.69.103 | attackspam | Brute-force attempt banned |
2020-07-16 14:11:42 |
| 182.43.134.224 | attack | Jul 15 19:32:29 auw2 sshd\[11528\]: Invalid user steam from 182.43.134.224 Jul 15 19:32:29 auw2 sshd\[11528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.43.134.224 Jul 15 19:32:31 auw2 sshd\[11528\]: Failed password for invalid user steam from 182.43.134.224 port 51222 ssh2 Jul 15 19:37:48 auw2 sshd\[12100\]: Invalid user andris from 182.43.134.224 Jul 15 19:37:48 auw2 sshd\[12100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.43.134.224 |
2020-07-16 14:00:00 |
| 104.236.214.8 | attack | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): |
2020-07-16 14:00:27 |
| 198.27.81.94 | attackbotsspam | 198.27.81.94 - - [16/Jul/2020:06:58:16 +0100] "POST /wp-login.php HTTP/1.1" 200 5940 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 198.27.81.94 - - [16/Jul/2020:07:01:26 +0100] "POST /wp-login.php HTTP/1.1" 200 5947 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 198.27.81.94 - - [16/Jul/2020:07:03:08 +0100] "POST /wp-login.php HTTP/1.1" 200 5947 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" ... |
2020-07-16 14:10:29 |