City: Uzwil
Region: Saint Gallen
Country: Switzerland
Internet Service Provider: Swisscom
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 144.2.82.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5758
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;144.2.82.57. IN A
;; AUTHORITY SECTION:
. 504 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019092701 1800 900 604800 86400
;; Query time: 193 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 28 03:22:24 CST 2019
;; MSG SIZE rcvd: 11557.82.2.144.in-addr.arpa domain name pointer bbcs-82-57.pub.wingo.ch.Server: 192.168.31.1
Address: 192.168.31.1#53
Non-authoritative answer:
57.82.2.144.in-addr.arpa name = bbcs-82-57.pub.wingo.ch.
Authoritative answers can be found from:
82.2.144.in-addr.arpa nameserver = nsa1.nts.ch.
82.2.144.in-addr.arpa nameserver = nsa2.nts.ch.
82.2.144.in-addr.arpa nameserver = ns1.wingo.ch.
| IP | Type | Details | Datetime |
|---|---|---|---|
| 124.161.214.160 | attackbots | Lines containing failures of 124.161.214.160 Oct 9 17:11:45 neweola postfix/smtpd[9651]: connect from unknown[124.161.214.160] Oct 9 17:11:47 neweola postfix/smtpd[9651]: lost connection after AUTH from unknown[124.161.214.160] Oct 9 17:11:47 neweola postfix/smtpd[9651]: disconnect from unknown[124.161.214.160] ehlo=2 starttls=1 auth=0/1 commands=3/4 Oct 9 17:11:47 neweola postfix/smtpd[9651]: connect from unknown[124.161.214.160] Oct 9 17:11:49 neweola postfix/smtpd[9651]: lost connection after AUTH from unknown[124.161.214.160] Oct 9 17:11:49 neweola postfix/smtpd[9651]: disconnect from unknown[124.161.214.160] ehlo=2 starttls=1 auth=0/1 commands=3/4 Oct 9 17:11:49 neweola postfix/smtpd[9651]: connect from unknown[124.161.214.160] Oct 9 17:11:51 neweola postfix/smtpd[9651]: lost connection after AUTH from unknown[124.161.214.160] Oct 9 17:11:51 neweola postfix/smtpd[9651]: disconnect from unknown[124.161.214.160] ehlo=2 starttls=1 auth=0/1 commands=3/4 Oct 9 ........ ------------------------------ |
2020-10-11 02:50:57 |
| 171.243.127.144 | attackspambots | Invalid user greg from 171.243.127.144 port 46640 |
2020-10-11 03:10:53 |
| 186.4.136.153 | attack | Oct 10 04:30:40 propaganda sshd[94190]: Connection from 186.4.136.153 port 33476 on 10.0.0.161 port 22 rdomain "" Oct 10 04:30:40 propaganda sshd[94190]: Connection closed by 186.4.136.153 port 33476 [preauth] |
2020-10-11 03:09:35 |
| 120.31.131.172 | attack | Multiple SSH authentication failures from 120.31.131.172 |
2020-10-11 03:06:11 |
| 13.68.108.3 | attack | 13.68.108.3 was recorded 5 times by 1 hosts attempting to connect to the following ports: 5060. Incident counter (4h, 24h, all-time): 5, 48, 81 |
2020-10-11 02:58:18 |
| 42.200.106.1 | attackbots | Unauthorized connection attempt from IP address 42.200.106.1 on Port 445(SMB) |
2020-10-11 03:02:04 |
| 200.73.129.6 | attackspambots | Oct 10 20:19:16 santamaria sshd\[10773\]: Invalid user mongodb from 200.73.129.6 Oct 10 20:19:16 santamaria sshd\[10773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.73.129.6 Oct 10 20:19:17 santamaria sshd\[10773\]: Failed password for invalid user mongodb from 200.73.129.6 port 39744 ssh2 ... |
2020-10-11 03:04:35 |
| 78.196.38.46 | attack | Invalid user es from 78.196.38.46 port 41632 |
2020-10-11 03:22:31 |
| 162.158.89.99 | attackbots | srv02 DDoS Malware Target(80:http) .. |
2020-10-11 03:05:59 |
| 103.15.50.41 | attackspambots | Oct 10 18:37:34 scw-focused-cartwright sshd[21611]: Failed password for root from 103.15.50.41 port 38308 ssh2 |
2020-10-11 02:51:31 |
| 218.78.50.164 | attackbotsspam | Invalid user shop from 218.78.50.164 port 33424 |
2020-10-11 03:15:37 |
| 189.167.205.112 | attack | Unauthorized connection attempt from IP address 189.167.205.112 on Port 445(SMB) |
2020-10-11 03:09:09 |
| 200.196.249.170 | attackspambots | 2020-10-10T18:28:32.038269hostname sshd[128993]: Failed password for invalid user danny from 200.196.249.170 port 37186 ssh2 ... |
2020-10-11 03:04:03 |
| 185.220.102.243 | attackspam | (sshd) Failed SSH login from 185.220.102.243 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 10 10:19:50 server5 sshd[24161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.102.243 user=root Oct 10 10:19:52 server5 sshd[24161]: Failed password for root from 185.220.102.243 port 32866 ssh2 Oct 10 10:19:54 server5 sshd[24161]: Failed password for root from 185.220.102.243 port 32866 ssh2 Oct 10 10:19:57 server5 sshd[24161]: Failed password for root from 185.220.102.243 port 32866 ssh2 Oct 10 10:19:58 server5 sshd[24161]: Failed password for root from 185.220.102.243 port 32866 ssh2 |
2020-10-11 02:55:02 |
| 160.238.240.192 | attackspam | Unauthorized connection attempt from IP address 160.238.240.192 on Port 445(SMB) |
2020-10-11 03:11:17 |