City: Gouda
Region: Zuid Holland
Country: The Netherlands
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 145.140.13.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22266
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;145.140.13.31. IN A
;; AUTHORITY SECTION:
. 377 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024100300 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 03 15:23:19 CST 2024
;; MSG SIZE rcvd: 106Host 31.13.140.145.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 31.13.140.145.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 60.182.34.97 | attackspambots | Oct 12 10:02:51 eola postfix/smtpd[3512]: warning: hostname 97.34.182.60.broad.jh.zj.dynamic.163data.com.cn does not resolve to address 60.182.34.97: Name or service not known Oct 12 10:02:51 eola postfix/smtpd[3512]: connect from unknown[60.182.34.97] Oct 12 10:02:52 eola postfix/smtpd[3512]: lost connection after AUTH from unknown[60.182.34.97] Oct 12 10:02:52 eola postfix/smtpd[3512]: disconnect from unknown[60.182.34.97] ehlo=1 auth=0/1 commands=1/2 Oct 12 10:02:52 eola postfix/smtpd[3512]: warning: hostname 97.34.182.60.broad.jh.zj.dynamic.163data.com.cn does not resolve to address 60.182.34.97: Name or service not known Oct 12 10:02:52 eola postfix/smtpd[3512]: connect from unknown[60.182.34.97] Oct 12 10:02:53 eola postfix/smtpd[3512]: lost connection after AUTH from unknown[60.182.34.97] Oct 12 10:02:53 eola postfix/smtpd[3512]: disconnect from unknown[60.182.34.97] ehlo=1 auth=0/1 commands=1/2 Oct 12 10:02:53 eola postfix/smtpd[3512]: warning: hostname 97.34.18........ ------------------------------- |
2019-10-13 03:19:21 |
| 78.186.156.212 | attackbotsspam | Automatic report - Port Scan Attack |
2019-10-13 02:53:09 |
| 27.214.200.44 | attack | Unauthorised access (Oct 12) SRC=27.214.200.44 LEN=40 TTL=49 ID=34794 TCP DPT=8080 WINDOW=16370 SYN Unauthorised access (Oct 12) SRC=27.214.200.44 LEN=40 TTL=49 ID=52569 TCP DPT=8080 WINDOW=54640 SYN Unauthorised access (Oct 11) SRC=27.214.200.44 LEN=40 TTL=49 ID=37409 TCP DPT=8080 WINDOW=60109 SYN Unauthorised access (Oct 11) SRC=27.214.200.44 LEN=40 TTL=49 ID=6300 TCP DPT=8080 WINDOW=40885 SYN Unauthorised access (Oct 9) SRC=27.214.200.44 LEN=40 TTL=49 ID=38203 TCP DPT=8080 WINDOW=54640 SYN Unauthorised access (Oct 9) SRC=27.214.200.44 LEN=40 TTL=49 ID=5083 TCP DPT=8080 WINDOW=60109 SYN |
2019-10-13 02:51:26 |
| 209.177.94.56 | attackspam | 2019-10-10T14:34:11.576000shiva sshd[13954]: Unable to negotiate whostnameh 209.177.94.56 port 64540: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] 2019-10-10T14:34:14.876242shiva sshd[13956]: Unable to negotiate whostnameh 209.177.94.56 port 49932: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] 2019-10-10T14:34:18.284267shiva sshd[13958]: Unable to negotiate whostnameh 209.177.94.56 port 51617: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] 2019-10-10T14:34:21.598907shiva sshd[13974]: Unable to negotiate whostnameh 209.177.94.56 port 53264: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie........ ------------------------------ |
2019-10-13 03:13:36 |
| 200.8.143.59 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-10-13 03:17:14 |
| 90.173.112.83 | attackspambots | Automatic report - Port Scan Attack |
2019-10-13 02:52:53 |
| 137.74.25.247 | attackbots | 2019-10-12T18:49:32.417812shield sshd\[527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.25.247 user=root 2019-10-12T18:49:33.875662shield sshd\[527\]: Failed password for root from 137.74.25.247 port 39947 ssh2 2019-10-12T18:53:55.111359shield sshd\[1228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.25.247 user=root 2019-10-12T18:53:57.341929shield sshd\[1228\]: Failed password for root from 137.74.25.247 port 60345 ssh2 2019-10-12T18:58:17.327157shield sshd\[1594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.25.247 user=root |
2019-10-13 03:27:39 |
| 185.176.27.250 | attackbots | 10/12/2019-20:54:58.048278 185.176.27.250 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-13 03:19:06 |
| 222.186.175.155 | attackspambots | Oct 12 20:58:49 mail sshd\[3021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155 user=root Oct 12 20:58:50 mail sshd\[3021\]: Failed password for root from 222.186.175.155 port 21106 ssh2 Oct 12 20:58:55 mail sshd\[3021\]: Failed password for root from 222.186.175.155 port 21106 ssh2 ... |
2019-10-13 02:59:23 |
| 144.217.255.89 | attackspam | Automatic report - Port Scan |
2019-10-13 03:00:35 |
| 5.101.140.227 | attack | Oct 12 16:06:35 meumeu sshd[2124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.101.140.227 Oct 12 16:06:37 meumeu sshd[2124]: Failed password for invalid user C3NT0S2017 from 5.101.140.227 port 54264 ssh2 Oct 12 16:10:55 meumeu sshd[2789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.101.140.227 ... |
2019-10-13 03:09:48 |
| 222.186.52.86 | attackspam | Oct 12 20:48:50 * sshd[10032]: Failed password for root from 222.186.52.86 port 21061 ssh2 |
2019-10-13 02:58:56 |
| 187.1.57.210 | attack | Oct 12 08:45:08 php1 sshd\[25171\]: Invalid user 123David from 187.1.57.210 Oct 12 08:45:08 php1 sshd\[25171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-187-1-57-210.isp.valenet.com.br Oct 12 08:45:10 php1 sshd\[25171\]: Failed password for invalid user 123David from 187.1.57.210 port 46766 ssh2 Oct 12 08:50:20 php1 sshd\[25759\]: Invalid user P4ssword!@\# from 187.1.57.210 Oct 12 08:50:20 php1 sshd\[25759\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-187-1-57-210.isp.valenet.com.br |
2019-10-13 03:01:48 |
| 222.186.190.92 | attackspam | Oct 12 21:06:37 tux-35-217 sshd\[15877\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.92 user=root Oct 12 21:06:39 tux-35-217 sshd\[15877\]: Failed password for root from 222.186.190.92 port 11922 ssh2 Oct 12 21:06:43 tux-35-217 sshd\[15877\]: Failed password for root from 222.186.190.92 port 11922 ssh2 Oct 12 21:06:47 tux-35-217 sshd\[15877\]: Failed password for root from 222.186.190.92 port 11922 ssh2 ... |
2019-10-13 03:20:38 |
| 219.90.115.237 | attack | Lines containing failures of 219.90.115.237 Oct 7 08:35:02 shared06 sshd[31696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.90.115.237 user=r.r Oct 7 08:35:04 shared06 sshd[31696]: Failed password for r.r from 219.90.115.237 port 21589 ssh2 Oct 7 08:35:04 shared06 sshd[31696]: Received disconnect from 219.90.115.237 port 21589:11: Bye Bye [preauth] Oct 7 08:35:04 shared06 sshd[31696]: Disconnected from authenticating user r.r 219.90.115.237 port 21589 [preauth] Oct 7 08:49:40 shared06 sshd[3547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.90.115.237 user=r.r Oct 7 08:49:42 shared06 sshd[3547]: Failed password for r.r from 219.90.115.237 port 28954 ssh2 Oct 7 08:49:42 shared06 sshd[3547]: Received disconnect from 219.90.115.237 port 28954:11: Bye Bye [preauth] Oct 7 08:49:42 shared06 sshd[3547]: Disconnected from authenticating user r.r 219.90.115.237 port 28954 [pr........ ------------------------------ |
2019-10-13 03:23:22 |