City: unknown
Region: unknown
Country: Poland
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 178.42.146.216
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54507
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;178.42.146.216. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 16:37:36 CST 2025
;; MSG SIZE rcvd: 107
216.146.42.178.in-addr.arpa domain name pointer 178.42.146.216.ipv4.supernova.orange.pl.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
216.146.42.178.in-addr.arpa name = 178.42.146.216.ipv4.supernova.orange.pl.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 86.57.162.221 | attackspambots | Unauthorized connection attempt from IP address 86.57.162.221 on Port 445(SMB) |
2019-11-17 23:31:51 |
| 173.249.60.176 | attackbots | ... |
2019-11-17 23:53:18 |
| 203.236.117.51 | attack | Portscan or hack attempt detected by psad/fwsnort |
2019-11-17 23:35:55 |
| 159.203.13.141 | attack | Nov 17 15:56:37 sd-53420 sshd\[2027\]: User root from 159.203.13.141 not allowed because none of user's groups are listed in AllowGroups Nov 17 15:56:37 sd-53420 sshd\[2027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.13.141 user=root Nov 17 15:56:39 sd-53420 sshd\[2027\]: Failed password for invalid user root from 159.203.13.141 port 40090 ssh2 Nov 17 16:00:23 sd-53420 sshd\[3098\]: Invalid user office from 159.203.13.141 Nov 17 16:00:23 sd-53420 sshd\[3098\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.13.141 ... |
2019-11-17 23:56:39 |
| 222.71.141.254 | attack | Nov 17 16:54:15 arianus sshd\[6029\]: Unable to negotiate with 222.71.141.254 port 58690: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 \[preauth\] ... |
2019-11-17 23:59:23 |
| 222.186.180.17 | attackbotsspam | Nov 17 21:10:49 vibhu-HP-Z238-Microtower-Workstation sshd\[26282\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root Nov 17 21:10:52 vibhu-HP-Z238-Microtower-Workstation sshd\[26282\]: Failed password for root from 222.186.180.17 port 50840 ssh2 Nov 17 21:11:12 vibhu-HP-Z238-Microtower-Workstation sshd\[26302\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root Nov 17 21:11:15 vibhu-HP-Z238-Microtower-Workstation sshd\[26302\]: Failed password for root from 222.186.180.17 port 1392 ssh2 Nov 17 21:11:36 vibhu-HP-Z238-Microtower-Workstation sshd\[26326\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root ... |
2019-11-17 23:47:30 |
| 46.38.144.57 | attackbots | Nov 17 16:35:33 relay postfix/smtpd\[19665\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 17 16:35:50 relay postfix/smtpd\[24839\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 17 16:36:09 relay postfix/smtpd\[18773\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 17 16:36:27 relay postfix/smtpd\[18242\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 17 16:36:45 relay postfix/smtpd\[28771\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-11-17 23:45:45 |
| 103.134.133.40 | attack | " " |
2019-11-17 23:42:17 |
| 177.126.138.238 | attack | 19/11/17@09:45:06: FAIL: IoT-Telnet address from=177.126.138.238 ... |
2019-11-17 23:51:49 |
| 115.68.220.10 | attack | Nov 17 15:23:40 *** sshd[28842]: User root from 115.68.220.10 not allowed because not listed in AllowUsers |
2019-11-17 23:48:21 |
| 222.142.201.205 | attackbots | Honeypot attack, port: 23, PTR: hn.kd.ny.adsl. |
2019-11-17 23:48:06 |
| 111.231.233.243 | attackspam | Nov 17 16:15:09 meumeu sshd[23332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.233.243 Nov 17 16:15:10 meumeu sshd[23332]: Failed password for invalid user hanson123 from 111.231.233.243 port 51056 ssh2 Nov 17 16:21:15 meumeu sshd[24381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.233.243 ... |
2019-11-17 23:23:11 |
| 218.149.106.172 | attackspambots | Nov 17 16:21:26 mout sshd[19691]: Invalid user ginzburg from 218.149.106.172 port 35985 |
2019-11-17 23:55:59 |
| 62.4.14.198 | attackbotsspam | Unauthorized connection attempt from IP address 62.4.14.198 on Port 143(IMAP) |
2019-11-17 23:17:00 |
| 92.124.137.220 | attackbotsspam | FTP brute force ... |
2019-11-17 23:55:35 |