City: unknown
Region: unknown
Country: Finland
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 193.143.178.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45176
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;193.143.178.142. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021902 1800 900 604800 86400
;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 10:13:34 CST 2025
;; MSG SIZE rcvd: 108Host 142.178.143.193.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 142.178.143.193.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 91.215.88.171 | attackspambots | 2020-03-21T01:23:48.844473shield sshd\[10164\]: Invalid user mukazhanov from 91.215.88.171 port 41388 2020-03-21T01:23:48.851230shield sshd\[10164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.215.88.171 2020-03-21T01:23:50.633966shield sshd\[10164\]: Failed password for invalid user mukazhanov from 91.215.88.171 port 41388 ssh2 2020-03-21T01:27:53.430709shield sshd\[11519\]: Invalid user dw from 91.215.88.171 port 59770 2020-03-21T01:27:53.438122shield sshd\[11519\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.215.88.171 |
2020-03-21 09:42:41 |
| 106.13.134.161 | attack | Invalid user dan from 106.13.134.161 port 33386 |
2020-03-21 10:02:34 |
| 123.30.76.140 | attackbotsspam | SASL PLAIN auth failed: ruser=... |
2020-03-21 09:54:20 |
| 118.24.101.182 | attackbotsspam | Invalid user vivek from 118.24.101.182 port 47638 |
2020-03-21 10:00:04 |
| 180.76.246.205 | attackbots | Mar 21 00:32:53 ip-172-31-62-245 sshd\[15006\]: Invalid user yangx from 180.76.246.205\ Mar 21 00:32:54 ip-172-31-62-245 sshd\[15006\]: Failed password for invalid user yangx from 180.76.246.205 port 41010 ssh2\ Mar 21 00:33:57 ip-172-31-62-245 sshd\[15012\]: Invalid user postgres from 180.76.246.205\ Mar 21 00:33:59 ip-172-31-62-245 sshd\[15012\]: Failed password for invalid user postgres from 180.76.246.205 port 53068 ssh2\ Mar 21 00:34:49 ip-172-31-62-245 sshd\[15028\]: Failed password for gnats from 180.76.246.205 port 35860 ssh2\ |
2020-03-21 09:59:06 |
| 129.211.60.4 | attackbots | DATE:2020-03-21 02:15:14, IP:129.211.60.4, PORT:ssh SSH brute force auth (docker-dc) |
2020-03-21 10:03:28 |
| 120.89.98.72 | attackspam | Mar 21 02:08:27 roki sshd[1666]: Invalid user coslive from 120.89.98.72 Mar 21 02:08:27 roki sshd[1666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.89.98.72 Mar 21 02:08:28 roki sshd[1666]: Failed password for invalid user coslive from 120.89.98.72 port 35186 ssh2 Mar 21 02:14:22 roki sshd[2227]: Invalid user rr from 120.89.98.72 Mar 21 02:14:22 roki sshd[2227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.89.98.72 ... |
2020-03-21 09:43:38 |
| 51.83.45.65 | attackbotsspam | Mar 21 01:00:41 odroid64 sshd\[9855\]: Invalid user teamspeak from 51.83.45.65 Mar 21 01:00:41 odroid64 sshd\[9855\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.45.65 ... |
2020-03-21 10:08:55 |
| 49.235.144.143 | attack | Mar 21 00:15:56 sd-53420 sshd\[13957\]: User plex from 49.235.144.143 not allowed because none of user's groups are listed in AllowGroups Mar 21 00:15:56 sd-53420 sshd\[13957\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.144.143 user=plex Mar 21 00:15:58 sd-53420 sshd\[13957\]: Failed password for invalid user plex from 49.235.144.143 port 43122 ssh2 Mar 21 00:21:49 sd-53420 sshd\[15854\]: Invalid user paul from 49.235.144.143 Mar 21 00:21:49 sd-53420 sshd\[15854\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.144.143 ... |
2020-03-21 09:50:04 |
| 49.51.164.212 | attack | Lines containing failures of 49.51.164.212 Mar 20 16:30:42 shared09 sshd[29898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.164.212 user=r.r Mar 20 16:30:44 shared09 sshd[29898]: Failed password for r.r from 49.51.164.212 port 57936 ssh2 Mar 20 16:30:44 shared09 sshd[29898]: Received disconnect from 49.51.164.212 port 57936:11: Bye Bye [preauth] Mar 20 16:30:44 shared09 sshd[29898]: Disconnected from authenticating user r.r 49.51.164.212 port 57936 [preauth] Mar 20 16:52:58 shared09 sshd[5380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.164.212 user=r.r Mar 20 16:53:00 shared09 sshd[5380]: Failed password for r.r from 49.51.164.212 port 36614 ssh2 Mar 20 16:53:00 shared09 sshd[5380]: Received disconnect from 49.51.164.212 port 36614:11: Bye Bye [preauth] Mar 20 16:53:00 shared09 sshd[5380]: Disconnected from authenticating user r.r 49.51.164.212 port 36614 [preauth] Ma........ ------------------------------ |
2020-03-21 10:14:07 |
| 83.241.232.51 | attackbotsspam | Mar 20 17:48:37 mockhub sshd[14613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.241.232.51 Mar 20 17:48:38 mockhub sshd[14613]: Failed password for invalid user aaa from 83.241.232.51 port 59004 ssh2 ... |
2020-03-21 10:16:48 |
| 103.242.118.167 | attack | SpamScore above: 10.0 |
2020-03-21 10:16:27 |
| 119.29.235.171 | attack | Mar 20 19:01:20 firewall sshd[24737]: Invalid user zhangshihao from 119.29.235.171 Mar 20 19:01:23 firewall sshd[24737]: Failed password for invalid user zhangshihao from 119.29.235.171 port 56046 ssh2 Mar 20 19:06:00 firewall sshd[25019]: Invalid user HTTP from 119.29.235.171 ... |
2020-03-21 09:52:30 |
| 121.78.221.22 | attackspam | Lines containing failures of 121.78.221.22 Mar 20 17:10:00 nexus sshd[4503]: Did not receive identification string from 121.78.221.22 port 55181 Mar 20 17:10:00 nexus sshd[4504]: Did not receive identification string from 121.78.221.22 port 44866 Mar 20 17:10:38 nexus sshd[4637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.78.221.22 user=r.r Mar 20 17:10:38 nexus sshd[4639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.78.221.22 user=r.r Mar 20 17:10:41 nexus sshd[4637]: Failed password for r.r from 121.78.221.22 port 46763 ssh2 Mar 20 17:10:41 nexus sshd[4639]: Failed password for r.r from 121.78.221.22 port 57111 ssh2 Mar 20 17:10:41 nexus sshd[4637]: Received disconnect from 121.78.221.22 port 46763:11: Bye Bye [preauth] Mar 20 17:10:41 nexus sshd[4637]: Disconnected from 121.78.221.22 port 46763 [preauth] Mar 20 17:10:41 nexus sshd[4639]: Received disconnect from 121.78.2........ ------------------------------ |
2020-03-21 10:23:12 |
| 45.133.99.4 | attack | 2020-03-21 02:42:18 dovecot_login authenticator failed for \(\[45.133.99.4\]\) \[45.133.99.4\]: 535 Incorrect authentication data \(set_id=mail@yt.gl\) 2020-03-21 02:42:26 dovecot_login authenticator failed for \(\[45.133.99.4\]\) \[45.133.99.4\]: 535 Incorrect authentication data 2020-03-21 02:42:36 dovecot_login authenticator failed for \(\[45.133.99.4\]\) \[45.133.99.4\]: 535 Incorrect authentication data 2020-03-21 02:42:37 dovecot_login authenticator failed for \(\[45.133.99.4\]\) \[45.133.99.4\]: 535 Incorrect authentication data 2020-03-21 02:42:43 dovecot_login authenticator failed for \(\[45.133.99.4\]\) \[45.133.99.4\]: 535 Incorrect authentication data 2020-03-21 02:42:43 dovecot_login authenticator failed for \(\[45.133.99.4\]\) \[45.133.99.4\]: 535 Incorrect authentication data ... |
2020-03-21 09:53:32 |