City: Vantaa
Region: Uusimaa
Country: Finland
Internet Service Provider: Elisa
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 194.136.4.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16617
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;194.136.4.6. IN A
;; AUTHORITY SECTION:
. 519 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022061801 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 19 04:34:21 CST 2022
;; MSG SIZE rcvd: 104Host 6.4.136.194.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 6.4.136.194.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 175.140.171.245 | attackspam | trying to access non-authorized port |
2020-05-13 13:48:11 |
| 59.124.152.54 | attackspambots | 20/5/12@23:57:17: FAIL: Alarm-Network address from=59.124.152.54 20/5/12@23:57:17: FAIL: Alarm-Network address from=59.124.152.54 ... |
2020-05-13 14:25:03 |
| 35.237.32.45 | attack | May 12 23:57:31 Host-KEWR-E sshd[634]: Invalid user test from 35.237.32.45 port 37608 ... |
2020-05-13 14:14:33 |
| 91.134.248.211 | attackspam | SQL Injection Attempts |
2020-05-13 14:02:19 |
| 45.143.220.141 | attack | May 13 06:23:20 vps339862 kernel: \[8562715.813466\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:06:39:8f:aa:3b:a2:08:00 SRC=45.143.220.141 DST=51.254.206.43 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=57831 PROTO=TCP SPT=59408 DPT=82 SEQ=1323642782 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 May 13 06:26:29 vps339862 kernel: \[8562904.627120\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:06:39:8f:aa:3b:a2:08:00 SRC=45.143.220.141 DST=51.254.206.43 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=59555 PROTO=TCP SPT=59408 DPT=501 SEQ=3178964861 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 May 13 06:29:36 vps339862 kernel: \[8563092.014007\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:06:39:8f:aa:3b:a2:08:00 SRC=45.143.220.141 DST=51.254.206.43 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=21394 PROTO=TCP SPT=59408 DPT=84 SEQ=1732156909 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 May 13 06:31:49 vps339862 kernel: \[8563225.440809\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16: ... |
2020-05-13 14:21:26 |
| 165.22.193.235 | attackbots | 2020-05-13T05:44:01.122076shield sshd\[19569\]: Invalid user user from 165.22.193.235 port 44998 2020-05-13T05:44:01.125683shield sshd\[19569\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.193.235 2020-05-13T05:44:03.373858shield sshd\[19569\]: Failed password for invalid user user from 165.22.193.235 port 44998 ssh2 2020-05-13T05:47:39.034397shield sshd\[20493\]: Invalid user deploy from 165.22.193.235 port 53566 2020-05-13T05:47:39.054136shield sshd\[20493\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.193.235 |
2020-05-13 13:59:11 |
| 213.195.222.246 | attackbots | Autoban 213.195.222.246 AUTH/CONNECT |
2020-05-13 13:46:33 |
| 134.175.18.118 | attackbots | May 13 07:14:42 pkdns2 sshd\[56347\]: Failed password for root from 134.175.18.118 port 52740 ssh2May 13 07:17:25 pkdns2 sshd\[56494\]: Invalid user deploy from 134.175.18.118May 13 07:17:28 pkdns2 sshd\[56494\]: Failed password for invalid user deploy from 134.175.18.118 port 55978 ssh2May 13 07:20:18 pkdns2 sshd\[56664\]: Invalid user tf from 134.175.18.118May 13 07:20:20 pkdns2 sshd\[56664\]: Failed password for invalid user tf from 134.175.18.118 port 59220 ssh2May 13 07:23:00 pkdns2 sshd\[56753\]: Invalid user edu from 134.175.18.118 ... |
2020-05-13 13:57:10 |
| 80.211.113.192 | attackbotsspam | [MK-VM4] Blocked by UFW |
2020-05-13 13:49:17 |
| 129.204.205.231 | attackspambots | $f2bV_matches |
2020-05-13 14:14:52 |
| 178.128.175.10 | attack | May 13 06:09:51 srv01 sshd[17707]: Invalid user flexit from 178.128.175.10 port 49862 May 13 06:09:51 srv01 sshd[17707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.175.10 May 13 06:09:51 srv01 sshd[17707]: Invalid user flexit from 178.128.175.10 port 49862 May 13 06:09:53 srv01 sshd[17707]: Failed password for invalid user flexit from 178.128.175.10 port 49862 ssh2 May 13 06:13:56 srv01 sshd[17822]: Invalid user administrador from 178.128.175.10 port 58210 ... |
2020-05-13 13:44:39 |
| 62.57.192.50 | attack | May 13 03:57:51 ip-172-31-61-156 sshd[16463]: Invalid user tester from 62.57.192.50 ... |
2020-05-13 13:55:12 |
| 185.182.250.252 | attack | Port probing on unauthorized port 8080 |
2020-05-13 14:10:20 |
| 129.213.32.32 | attack | May 12 19:20:51 sachi sshd\[9445\]: Invalid user user3 from 129.213.32.32 May 12 19:20:51 sachi sshd\[9445\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.32.32 May 12 19:20:53 sachi sshd\[9445\]: Failed password for invalid user user3 from 129.213.32.32 port 10702 ssh2 May 12 19:22:22 sachi sshd\[9610\]: Invalid user daniela from 129.213.32.32 May 12 19:22:22 sachi sshd\[9610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.32.32 |
2020-05-13 14:12:13 |
| 177.69.67.248 | attackspambots | May 13 06:52:28 lukav-desktop sshd\[30665\]: Invalid user test from 177.69.67.248 May 13 06:52:29 lukav-desktop sshd\[30665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.69.67.248 May 13 06:52:30 lukav-desktop sshd\[30665\]: Failed password for invalid user test from 177.69.67.248 port 38632 ssh2 May 13 06:58:03 lukav-desktop sshd\[30826\]: Invalid user nagios from 177.69.67.248 May 13 06:58:03 lukav-desktop sshd\[30826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.69.67.248 |
2020-05-13 13:44:03 |