City: Fabriano
Region: The Marches
Country: Italy
Internet Service Provider: Vodafone
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.42.154.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3141
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.42.154.30. IN A
;; AUTHORITY SECTION:
. 308 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020042401 1800 900 604800 86400
;; Query time: 46 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Apr 25 07:17:44 CST 2020
;; MSG SIZE rcvd: 11530.154.42.2.in-addr.arpa domain name pointer net-2-42-154-30.cust.vodafonedsl.it.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
30.154.42.2.in-addr.arpa name = net-2-42-154-30.cust.vodafonedsl.it.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.8.119.166 | attack | Dec 4 14:49:56 mockhub sshd[18846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.8.119.166 Dec 4 14:49:58 mockhub sshd[18846]: Failed password for invalid user vonlehmden from 103.8.119.166 port 47112 ssh2 ... |
2019-12-05 06:51:40 |
| 191.100.26.142 | attackspam | 2019-12-04T22:46:39.269318 sshd[20509]: Invalid user server from 191.100.26.142 port 36562 2019-12-04T22:46:39.285884 sshd[20509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.100.26.142 2019-12-04T22:46:39.269318 sshd[20509]: Invalid user server from 191.100.26.142 port 36562 2019-12-04T22:46:41.054256 sshd[20509]: Failed password for invalid user server from 191.100.26.142 port 36562 ssh2 2019-12-04T22:55:09.197251 sshd[20753]: Invalid user shim from 191.100.26.142 port 58946 ... |
2019-12-05 06:50:24 |
| 93.208.34.159 | attack | Dec 4 23:48:59 mail postfix/smtpd[18111]: warning: p5DD0229F.dip0.t-ipconnect.de[93.208.34.159]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 4 23:49:22 mail postfix/smtpd[19238]: warning: p5DD0229F.dip0.t-ipconnect.de[93.208.34.159]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 4 23:51:45 mail postfix/smtpd[19410]: warning: p5DD0229F.dip0.t-ipconnect.de[93.208.34.159]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-12-05 06:56:14 |
| 34.92.1.74 | attackspam | Dec 4 22:32:27 * sshd[30473]: Failed password for backup from 34.92.1.74 port 42852 ssh2 Dec 4 22:38:46 * sshd[31232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.92.1.74 |
2019-12-05 06:41:14 |
| 156.220.179.77 | attackspam | Honeypot attack, port: 23, PTR: host-156.220.77.179-static.tedata.net. |
2019-12-05 06:48:52 |
| 188.166.105.228 | attackbots | Brute force SMTP login attempted. ... |
2019-12-05 06:54:12 |
| 139.199.13.142 | attackspambots | Dec 4 10:34:44 hanapaa sshd\[32000\]: Invalid user macmillan from 139.199.13.142 Dec 4 10:34:44 hanapaa sshd\[32000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 Dec 4 10:34:46 hanapaa sshd\[32000\]: Failed password for invalid user macmillan from 139.199.13.142 port 58746 ssh2 Dec 4 10:41:05 hanapaa sshd\[32662\]: Invalid user ABC1234%\^\&\* from 139.199.13.142 Dec 4 10:41:05 hanapaa sshd\[32662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 |
2019-12-05 06:32:38 |
| 138.68.242.43 | attackspambots | Dec 4 19:17:11 yesfletchmain sshd\[13247\]: User root from 138.68.242.43 not allowed because not listed in AllowUsers Dec 4 19:17:12 yesfletchmain sshd\[13247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.43 user=root Dec 4 19:17:14 yesfletchmain sshd\[13247\]: Failed password for invalid user root from 138.68.242.43 port 48554 ssh2 Dec 4 19:25:07 yesfletchmain sshd\[13632\]: User root from 138.68.242.43 not allowed because not listed in AllowUsers Dec 4 19:25:07 yesfletchmain sshd\[13632\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.43 user=root ... |
2019-12-05 06:34:04 |
| 222.186.175.148 | attackbots | Dec 4 23:34:35 jane sshd[16051]: Failed password for root from 222.186.175.148 port 40196 ssh2 Dec 4 23:34:39 jane sshd[16051]: Failed password for root from 222.186.175.148 port 40196 ssh2 ... |
2019-12-05 06:39:49 |
| 111.231.54.248 | attackbots | Dec 4 20:12:56 Ubuntu-1404-trusty-64-minimal sshd\[23707\]: Invalid user ident from 111.231.54.248 Dec 4 20:12:56 Ubuntu-1404-trusty-64-minimal sshd\[23707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.54.248 Dec 4 20:12:58 Ubuntu-1404-trusty-64-minimal sshd\[23707\]: Failed password for invalid user ident from 111.231.54.248 port 58253 ssh2 Dec 4 20:24:57 Ubuntu-1404-trusty-64-minimal sshd\[2797\]: Invalid user fogstad from 111.231.54.248 Dec 4 20:24:57 Ubuntu-1404-trusty-64-minimal sshd\[2797\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.54.248 |
2019-12-05 06:43:28 |
| 70.18.218.223 | attackbots | Dec 4 22:18:49 [host] sshd[18938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.18.218.223 user=root Dec 4 22:18:52 [host] sshd[18938]: Failed password for root from 70.18.218.223 port 34218 ssh2 Dec 4 22:25:08 [host] sshd[19074]: Invalid user wwwrun from 70.18.218.223 |
2019-12-05 06:42:02 |
| 167.71.72.70 | attackbots | Dec 4 19:52:19 hcbbdb sshd\[31282\]: Invalid user burkman from 167.71.72.70 Dec 4 19:52:19 hcbbdb sshd\[31282\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.72.70 Dec 4 19:52:21 hcbbdb sshd\[31282\]: Failed password for invalid user burkman from 167.71.72.70 port 45708 ssh2 Dec 4 19:57:57 hcbbdb sshd\[31904\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.72.70 user=root Dec 4 19:57:58 hcbbdb sshd\[31904\]: Failed password for root from 167.71.72.70 port 56464 ssh2 |
2019-12-05 06:30:07 |
| 182.61.179.75 | attackspambots | Too many connections or unauthorized access detected from Arctic banned ip |
2019-12-05 06:27:33 |
| 159.89.165.36 | attack | detected by Fail2Ban |
2019-12-05 06:30:31 |
| 40.87.127.217 | attackspambots | 2019-12-04T22:44:23.610794stark.klein-stark.info sshd\[14437\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.87.127.217 user=root 2019-12-04T22:44:25.710282stark.klein-stark.info sshd\[14437\]: Failed password for root from 40.87.127.217 port 56818 ssh2 2019-12-04T22:53:15.179540stark.klein-stark.info sshd\[15060\]: Invalid user kummet from 40.87.127.217 port 37098 2019-12-04T22:53:15.186692stark.klein-stark.info sshd\[15060\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.87.127.217 ... |
2019-12-05 06:43:56 |