City: unknown
Region: unknown
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 200.149.54.143
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10967
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;200.149.54.143. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021701 1800 900 604800 86400
;; Query time: 76 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 12:52:29 CST 2025
;; MSG SIZE rcvd: 107Host 143.54.149.200.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 143.54.149.200.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 148.70.204.218 | attackspam | Sep 21 11:30:59 hanapaa sshd\[4550\]: Invalid user ec123 from 148.70.204.218 Sep 21 11:30:59 hanapaa sshd\[4550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.204.218 Sep 21 11:31:01 hanapaa sshd\[4550\]: Failed password for invalid user ec123 from 148.70.204.218 port 53746 ssh2 Sep 21 11:35:50 hanapaa sshd\[4946\]: Invalid user informix@123 from 148.70.204.218 Sep 21 11:35:51 hanapaa sshd\[4946\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.204.218 |
2019-09-22 05:49:33 |
| 218.92.0.212 | attackspambots | Sep 21 23:35:39 tux-35-217 sshd\[28257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.212 user=root Sep 21 23:35:41 tux-35-217 sshd\[28257\]: Failed password for root from 218.92.0.212 port 50393 ssh2 Sep 21 23:35:44 tux-35-217 sshd\[28257\]: Failed password for root from 218.92.0.212 port 50393 ssh2 Sep 21 23:35:47 tux-35-217 sshd\[28257\]: Failed password for root from 218.92.0.212 port 50393 ssh2 ... |
2019-09-22 05:52:03 |
| 94.191.48.165 | attackbotsspam | Sep 21 23:32:22 markkoudstaal sshd[882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.48.165 Sep 21 23:32:24 markkoudstaal sshd[882]: Failed password for invalid user etownsley from 94.191.48.165 port 36646 ssh2 Sep 21 23:35:54 markkoudstaal sshd[1169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.48.165 |
2019-09-22 05:48:23 |
| 206.189.142.10 | attackbots | Sep 21 11:47:59 web9 sshd\[8432\]: Invalid user teamspeak from 206.189.142.10 Sep 21 11:47:59 web9 sshd\[8432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.142.10 Sep 21 11:48:01 web9 sshd\[8432\]: Failed password for invalid user teamspeak from 206.189.142.10 port 49658 ssh2 Sep 21 11:52:15 web9 sshd\[9358\]: Invalid user didba from 206.189.142.10 Sep 21 11:52:15 web9 sshd\[9358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.142.10 |
2019-09-22 06:06:01 |
| 188.254.0.170 | attackspam | $f2bV_matches |
2019-09-22 06:14:59 |
| 110.77.230.48 | attack | Chat Spam |
2019-09-22 06:02:47 |
| 106.241.16.119 | attackspambots | Invalid user rfielding from 106.241.16.119 port 48528 |
2019-09-22 06:03:18 |
| 201.47.158.130 | attack | Sep 21 23:54:41 SilenceServices sshd[22153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.47.158.130 Sep 21 23:54:44 SilenceServices sshd[22153]: Failed password for invalid user pi from 201.47.158.130 port 52064 ssh2 Sep 21 23:59:32 SilenceServices sshd[23450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.47.158.130 |
2019-09-22 06:05:05 |
| 81.30.212.14 | attack | Sep 21 23:48:44 vps01 sshd[14808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.212.14 Sep 21 23:48:46 vps01 sshd[14808]: Failed password for invalid user toni from 81.30.212.14 port 45008 ssh2 |
2019-09-22 05:53:36 |
| 200.216.249.122 | attackbots | Attempt to attack host OS, exploiting network vulnerabilities, on 21-09-2019 22:35:20. |
2019-09-22 06:13:40 |
| 218.92.0.173 | attackspam | Sep 21 23:56:46 mail sshd[26632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.173 user=root Sep 21 23:56:48 mail sshd[26632]: Failed password for root from 218.92.0.173 port 32089 ssh2 Sep 21 23:57:01 mail sshd[26632]: Failed password for root from 218.92.0.173 port 32089 ssh2 Sep 21 23:56:46 mail sshd[26632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.173 user=root Sep 21 23:56:48 mail sshd[26632]: Failed password for root from 218.92.0.173 port 32089 ssh2 Sep 21 23:57:01 mail sshd[26632]: Failed password for root from 218.92.0.173 port 32089 ssh2 Sep 21 23:56:46 mail sshd[26632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.173 user=root Sep 21 23:56:48 mail sshd[26632]: Failed password for root from 218.92.0.173 port 32089 ssh2 Sep 21 23:57:01 mail sshd[26632]: Failed password for root from 218.92.0.173 port 32089 ssh2 Sep 21 23:57:01 mail sshd[26 |
2019-09-22 06:10:06 |
| 51.77.137.211 | attack | Sep 21 23:39:38 rotator sshd\[9236\]: Invalid user fq from 51.77.137.211Sep 21 23:39:40 rotator sshd\[9236\]: Failed password for invalid user fq from 51.77.137.211 port 49920 ssh2Sep 21 23:44:55 rotator sshd\[10027\]: Invalid user nero17 from 51.77.137.211Sep 21 23:44:57 rotator sshd\[10027\]: Failed password for invalid user nero17 from 51.77.137.211 port 49016 ssh2Sep 21 23:48:14 rotator sshd\[10805\]: Invalid user sbrown from 51.77.137.211Sep 21 23:48:16 rotator sshd\[10805\]: Failed password for invalid user sbrown from 51.77.137.211 port 33730 ssh2 ... |
2019-09-22 05:59:43 |
| 162.243.131.154 | attackspam | Lines containing failures of 162.243.131.154 (max 1000) Sep 21 22:31:50 localhost sshd[13232]: User r.r from 162.243.131.154 not allowed because listed in DenyUsers Sep 21 22:31:50 localhost sshd[13232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.131.154 user=r.r Sep 21 22:31:52 localhost sshd[13232]: Failed password for invalid user r.r from 162.243.131.154 port 33977 ssh2 Sep 21 22:31:52 localhost sshd[13232]: Connection closed by invalid user r.r 162.243.131.154 port 33977 [preauth] Sep 21 22:48:55 localhost sshd[15432]: User r.r from 162.243.131.154 not allowed because listed in DenyUsers Sep 21 22:48:55 localhost sshd[15432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.131.154 user=r.r Sep 21 22:48:57 localhost sshd[15432]: Failed password for invalid user r.r from 162.243.131.154 port 34267 ssh2 Sep 21 22:48:59 localhost sshd[15432]: Connection closed by inval........ ------------------------------ |
2019-09-22 06:02:20 |
| 5.189.130.32 | attackbotsspam | Sep 22 00:25:47 site1 sshd\[28242\]: Invalid user dusseldorf from 5.189.130.32Sep 22 00:25:49 site1 sshd\[28242\]: Failed password for invalid user dusseldorf from 5.189.130.32 port 51766 ssh2Sep 22 00:30:43 site1 sshd\[28554\]: Invalid user tulia from 5.189.130.32Sep 22 00:30:45 site1 sshd\[28554\]: Failed password for invalid user tulia from 5.189.130.32 port 35490 ssh2Sep 22 00:35:39 site1 sshd\[28714\]: Invalid user gpadmin from 5.189.130.32Sep 22 00:35:41 site1 sshd\[28714\]: Failed password for invalid user gpadmin from 5.189.130.32 port 47444 ssh2 ... |
2019-09-22 05:56:55 |
| 173.212.207.189 | attack | SSH Brute-Force reported by Fail2Ban |
2019-09-22 06:12:57 |