City: Istanbul
Region: Istanbul
Country: Turkey
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 213.142.148.38 | attack | port scan and connect, tcp 1433 (ms-sql-s) |
2020-05-15 02:25:15 |
| 213.142.148.37 | attackspam | Unauthorized connection attempt detected from IP address 213.142.148.37 to port 445 |
2019-12-11 09:28:45 |
| 213.142.148.151 | attackbots | SASL Brute Force |
2019-11-24 16:21:35 |
| 213.142.148.149 | attackbotsspam | SASL Brute Force |
2019-11-24 13:23:37 |
| 213.142.148.141 | attackbots | Nov 24 08:59:31 our-server-hostname postfix/smtpd[26165]: connect from unknown[213.142.148.141] Nov 24 08:59:32 our-server-hostname postfix/smtpd[25209]: connect from unknown[213.142.148.141] Nov x@x Nov x@x Nov 24 08:59:34 our-server-hostname postfix/smtpd[26165]: 6E842A40327: client=unknown[213.142.148.141] Nov x@x Nov x@x Nov 24 08:59:34 our-server-hostname postfix/smtpd[25209]: A8912A40329: client=unknown[213.142.148.141] Nov 24 08:59:35 our-server-hostname postfix/smtpd[30228]: 3B6A6A4032A: client=unknown[127.0.0.1], orig_client=unknown[213.142.148.141] Nov 24 08:59:35 our-server-hostname amavis[27153]: (27153-05) Passed CLEAN, [213.142.148.141] [213.142.148.141] |
2019-11-24 08:56:04 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.142.148.116
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18254
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;213.142.148.116. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020100 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 01 22:34:28 CST 2025
;; MSG SIZE rcvd: 108
Host 116.148.142.213.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 116.148.142.213.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.92.0.138 | attackbots | Unauthorised connection attempt detected at AUO FR1 NODE2. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-07-17 13:48:02 |
| 218.92.0.248 | attackspambots | Jul 17 08:03:43 piServer sshd[23531]: Failed password for root from 218.92.0.248 port 4067 ssh2 Jul 17 08:03:47 piServer sshd[23531]: Failed password for root from 218.92.0.248 port 4067 ssh2 Jul 17 08:03:53 piServer sshd[23531]: Failed password for root from 218.92.0.248 port 4067 ssh2 Jul 17 08:03:57 piServer sshd[23531]: Failed password for root from 218.92.0.248 port 4067 ssh2 ... |
2020-07-17 14:04:12 |
| 149.56.102.43 | attackbotsspam | Jul 17 06:12:15 jumpserver sshd[99104]: Invalid user tas from 149.56.102.43 port 56318 Jul 17 06:12:17 jumpserver sshd[99104]: Failed password for invalid user tas from 149.56.102.43 port 56318 ssh2 Jul 17 06:20:24 jumpserver sshd[99708]: Invalid user roo from 149.56.102.43 port 45744 ... |
2020-07-17 14:27:03 |
| 61.177.172.54 | attack | 2020-07-17T08:52:08.231457afi-git.jinr.ru sshd[10792]: Failed password for root from 61.177.172.54 port 11945 ssh2 2020-07-17T08:52:11.745495afi-git.jinr.ru sshd[10792]: Failed password for root from 61.177.172.54 port 11945 ssh2 2020-07-17T08:52:15.278786afi-git.jinr.ru sshd[10792]: Failed password for root from 61.177.172.54 port 11945 ssh2 2020-07-17T08:52:15.278934afi-git.jinr.ru sshd[10792]: error: maximum authentication attempts exceeded for root from 61.177.172.54 port 11945 ssh2 [preauth] 2020-07-17T08:52:15.278949afi-git.jinr.ru sshd[10792]: Disconnecting: Too many authentication failures [preauth] ... |
2020-07-17 13:52:47 |
| 218.92.0.212 | attackbots | Jul 17 08:02:58 vps639187 sshd\[20882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.212 user=root Jul 17 08:03:00 vps639187 sshd\[20882\]: Failed password for root from 218.92.0.212 port 24010 ssh2 Jul 17 08:03:03 vps639187 sshd\[20882\]: Failed password for root from 218.92.0.212 port 24010 ssh2 ... |
2020-07-17 14:04:35 |
| 162.243.128.94 | attackspambots | Failed password for invalid user from 162.243.128.94 port 50350 ssh2 |
2020-07-17 13:48:38 |
| 85.93.20.170 | attack | Failed password for invalid user from 85.93.20.170 port 61244 ssh2 |
2020-07-17 13:52:02 |
| 209.141.58.20 | attackspambots | Jul 17 07:40:02 debian-2gb-nbg1-2 kernel: \[17222958.100860\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=209.141.58.20 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=54321 PROTO=TCP SPT=56025 DPT=22 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-07-17 14:25:41 |
| 164.68.112.178 | attackspambots | Failed password for invalid user from 164.68.112.178 port 54831 ssh2 |
2020-07-17 14:21:09 |
| 192.35.169.48 | attack | Failed password for invalid user from 192.35.169.48 port 5292 ssh2 |
2020-07-17 14:07:24 |
| 45.84.196.217 | attack | Failed password for invalid user from 45.84.196.217 port 45588 ssh2 |
2020-07-17 14:11:48 |
| 218.92.0.175 | attackbots | Jul 17 07:26:57 * sshd[2190]: Failed password for root from 218.92.0.175 port 11738 ssh2 Jul 17 07:27:15 * sshd[2190]: error: maximum authentication attempts exceeded for root from 218.92.0.175 port 11738 ssh2 [preauth] |
2020-07-17 13:45:44 |
| 121.171.120.62 | attack | Failed password for invalid user from 121.171.120.62 port 38566 ssh2 |
2020-07-17 13:49:09 |
| 112.85.42.172 | attackspam | 2020-07-17T07:29:28.114530sd-86998 sshd[5938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172 user=root 2020-07-17T07:29:30.502654sd-86998 sshd[5938]: Failed password for root from 112.85.42.172 port 24658 ssh2 2020-07-17T07:29:34.023508sd-86998 sshd[5938]: Failed password for root from 112.85.42.172 port 24658 ssh2 2020-07-17T07:29:28.114530sd-86998 sshd[5938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172 user=root 2020-07-17T07:29:30.502654sd-86998 sshd[5938]: Failed password for root from 112.85.42.172 port 24658 ssh2 2020-07-17T07:29:34.023508sd-86998 sshd[5938]: Failed password for root from 112.85.42.172 port 24658 ssh2 2020-07-17T07:29:28.114530sd-86998 sshd[5938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172 user=root 2020-07-17T07:29:30.502654sd-86998 sshd[5938]: Failed password for root from 112.85.42.172 p ... |
2020-07-17 13:50:56 |
| 85.209.0.103 | attackspambots | Jul 17 01:26:59 ny01 sshd[27266]: Failed password for root from 85.209.0.103 port 39390 ssh2 |
2020-07-17 13:51:14 |