City: unknown
Region: unknown
Country: Russian Federation
Internet Service Provider: OJSC Ufanet
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attackbotsspam | unauthorized connection attempt |
2020-01-28 20:35:50 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 81.30.204.10 | attackbotsspam | Port probing on unauthorized port 81 |
2020-05-12 13:14:08 |
| 81.30.204.10 | attack | unauthorized connection attempt |
2020-01-28 14:25:42 |
| 81.30.204.10 | attackspam | port 23 |
2019-12-20 07:29:47 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.30.204.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37950
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.30.204.254. IN A
;; AUTHORITY SECTION:
. 336 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020012800 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 28 20:35:46 CST 2020
;; MSG SIZE rcvd: 117254.204.30.81.in-addr.arpa domain name pointer 81.30.204.254.static.ufanet.ru.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
254.204.30.81.in-addr.arpa name = 81.30.204.254.static.ufanet.ru.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.12.58.4 | attackspam | Lines containing failures of 106.12.58.4 Aug 12 21:17:01 nextcloud sshd[10197]: Invalid user hduser from 106.12.58.4 port 45064 Aug 12 21:17:01 nextcloud sshd[10197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.58.4 Aug 12 21:17:03 nextcloud sshd[10197]: Failed password for invalid user hduser from 106.12.58.4 port 45064 ssh2 Aug 12 21:17:04 nextcloud sshd[10197]: Received disconnect from 106.12.58.4 port 45064:11: Bye Bye [preauth] Aug 12 21:17:04 nextcloud sshd[10197]: Disconnected from invalid user hduser 106.12.58.4 port 45064 [preauth] Aug 12 21:50:46 nextcloud sshd[15713]: Invalid user admin from 106.12.58.4 port 37242 Aug 12 21:50:46 nextcloud sshd[15713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.58.4 Aug 12 21:50:48 nextcloud sshd[15713]: Failed password for invalid user admin from 106.12.58.4 port 37242 ssh2 Aug 12 21:50:48 nextcloud sshd[15713]: Received dis........ ------------------------------ |
2019-08-14 03:48:17 |
| 178.20.55.16 | attackbotsspam | Aug 13 21:05:10 mail sshd\[18222\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.20.55.16 user=root Aug 13 21:05:13 mail sshd\[18222\]: Failed password for root from 178.20.55.16 port 34155 ssh2 Aug 13 21:05:16 mail sshd\[18222\]: Failed password for root from 178.20.55.16 port 34155 ssh2 Aug 13 21:05:18 mail sshd\[18222\]: Failed password for root from 178.20.55.16 port 34155 ssh2 Aug 13 21:05:20 mail sshd\[18222\]: Failed password for root from 178.20.55.16 port 34155 ssh2 |
2019-08-14 03:38:42 |
| 150.109.198.225 | attackbots | Aug 13 20:13:32 XXX sshd[7092]: Invalid user feered from 150.109.198.225 port 54648 |
2019-08-14 03:21:05 |
| 221.12.17.81 | attack | $f2bV_matches |
2019-08-14 03:45:30 |
| 138.68.57.194 | attack | Aug 13 19:32:28 thevastnessof sshd[20924]: Failed password for invalid user antonio from 138.68.57.194 port 58836 ssh2 Aug 13 19:46:18 thevastnessof sshd[21117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.57.194 ... |
2019-08-14 03:55:06 |
| 141.98.9.42 | attackbotsspam | Rude login attack (143 tries in 1d) |
2019-08-14 03:37:00 |
| 139.99.201.100 | attackspam | Aug 13 22:36:42 www2 sshd\[3997\]: Invalid user admin from 139.99.201.100Aug 13 22:36:44 www2 sshd\[3997\]: Failed password for invalid user admin from 139.99.201.100 port 39796 ssh2Aug 13 22:42:30 www2 sshd\[4650\]: Invalid user tss3 from 139.99.201.100 ... |
2019-08-14 03:51:34 |
| 153.36.236.35 | attackspambots | Aug 13 21:33:54 ovpn sshd\[31968\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.236.35 user=root Aug 13 21:33:56 ovpn sshd\[31968\]: Failed password for root from 153.36.236.35 port 61420 ssh2 Aug 13 21:34:03 ovpn sshd\[31971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.236.35 user=root Aug 13 21:34:05 ovpn sshd\[31971\]: Failed password for root from 153.36.236.35 port 38279 ssh2 Aug 13 21:34:13 ovpn sshd\[32017\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.236.35 user=root |
2019-08-14 03:35:34 |
| 106.12.56.143 | attack | Aug 13 15:14:03 xtremcommunity sshd\[10817\]: Invalid user applmgr from 106.12.56.143 port 36458 Aug 13 15:14:03 xtremcommunity sshd\[10817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.56.143 Aug 13 15:14:04 xtremcommunity sshd\[10817\]: Failed password for invalid user applmgr from 106.12.56.143 port 36458 ssh2 Aug 13 15:19:57 xtremcommunity sshd\[10975\]: Invalid user test from 106.12.56.143 port 57580 Aug 13 15:19:57 xtremcommunity sshd\[10975\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.56.143 ... |
2019-08-14 03:24:29 |
| 94.12.194.81 | attackspambots | Automatic report - Port Scan Attack |
2019-08-14 03:30:28 |
| 211.22.154.223 | attackbotsspam | Aug 12 21:16:24 ns4 sshd[16652]: Invalid user faridah from 211.22.154.223 Aug 12 21:16:24 ns4 sshd[16652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211-22-154-223.hinet-ip.hinet.net Aug 12 21:16:25 ns4 sshd[16652]: Failed password for invalid user faridah from 211.22.154.223 port 45294 ssh2 Aug 12 21:30:54 ns4 sshd[19100]: Invalid user fhostnamecadftp from 211.22.154.223 Aug 12 21:30:54 ns4 sshd[19100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211-22-154-223.hinet-ip.hinet.net Aug 12 21:30:56 ns4 sshd[19100]: Failed password for invalid user fhostnamecadftp from 211.22.154.223 port 37364 ssh2 Aug 12 21:36:09 ns4 sshd[20177]: Invalid user patricia from 211.22.154.223 Aug 12 21:36:09 ns4 sshd[20177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211-22-154-223.hinet-ip.hinet.net Aug 12 21:36:10 ns4 sshd[20177]: Failed password for inva........ ------------------------------- |
2019-08-14 03:17:48 |
| 107.170.113.190 | attackspam | Aug 13 20:12:34 XXX sshd[7072]: Invalid user ethereal from 107.170.113.190 port 59380 |
2019-08-14 03:11:52 |
| 197.25.190.163 | attackbots | Automatic report - Port Scan Attack |
2019-08-14 03:54:21 |
| 209.141.58.114 | attack | Aug 13 19:09:35 marvibiene sshd[35294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.58.114 user=root Aug 13 19:09:37 marvibiene sshd[35294]: Failed password for root from 209.141.58.114 port 54542 ssh2 Aug 13 19:09:40 marvibiene sshd[35294]: Failed password for root from 209.141.58.114 port 54542 ssh2 Aug 13 19:09:35 marvibiene sshd[35294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.58.114 user=root Aug 13 19:09:37 marvibiene sshd[35294]: Failed password for root from 209.141.58.114 port 54542 ssh2 Aug 13 19:09:40 marvibiene sshd[35294]: Failed password for root from 209.141.58.114 port 54542 ssh2 ... |
2019-08-14 03:15:41 |
| 58.211.168.246 | attackbotsspam | Aug 13 20:11:03 mail sshd[27119]: Invalid user fax from 58.211.168.246 Aug 13 20:11:03 mail sshd[27119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.211.168.246 Aug 13 20:11:03 mail sshd[27119]: Invalid user fax from 58.211.168.246 Aug 13 20:11:05 mail sshd[27119]: Failed password for invalid user fax from 58.211.168.246 port 51298 ssh2 Aug 13 20:28:04 mail sshd[29059]: Invalid user oracle from 58.211.168.246 ... |
2019-08-14 03:22:39 |