City: Rome
Region: Latium
Country: Italy
Internet Service Provider: unknown
Hostname: unknown
Organization: Telecom Italia
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 82.57.168.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49503
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;82.57.168.145. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019062100 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 22 00:30:10 CST 2019
;; MSG SIZE rcvd: 117145.168.57.82.in-addr.arpa domain name pointer host145-168-dynamic.57-82-r.retail.telecomitalia.it.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
145.168.57.82.in-addr.arpa name = host145-168-dynamic.57-82-r.retail.telecomitalia.it.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 157.245.237.33 | attackspambots | Oct 9 03:36:28 pornomens sshd\[18253\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.237.33 user=root Oct 9 03:36:30 pornomens sshd\[18253\]: Failed password for root from 157.245.237.33 port 46500 ssh2 Oct 9 03:44:35 pornomens sshd\[18334\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.237.33 user=root ... |
2020-10-09 13:50:21 |
| 185.239.242.142 | attack | 2020-10-09T05:26:57.093615randservbullet-proofcloud-66.localdomain sshd[20689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.239.242.142 user=root 2020-10-09T05:26:58.828198randservbullet-proofcloud-66.localdomain sshd[20689]: Failed password for root from 185.239.242.142 port 52700 ssh2 2020-10-09T05:26:59.056587randservbullet-proofcloud-66.localdomain sshd[20692]: Invalid user admin from 185.239.242.142 port 55192 ... |
2020-10-09 13:41:27 |
| 34.67.221.219 | attackspambots | SSH login attempts. |
2020-10-09 13:49:44 |
| 134.209.24.117 | attackbotsspam | Oct 9 07:13:02 abendstille sshd\[5898\]: Invalid user admin from 134.209.24.117 Oct 9 07:13:02 abendstille sshd\[5898\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.24.117 Oct 9 07:13:03 abendstille sshd\[5898\]: Failed password for invalid user admin from 134.209.24.117 port 50816 ssh2 Oct 9 07:16:26 abendstille sshd\[9261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.24.117 user=root Oct 9 07:16:28 abendstille sshd\[9261\]: Failed password for root from 134.209.24.117 port 56636 ssh2 ... |
2020-10-09 13:25:47 |
| 152.136.150.219 | attackspambots | Oct 9 04:19:42 abendstille sshd\[31935\]: Invalid user tester from 152.136.150.219 Oct 9 04:19:42 abendstille sshd\[31935\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.150.219 Oct 9 04:19:44 abendstille sshd\[31935\]: Failed password for invalid user tester from 152.136.150.219 port 51690 ssh2 Oct 9 04:25:34 abendstille sshd\[4910\]: Invalid user jobs from 152.136.150.219 Oct 9 04:25:34 abendstille sshd\[4910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.150.219 ... |
2020-10-09 13:43:07 |
| 68.183.42.27 | attackbotsspam | (sshd) Failed SSH login from 68.183.42.27 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 9 01:32:55 server2 sshd[27865]: Invalid user operator1 from 68.183.42.27 Oct 9 01:32:55 server2 sshd[27865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.42.27 Oct 9 01:32:56 server2 sshd[27865]: Failed password for invalid user operator1 from 68.183.42.27 port 60124 ssh2 Oct 9 01:42:16 server2 sshd[378]: Invalid user dell from 68.183.42.27 Oct 9 01:42:16 server2 sshd[378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.42.27 |
2020-10-09 13:51:06 |
| 183.237.191.186 | attackspambots | Oct 9 04:53:12 jumpserver sshd[598832]: Invalid user developer from 183.237.191.186 port 37994 Oct 9 04:53:14 jumpserver sshd[598832]: Failed password for invalid user developer from 183.237.191.186 port 37994 ssh2 Oct 9 04:55:04 jumpserver sshd[598841]: Invalid user adm from 183.237.191.186 port 34888 ... |
2020-10-09 13:43:56 |
| 117.192.180.139 | attackbotsspam | [N10.H2.VM2] Port Scanner Detected Blocked by UFW |
2020-10-09 13:23:27 |
| 220.186.170.72 | attack | SSH brute-force attempt |
2020-10-09 13:21:21 |
| 93.113.110.128 | attackspambots | Automatic report - Banned IP Access |
2020-10-09 13:47:08 |
| 119.29.216.238 | attackbots | Oct 8 22:53:15 dev0-dcde-rnet sshd[6866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.216.238 Oct 8 22:53:17 dev0-dcde-rnet sshd[6866]: Failed password for invalid user marketing from 119.29.216.238 port 34206 ssh2 Oct 8 22:56:53 dev0-dcde-rnet sshd[6892]: Failed password for root from 119.29.216.238 port 35458 ssh2 |
2020-10-09 13:42:26 |
| 139.199.248.199 | attackbots | 2020-10-09T08:13:01.269383lavrinenko.info sshd[5012]: Failed password for root from 139.199.248.199 port 11669 ssh2 2020-10-09T08:15:19.592081lavrinenko.info sshd[5161]: Invalid user admin from 139.199.248.199 port 11669 2020-10-09T08:15:19.603000lavrinenko.info sshd[5161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.248.199 2020-10-09T08:15:19.592081lavrinenko.info sshd[5161]: Invalid user admin from 139.199.248.199 port 11669 2020-10-09T08:15:20.846107lavrinenko.info sshd[5161]: Failed password for invalid user admin from 139.199.248.199 port 11669 ssh2 ... |
2020-10-09 13:30:02 |
| 180.89.58.27 | attack | Oct 9 11:38:06 NG-HHDC-SVS-001 sshd[1107]: Invalid user administrator from 180.89.58.27 ... |
2020-10-09 13:57:09 |
| 62.234.182.174 | attackbotsspam | Brute%20Force%20SSH |
2020-10-09 13:40:28 |
| 45.55.41.113 | attackbotsspam | Repeated brute force against a port |
2020-10-09 13:34:20 |