City: unknown
Region: unknown
Country: Portugal
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 94.62.56.78 | attack | Unauthorized connection attempt detected from IP address 94.62.56.78 to port 445 |
2020-06-29 03:58:25 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.62.56.110
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65311
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.62.56.110. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022800 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 23:53:26 CST 2025
;; MSG SIZE rcvd: 105110.56.62.94.in-addr.arpa domain name pointer 110.56.62.94.rev.vodafone.pt.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
110.56.62.94.in-addr.arpa name = 110.56.62.94.rev.vodafone.pt.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.42.100.26 | attackspam | Unauthorised access (Oct 17) SRC=202.42.100.26 LEN=52 TTL=113 ID=3223 DF TCP DPT=445 WINDOW=8192 SYN |
2019-10-18 05:02:15 |
| 201.32.178.190 | attack | Mar 20 00:26:23 odroid64 sshd\[29994\]: Invalid user telekom from 201.32.178.190 Mar 20 00:26:23 odroid64 sshd\[29994\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.32.178.190 Mar 20 00:26:25 odroid64 sshd\[29994\]: Failed password for invalid user telekom from 201.32.178.190 port 58970 ssh2 Apr 20 14:14:52 odroid64 sshd\[21092\]: Invalid user prasobsub from 201.32.178.190 Apr 20 14:14:52 odroid64 sshd\[21092\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.32.178.190 Apr 20 14:14:55 odroid64 sshd\[21092\]: Failed password for invalid user prasobsub from 201.32.178.190 port 55711 ssh2 ... |
2019-10-18 04:49:45 |
| 13.72.70.4 | attackspambots | SS5,WP GET /wp-includes/wlwmanifest.xml |
2019-10-18 04:32:52 |
| 185.53.88.35 | attack | \[2019-10-17 16:39:33\] SECURITY\[1898\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-17T16:39:33.048-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9442922550332",SessionID="0x7fc3acd88f58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.35/60483",ACLName="no_extension_match" \[2019-10-17 16:40:17\] SECURITY\[1898\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-17T16:40:17.352-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011442922550332",SessionID="0x7fc3ac04bd78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.35/51360",ACLName="no_extension_match" \[2019-10-17 16:41:09\] SECURITY\[1898\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-17T16:41:09.209-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011442922550332",SessionID="0x7fc3ac4b3418",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.35/55468",ACLName="no_extensi |
2019-10-18 04:42:14 |
| 121.204.164.111 | attack | Oct 17 16:48:50 firewall sshd[9586]: Invalid user Root123qwe from 121.204.164.111 Oct 17 16:48:52 firewall sshd[9586]: Failed password for invalid user Root123qwe from 121.204.164.111 port 54986 ssh2 Oct 17 16:53:25 firewall sshd[9715]: Invalid user law from 121.204.164.111 ... |
2019-10-18 04:26:57 |
| 201.39.71.75 | attackbotsspam | Oct 11 07:41:36 odroid64 sshd\[12176\]: User root from 201.39.71.75 not allowed because not listed in AllowUsers Oct 11 07:41:36 odroid64 sshd\[12176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.39.71.75 user=root Oct 11 07:41:38 odroid64 sshd\[12176\]: Failed password for invalid user root from 201.39.71.75 port 44729 ssh2 Oct 15 23:01:39 odroid64 sshd\[29094\]: Invalid user pi from 201.39.71.75 Oct 15 23:01:39 odroid64 sshd\[29094\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.39.71.75 Oct 15 23:01:41 odroid64 sshd\[29094\]: Failed password for invalid user pi from 201.39.71.75 port 41304 ssh2 Oct 19 21:18:47 odroid64 sshd\[28713\]: User root from 201.39.71.75 not allowed because not listed in AllowUsers Oct 19 21:18:47 odroid64 sshd\[28713\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.39.71.75 user=root Oct 19 21:18:49 odroid64 ... |
2019-10-18 04:40:30 |
| 185.136.159.26 | attackspambots | 0,23-02/01 [bc50/m60] concatform PostRequest-Spammer scoring: harare01_holz |
2019-10-18 04:29:44 |
| 132.232.132.103 | attack | Oct 17 22:42:21 markkoudstaal sshd[31363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.132.103 Oct 17 22:42:23 markkoudstaal sshd[31363]: Failed password for invalid user fctrserver1 from 132.232.132.103 port 33910 ssh2 Oct 17 22:46:56 markkoudstaal sshd[31818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.132.103 |
2019-10-18 04:52:21 |
| 201.49.127.212 | attackbots | Dec 20 14:36:19 odroid64 sshd\[10996\]: Invalid user oracle from 201.49.127.212 Dec 20 14:36:19 odroid64 sshd\[10996\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.49.127.212 Dec 20 14:36:20 odroid64 sshd\[10996\]: Failed password for invalid user oracle from 201.49.127.212 port 52942 ssh2 Dec 22 11:23:23 odroid64 sshd\[18467\]: Invalid user shane from 201.49.127.212 Dec 22 11:23:23 odroid64 sshd\[18467\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.49.127.212 Dec 22 11:23:24 odroid64 sshd\[18467\]: Failed password for invalid user shane from 201.49.127.212 port 54730 ssh2 Dec 23 22:01:23 odroid64 sshd\[24150\]: Invalid user testtest from 201.49.127.212 Dec 23 22:01:23 odroid64 sshd\[24150\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.49.127.212 Dec 23 22:01:25 odroid64 sshd\[24150\]: Failed password for invalid user testtest from 201 ... |
2019-10-18 04:26:35 |
| 54.36.180.236 | attack | SSH invalid-user multiple login attempts |
2019-10-18 04:47:54 |
| 5.189.16.37 | attack | Oct 17 22:12:27 mc1 kernel: \[2629513.227939\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=5.189.16.37 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=38297 PROTO=TCP SPT=45729 DPT=14369 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 17 22:14:19 mc1 kernel: \[2629625.603598\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=5.189.16.37 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=23979 PROTO=TCP SPT=45729 DPT=42258 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 17 22:16:33 mc1 kernel: \[2629759.892869\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=5.189.16.37 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=20239 PROTO=TCP SPT=45729 DPT=14598 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-18 04:49:04 |
| 117.33.230.4 | attackbotsspam | Oct 17 22:06:12 legacy sshd[24515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.33.230.4 Oct 17 22:06:13 legacy sshd[24515]: Failed password for invalid user jenn from 117.33.230.4 port 54886 ssh2 Oct 17 22:09:30 legacy sshd[24577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.33.230.4 ... |
2019-10-18 04:40:13 |
| 115.94.140.243 | attack | Invalid user tasha from 115.94.140.243 port 57014 |
2019-10-18 05:02:57 |
| 46.38.144.32 | attackbotsspam | Oct 17 22:41:00 relay postfix/smtpd\[11514\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 17 22:41:40 relay postfix/smtpd\[27414\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 17 22:44:43 relay postfix/smtpd\[28936\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 17 22:45:23 relay postfix/smtpd\[27413\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 17 22:48:25 relay postfix/smtpd\[19299\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-10-18 04:52:59 |
| 223.220.159.78 | attackspam | $f2bV_matches |
2019-10-18 04:59:50 |