Jump to content


Photo

If you think opening a port to the internet is ok...


  • Please log in to reply
9 replies to this topic

#1 WanWizard

  • PLi® Core member
  • 68,309 posts

+1,719
Excellent

Posted 8 March 2019 - 14:35

Think again. ;)

 

This is the result of having port 22 exposed to the internet on a server, for a total of 78 minutes, while I was setting it up.

 Disconnecting after too many authentication failures for user:
    <unknown> : 77 Time(s)
 
 Illegal users from:
    undef: 783 times
    1.49.234.44: 1 time
    1.179.146.156: 1 time
    2.238.199.81 (2-238-199-81.ip245.fastwebnet.it): 1 time
    3.17.33.76 (ec2-3-17-33-76.us-east-2.compute.amazonaws.com): 1 time
    5.39.79.48 (ns339079.ip-5-39-79.eu): 1 time
    5.135.181.11 (ns3010967.ip-5-135-181.eu): 1 time
    5.196.68.203 (ns378329.ip-5-196-68.eu): 1 time
    8.12.253.7: 1 time
    13.68.204.58: 1 time
    13.84.128.191: 1 time
    14.18.47.233: 1 time
    14.18.81.117: 1 time
    14.18.100.90: 1 time
    14.29.250.24: 1 time
    24.44.18.253 (ool-182c12fd.dyn.optonline.net): 1 time
    24.73.36.119 (rrcs-24-73-36-119.se.biz.rr.com): 1 time
    24.227.36.74 (rrcs-24-227-36-74.se.biz.rr.com): 1 time
    27.50.18.13 (indonesiare.co.id): 1 time
    31.128.133.230 (nat-31-128-133-230.pool.powernet.com.ru): 1 time
    32.211.81.124: 1 time
    35.187.198.149 (149.198.187.35.bc.googleusercontent.com): 1 time
    35.189.237.181 (181.237.189.35.bc.googleusercontent.com): 1 time
    35.200.154.33 (33.154.200.35.bc.googleusercontent.com): 1 time
    35.205.250.168 (168.250.205.35.bc.googleusercontent.com): 1 time
    35.227.34.247 (247.34.227.35.bc.googleusercontent.com): 1 time
    35.236.185.83 (83.185.236.35.bc.googleusercontent.com): 1 time
    36.112.130.77: 1 time
    36.112.130.120: 1 time
    36.112.130.142: 1 time
    37.6.96.0: 1 time
    37.59.114.113 (113.ip-37-59-114.eu): 1 time
    37.139.13.105: 1 time
    37.187.96.130 (ns3105548.ip-37-187-96.eu): 1 time
    41.36.152.67 (host-41.36.152.67.tedata.net): 1 time
    41.82.254.90: 1 time
    41.138.51.69: 1 time
    41.159.18.20: 1 time
    41.164.78.60: 1 time
    43.229.12.86: 1 time
    43.249.226.6: 1 time
    45.55.67.128: 1 time
    45.55.176.173: 1 time
    45.55.225.152: 1 time
    45.55.226.212: 1 time
    45.64.222.16 (node-45-64-222-16.alliancebroadband.in): 1 time
    45.117.81.147: 1 time
    45.122.221.42: 1 time
    45.227.255.82 (hostby.okpayinvest.net): 1 time
    46.61.247.172: 1 time
    46.101.1.198: 1 time
    46.101.27.6: 1 time
    46.101.49.156: 1 time
    46.101.88.10 (crushdigital.co.uk): 1 time
    46.101.149.230: 1 time
    46.105.30.20 (20.ip-46-105-30.eu): 1 time
    46.105.124.36 (ns384492.ip-46-105-124.eu): 1 time
    46.146.238.117 (permraion.ru): 1 time
    46.164.155.9 (46-164-155-9.datagroup.ua): 1 time
    47.22.130.82 (ool-2f168252.static.optonline.net): 2 times
    47.22.135.70 (ool-2f168746.static.optonline.net): 1 time
    47.23.130.246 (ool-2f1782f6.static.optonline.net): 1 time
    49.5.3.5: 1 time
    49.247.210.176: 1 time
    50.199.225.204 (50-199-225-204-static.hfc.comcastbusiness.net): 1 time
    51.15.228.174 (174-228-15-51.rev.cloud.scaleway.com): 1 time
    51.38.37.69 (69.ip-51-38-37.eu): 1 time
    51.68.127.28 (28.ip-51-68-127.eu): 1 time
    51.75.18.120 (quaversoft.com): 1 time
    51.75.65.72 (72.ip-51-75-65.eu): 1 time
    51.75.122.16 (siid.ovh): 1 time
    51.75.202.218 (218.ip-51-75-202.eu): 1 time
    51.75.204.92 (92.ip-51-75-204.eu): 1 time
    51.75.205.122 (122.ip-51-75-205.eu): 1 time
    51.75.247.138 (138.ip-51-75-247.eu): 1 time
    51.75.251.33 (33.ip-51-75-251.eu): 2 times
    51.77.210.216 (216.ip-51-77-210.eu): 2 times
    51.77.213.181 (181.ip-51-77-213.eu): 1 time
    51.144.108.41: 1 time
    51.254.34.87 (87.ip-51-254-34.eu): 1 time
    51.254.124.208 (mail.mbrgroupint.com): 1 time
    51.254.218.83 (83.ip-51-254-218.eu): 1 time
    51.255.35.58 (58.ip-51-255-35.eu): 1 time
    51.255.168.202 (202.ip-51-255-168.eu): 1 time
    52.14.137.211 (ec2-52-14-137-211.us-east-2.compute.amazonaws.com): 1 time
    52.172.157.244: 1 time
    54.36.114.101 (ip-54-36-114.eu): 1 time
    54.36.151.64 (ip64.ip-54-36-151.eu): 1 time
    54.37.14.150 (150.ip-54-37-14.eu): 2 times
    54.37.15.217 (mta0.coach-de-golf.com): 1 time
    54.37.19.206 (206.ip-54-37-19.eu): 1 time
    54.37.232.108 (108.ip-54-37-232.eu): 2 times
    54.39.106.81 (ns560302.ip-54-39-106.net): 1 time
    54.67.66.101 (ec2-54-67-66-101.us-west-1.compute.amazonaws.com): 1 time
    58.49.235.204 (204.235.49.58.broad.wh.hb.dynamic.163data.com.cn): 1 time
    58.64.144.109: 1 time
    58.250.161.97: 1 time
    59.63.224.245: 1 time
    59.145.221.103 (www1.jbvnl.co.in): 1 time
    60.51.83.172: 1 time
    60.54.119.170: 1 time
    60.248.28.105 (60-248-28-105.HINET-IP.hinet.net): 1 time
    61.19.246.239: 1 time
    61.148.194.162: 1 time
    61.247.239.190 (abts-north-static-190.239.247.61.airtelbroadband.in): 1 time
    62.84.94.72 (Fiberlink.94-72.lynx.net.lb): 1 time
    67.207.95.95: 1 time
    68.32.12.137 (c-68-32-12-137.hsd1.mi.comcast.net): 1 time
    68.183.68.213: 1 time
    68.183.104.77: 1 time
    68.183.182.199: 1 time
    68.183.184.39: 1 time
    68.183.188.160 (intireo.com): 1 time
    69.162.119.2 (2-119-162-69.static.reverse.impreza.host): 1 time
    70.45.72.88 (dynamic.libertypr.net): 1 time
    71.56.218.201 (c-71-56-218-201.hsd1.co.comcast.net): 1 time
    73.200.146.217 (c-73-200-146-217.hsd1.va.comcast.net): 1 time
    73.207.34.185 (c-73-207-34-185.hsd1.ga.comcast.net): 1 time
    74.62.101.74 (rrcs-74-62-101-74.west.biz.rr.com): 1 time
    77.55.219.178 (dedicated-ail178.rev.nazwa.pl): 1 time
    77.82.91.124 (static77-82-91-124.kamchatka.ru): 1 time
    77.116.202.162 (77.116.202.162.wireless.dyn.drei.com): 1 time
    77.244.223.194: 1 time
    78.113.16.10 (10.16.113.78.rev.sfr.net): 1 time
    79.6.34.129 (host129-34-static.6-79-b.business.telecomitalia.it): 1 time
    79.106.191.5: 1 time
    79.137.33.20 (20.ip-79-137-33.eu): 2 times
    79.137.35.70 (70.ip-79-137-35.eu): 1 time
    79.145.62.60 (60.red-79-145-62.dynamicip.rima-tde.net): 2 times
    79.159.193.235 (235.red-79-159-193.dynamicip.rima-tde.net): 1 time
    80.21.111.26 (host26-111-static.21-80-b.business.telecomitalia.it): 1 time
    80.150.149.202: 1 time
    80.229.227.63 (mattrees007.plus.com): 1 time
    81.47.128.178 (178.red-81-47-128.staticip.rima-tde.net): 1 time
    81.118.52.78 (host78-52-static.118-81-b.business.telecomitalia.it): 1 time
    81.130.234.235 (host81-130-234-235.in-addr.btopenworld.com): 1 time
    81.158.220.175 (host81-158-220-175.range81-158.btcentralplus.com): 1 time
    81.218.92.106 (bzq-218-92-106.red.bezeqint.net): 1 time
    82.151.200.82: 1 time
    82.165.30.36 (amirdz.com): 1 time
    82.221.128.207 (vps31375.iceservers.net): 1 time
    83.221.216.100 (prts.donpac.ru): 1 time
    84.3.248.72 (5403F848.catv.pool.telekom.hu): 1 time
    84.54.37.69: 3 times
    84.120.209.249 (84.120.209.249.dyn.user.ono.com): 1 time
    84.129.189.74 (p5481BD4A.dip0.t-ipconnect.de): 1 time
    84.160.123.46 (p54A07B2E.dip0.t-ipconnect.de): 1 time
    85.28.83.23 (cable-85.28.83.23.coditel.net): 1 time
    85.223.155.218 (ll-218.155.223.85.lv.sovam.net.ua): 2 times
    86.98.154.106 (bba555604.alshamil.net.ae): 1 time
    86.237.21.48 (lfbn-1-9341-48.w86-237.abo.wanadoo.fr): 1 time
    88.60.43.229 (host229-43-static.60-88-b.business.telecomitalia.it): 1 time
    88.165.161.78 (mal59-2-88-165-161-78.fbx.proxad.net): 1 time
    88.209.98.78 (78.98.209.88.ded.monaco.mc): 1 time
    88.214.26.15 (hostby.fcloud.biz): 2 times
    89.3.236.207 (ip-207.net-89-3-236.rev.numericable.fr): 1 time
    89.38.149.65 (host65-149-38-89.static.arubacloud.fr): 1 time
    89.42.252.124: 1 time
    89.74.137.165 (89-74-137-165.dynamic.chello.pl): 1 time
    89.222.181.58 (host-181-58.dialog-k.ru): 1 time
    91.106.32.94: 1 time
    91.121.211.59 (ns364518.ip-91-121-211.eu): 1 time
    91.225.120.195 (host-195-osokorki.info): 1 time
    92.42.108.115: 1 time
    92.81.222.217: 1 time
    92.211.176.206 (ipservice-092-211-176-206.092.211.pools.vodafone-ip.de): 1 time
    92.222.15.70 (70.ip-92-222-15.eu): 1 time
    93.32.27.160 (93-32-27-160.ip31.fastwebnet.it): 1 time
    94.25.38.212: 1 time
    94.138.36.201: 1 time
    94.138.180.146 (94-138-180-146.ip.welcomeitalia.it): 1 time
    95.156.31.74: 1 time
    95.242.177.213 (host213-177-static.242-95-b.business.telecomitalia.it): 1 time
    96.48.244.48 (S01062c303348c09f.vf.shawcable.net): 1 time
    96.93.160.106 (96-93-160-106-static.hfc.comcastbusiness.net): 1 time
    96.114.71.146: 1 time
    96.224.240.84 (static-96-224-240-84.nycmny.fios.verizon.net): 1 time
    98.29.127.42 (mta-98-29-127-42.neo.rr.com): 1 time
    98.29.164.244 (mta-98-29-164-244.insight.rr.com): 1 time
    98.151.110.89 (cpe-98-151-110-89.hawaii.res.rr.com): 1 time
    101.91.199.83: 1 time
    101.96.113.54 (ci96.113-54.netnam.vn): 1 time
    101.230.211.162: 1 time
    103.16.202.174 (broadband.actcorp.in): 1 time
    103.23.100.217 (217.subnet-103.23.100.host.unnes.ac.id): 1 time
    103.48.80.252 (host.webvui.com): 1 time
    103.48.193.248: 1 time
    103.48.194.18: 1 time
    103.57.194.83: 1 time
    103.65.236.179 (179.236.65.in-addr.arpa): 1 time
    103.79.90.72 (host-103-79-90-72.temanggungkab.go.id): 1 time
    103.99.186.20: 1 time
    103.105.98.1 (ipv4-ip1-98-105-103.apik.co.id): 2 times
    103.211.110.75: 1 time
    103.213.251.190: 1 time
    103.238.132.111: 1 time
    103.245.181.208: 1 time
    103.254.67.162: 1 time
    104.131.57.64: 1 time
    104.131.93.33 (mcp.org.py): 1 time
    104.131.95.4: 1 time
    104.131.224.81: 1 time
    104.155.91.177 (177.91.155.104.bc.googleusercontent.com): 1 time
    104.168.133.140 (hwsrv-409874.hostwindsdns.com): 1 time
    104.236.125.73: 1 time
    104.236.175.127: 1 time
    104.236.181.158: 1 time
    104.237.255.204 (104-237-255-204-host.colocrossing.com): 1 time
    104.248.18.46: 1 time
    104.248.44.85: 1 time
    104.248.46.187: 1 time
    104.248.116.140: 1 time
    104.248.157.6: 1 time
    104.248.178.100: 1 time
    104.248.213.4: 1 time
    105.255.192.126: 1 time
    106.12.86.205: 1 time
    106.12.205.171: 1 time
    106.12.206.53: 1 time
    106.12.209.252: 1 time
    106.12.215.218: 1 time
    106.13.1.148: 1 time
    106.13.34.212: 1 time
    106.13.36.139: 1 time
    106.13.62.168: 1 time
    106.13.65.219: 1 time
    106.51.66.214 (broadband.actcorp.in): 3 times
    106.75.94.232: 1 time
    107.170.196.234: 1 time
    108.162.139.190 (108-162-139-190.cable.teksavvy.com): 1 time
    109.87.224.151 (151.224.87.109.triolan.net): 1 time
    109.92.27.17 (109-92-27-17.static.isp.telekom.rs): 1 time
    109.110.52.77: 1 time
    109.132.226.25 (25.226-132-109.adsl-dyn.isp.belgacom.be): 1 time
    109.161.57.125 (109-161-57-125.static.yaroslavl.ru): 1 time
    109.190.153.178 (178-153-190-109.dsl.ovh.fr): 1 time
    110.175.57.53 (110-175-57-53.static.tpgi.com.au): 1 time
    111.85.11.22: 1 time
    111.85.96.204: 1 time
    111.207.49.184: 1 time
    111.230.57.38: 1 time
    112.64.214.90: 1 time
    112.169.9.150: 1 time
    112.217.225.59: 1 time
    113.108.95.158: 1 time
    113.161.54.192 (static.vnpt.vn): 1 time
    113.164.244.98: 1 time
    114.67.22.130: 1 time
    114.80.118.185: 1 time
    114.94.121.48: 1 time
    114.250.150.6: 1 time
    115.68.74.184: 1 time
    115.84.112.98 (ftth.laotel.com): 1 time
    115.94.103.170: 1 time
    115.112.176.202 (115.112.176.202.static-idc-pune.vsnl.net.in): 1 time
    115.132.151.141: 1 time
    115.159.207.210: 1 time
    116.68.127.9 (9.127.68.116.asianet.co.in): 1 time
    116.90.81.14: 1 time
    116.196.83.181: 1 time
    116.213.196.231: 1 time
    116.226.34.220: 1 time
    117.52.87.43: 1 time
    117.66.243.77: 1 time
    117.141.6.210: 1 time
    117.255.216.106: 1 time
    118.24.14.220: 1 time
    118.24.30.97: 1 time
    118.24.33.65: 1 time
    118.24.44.129: 1 time
    118.25.23.120: 1 time
    118.27.32.189 (v118-27-32-189.td3s.static.cnode.io): 1 time
    118.34.12.35: 1 time
    118.70.182.157: 1 time
    118.89.215.146: 1 time
    118.100.157.179: 1 time
    118.122.95.224: 1 time
    118.126.99.72: 1 time
    118.127.253.52: 1 time
    118.163.149.163 (118-163-149-163.HINET-IP.hinet.net): 1 time
    118.163.178.146 (118-163-178-146.HINET-IP.hinet.net): 1 time
    119.9.94.12: 1 time
    119.15.167.84 (ci15.167-84.netnam.vn): 1 time
    119.29.8.136: 1 time
    119.29.11.242: 1 time
    119.29.39.236: 1 time
    119.29.220.116: 1 time
    119.39.120.166: 1 time
    119.207.126.86: 1 time
    119.226.30.110: 1 time
    119.235.21.180: 1 time
    120.31.134.32 (ns1.eflydns.net): 1 time
    120.132.13.138: 1 time
    120.197.96.29: 1 time
    121.7.127.92 (bb121-7-127-92.singnet.com.sg): 1 time
    121.8.124.244: 1 time
    121.49.99.12: 1 time
    121.67.246.139: 1 time
    121.74.252.79 (121-74-252-79.telstraclear.net): 3 times
    121.106.208.117 (KD121106208117.ppp-bb.dion.ne.jp): 1 time
    121.122.97.93: 1 time
    121.127.10.114 (ip-converge.10.127.121.in-addr.arpa): 1 time
    121.160.181.195: 1 time
    121.168.248.218: 1 time
    121.201.110.60 (121.201.110.60): 1 time
    121.227.153.126 (126.153.227.121.broad.sz.js.dynamic.163data.com.cn): 1 time
    122.2.16.126 (122.2.16.126.static.pldt.net): 1 time
    122.96.140.194: 1 time
    122.152.221.72: 1 time
    123.30.154.184 (static.vnpt.vn): 1 time
    123.59.142.109: 1 time
    123.59.188.7: 1 time
    123.125.196.210: 1 time
    123.206.13.46: 2 times
    123.206.89.168: 1 time
    123.207.38.221: 1 time
    123.207.86.118: 1 time
    123.207.152.113: 1 time
    123.207.231.63: 1 time
    123.207.233.84: 1 time
    124.43.13.199: 1 time
    124.47.9.102: 1 time
    124.204.78.106: 1 time
    124.207.188.68: 1 time
    125.130.110.20: 1 time
    125.133.65.226: 1 time
    125.227.39.62 (125-227-39-62.HINET-IP.hinet.net): 1 time
    125.227.130.5 (125-227-130-5.HINET-IP.hinet.net): 1 time
    128.0.117.157: 1 time
    128.199.67.204: 1 time
    128.199.82.144 (asepmaulanaismail.com): 1 time
    128.199.118.81: 1 time
    128.199.224.236 (bencherone.viredge.com): 1 time
    128.199.230.56: 1 time
    128.199.252.144 (dev2.d-enabled.me): 1 time
    129.28.140.254: 1 time
    129.144.3.230 (oc-129-144-3-230.compute.oraclecloud.com): 1 time
    129.146.208.64: 2 times
    130.255.155.144 (144-155-255-130.dynamic.t-mont.net.pl): 1 time
    132.232.69.133: 1 time
    132.248.44.87: 1 time
    132.255.70.125: 1 time
    134.175.80.27: 1 time
    136.32.33.70: 1 time
    136.63.96.92: 1 time
    137.74.47.22 (22.ip-137-74-47.eu): 1 time
    138.68.12.43: 1 time
    138.68.171.25: 1 time
    138.68.187.78 (238630.cloudwaysapps.com): 1 time
    138.68.243.135: 1 time
    138.186.55.195 (195.55.186.138.tecklinktelecom.com.br): 1 time
    138.197.5.191: 1 time
    138.197.113.110: 1 time
    138.197.199.249 (185439.cloudwaysapps.com): 2 times
    139.0.9.163 (webmail.triputra-group.com): 1 time
    139.59.21.101: 1 time
    139.59.25.252: 1 time
    139.59.69.76: 1 time
    139.59.74.143: 1 time
    139.59.78.236: 1 time
    139.59.105.141: 1 time
    139.59.135.84: 1 time
    139.59.170.23: 1 time
    139.162.122.110 (scan-8.security.ipip.net): 1 time
    139.199.228.133: 1 time
    140.143.139.14: 1 time
    140.143.208.180: 1 time
    140.143.249.134: 1 time
    142.93.109.33: 1 time
    142.93.177.246: 1 time
    142.93.200.96 (244372.cloudwaysapps.com): 1 time
    142.93.202.47: 1 time
    142.93.202.93 (beautymsl.com): 1 time
    142.93.210.90: 1 time
    142.93.238.225: 1 time
    142.93.253.120: 1 time
    144.22.112.42 (oc-144-22-112-42.compute.oraclecloud.com): 1 time
    144.217.237.117 (viva.isrv.tech): 1 time
    145.239.92.73 (73.ip-145-239-92.eu): 1 time
    145.239.95.55 (55.ip-145-239-95.eu): 1 time
    146.52.146.213 (ip923492d5.dynamic.kabel-deutschland.de): 1 time
    146.185.148.7: 1 time
    149.202.148.185: 1 time
    149.202.210.121 (ns3040358.ip-149-202-210.eu): 1 time
    150.95.156.167 (v150-95-156-167.a095.g.tyo1.static.cnode.io): 1 time
    150.109.52.125: 1 time
    150.109.112.8: 2 times
    150.162.11.229: 1 time
    151.80.153.174 (p2.ajeel.be): 1 time
    157.92.26.222 (arkham.dc.uba.ar): 1 time
    157.230.56.187: 2 times
    157.230.110.11: 1 time
    157.230.163.6: 1 time
    157.230.246.150: 1 time
    158.69.222.121 (121.ip-158-69-222.net): 1 time
    158.69.223.213 (213.ip-158-69-223.net): 1 time
    159.65.54.221: 1 time
    159.65.144.233: 1 time
    159.65.148.159 (xenisis.com): 1 time
    159.65.155.227: 1 time
    159.65.244.4: 1 time
    159.89.121.126: 1 time
    159.89.153.54: 1 time
    159.89.169.109: 1 time
    159.89.235.61: 1 time
    159.203.67.146: 1 time
    159.203.198.34: 1 time
    161.246.94.246: 1 time
    162.243.158.185: 1 time
    164.132.99.59 (59.ip-164-132-99.eu): 1 time
    164.132.225.151 (151.ip-164-132-225.eu): 1 time
    164.132.230.244 (244.ip-164-132-230.eu): 1 time
    165.90.69.210: 1 time
    165.227.9.145: 1 time
    165.227.11.173 (209310.cloudwaysapps.com): 1 time
    165.227.25.45: 1 time
    167.99.5.96: 1 time
    167.99.8.158: 1 time
    167.99.35.1: 1 time
    167.99.66.83: 1 time
    167.99.71.144 (tijilihotels.com): 1 time
    167.99.75.174: 1 time
    167.99.212.179: 1 time
    167.99.220.199: 1 time
    167.99.230.57: 1 time
    167.114.113.173 (vps2.gerin.us): 1 time
    167.114.153.77 (77.ip-167-114-153.net): 1 time
    168.90.89.198 (168.90.89.198.megalinkpi.net.br): 1 time
    168.167.30.244: 1 time
    171.35.172.5 (5.172.35.171.adsl-pool.jx.chinaunicom.com): 1 time
    173.167.200.227 (173-167-200-227-ip-static.hfc.comcastbusiness.net): 1 time
    175.6.64.169: 1 time
    175.25.50.3: 1 time
    175.136.168.5: 1 time
    175.197.74.182: 1 time
    176.31.253.105 (ns388324.ip-176-31-253.eu): 1 time
    176.106.37.15 (15.37.106.176.ip4.krucznet.com.pl): 1 time
    177.7.217.57 (4832574137.e.brasiltelecom.net.br): 1 time
    177.69.118.197 (chat.assefaz.org.br): 1 time
    177.81.228.23 (b151e417.virtua.com.br): 1 time
    177.103.179.92 (177-103-179-92.dsl.telesp.net.br): 1 time
    177.124.216.10 (mvx-177-124-216-10.mundivox.com): 1 time
    178.60.253.3 (3.253.60.178.unassigned.reverse-mundo-r.com): 1 time
    178.62.8.222: 1 time
    178.62.57.230: 1 time
    178.128.13.21: 1 time
    178.128.79.169: 1 time
    178.128.86.127: 1 time
    178.128.146.108: 1 time
    178.128.202.35: 1 time
    178.128.250.103: 1 time
    178.140.97.112 (broadband-178-140-97-112.ip.moscow.rt.ru): 3 times
    179.43.140.69 (mail18.passivefranchiseincome.com): 1 time
    180.76.98.120: 1 time
    180.76.250.11: 1 time
    180.101.45.81: 1 time
    180.151.3.103 (kbase.velocis.info): 1 time
    180.161.74.110: 1 time
    180.165.128.114: 1 time
    180.250.162.9: 1 time
    181.52.249.26 (static-ip-18152024926.cable.net.co): 1 time
    181.166.206.31 (31-206-166-181.fibertel.com.ar): 1 time
    181.223.213.28 (b5dfd51c.virtua.com.br): 1 time
    182.61.14.163: 1 time
    182.73.124.10: 1 time
    183.82.100.141 (broadband.actcorp.in): 1 time
    185.66.213.64 (cloud264.zeto.com.pl): 1 time
    185.101.92.20 (srv.safe-online-payments.com): 1 time
    185.244.25.167: 3 times
    185.254.120.6: 10 times
    186.103.173.226 (bravissimo.cl): 1 time
    186.118.98.2: 1 time
    186.120.93.42 (adsl-93-42.tricom.net): 1 time
    186.206.132.57 (bace8439.virtua.com.br): 1 time
    186.226.82.58 (58.c.spo.pop.g8.net.br): 1 time
    187.58.65.21 (187.58.65.21.static.gvt.net.br): 1 time
    187.141.143.180 (customer-187-141-143-180-sta.uninet-ide.com.mx): 348 times
    187.174.123.121 (customer-187-174-123-121.uninet-ide.com.mx): 1 time
    187.189.60.153 (fixed-187-189-60-153.totalplay.net): 1 time
    188.165.211.201 (ns340537.ip-188-165-211.eu): 1 time
    188.166.36.210 (queue.utopian.io): 1 time
    188.194.135.163 (ipbcc287a3.dynamic.kabel-deutschland.de): 1 time
    188.219.40.66 (net-188-219-40-66.cust.vodafonedsl.it): 1 time
    188.254.0.106: 1 time
    189.238.130.80 (dsl-189-238-130-80-dyn.prod-infinitum.com.mx): 1 time
    190.30.178.32 (host32.190-30-178.telecom.net.ar): 1 time
    190.72.139.129 (190-72-139-129.dyn.dsl.cantv.net): 1 time
    190.129.69.147 (mail.fdi.gob.bo): 1 time
    190.144.161.11: 3 times
    190.147.166.247 (static-ip-cr190147166247.cable.net.co): 1 time
    190.159.72.114 (static-ip-19015972114.cable.net.co): 1 time
    190.186.170.82 (static-ip-adsl-190.186.170.82.cotas.com.bo): 1 time
    190.193.92.26 (26-92-193-190.cab.prima.net.ar): 1 time
    190.239.16.194: 1 time
    191.190.72.165 (bfbe48a5.virtua.com.br): 1 time
    192.99.244.105 (105.ip-192-99-244.net): 1 time
    192.241.175.52: 1 time
    192.241.201.182: 1 time
    193.112.9.213: 1 time
    193.112.90.84: 1 time
    193.201.224.214: 188 times
    193.226.12.208 (inception.cs.upt.ro): 1 time
    194.230.158.75: 1 time
    195.22.141.33 (195.22.141.33.users.bel.com.ua): 1 time
    195.70.44.11 (net.darenet.hu): 1 time
    195.84.49.20 (20.0-24.49.84.195.host.songnetworks.se): 1 time
    196.1.99.12: 1 time
    196.43.150.5: 1 time
    196.46.36.144: 1 time
    197.5.144.78: 1 time
    197.101.105.37 (197-101-105-37.ip.broadband.is): 1 time
    198.23.252.11 (198-23-252-11-host.colocrossing.com): 1 time
    198.27.67.173 (ns506646.ip-198-27-67.net): 2 times
    198.199.66.10: 1 time
    198.211.99.103: 1 time
    198.211.118.157: 3 times
    200.11.219.206 (200-11-219-206.estatic.cantv.net): 2 times
    200.54.242.46: 1 time
    200.105.133.188 (static-200-105-133-188.acelerate.net): 1 time
    200.201.11.129: 1 time
    200.207.220.128 (200-207-220-128.dsl.telesp.net.br): 1 time
    201.68.154.98 (201-68-154-98.dsl.telesp.net.br): 1 time
    201.163.180.183 (static-201-163-180-183.alestra.net.mx): 1 time
    202.51.74.189: 1 time
    202.51.114.235 (lan2.sigap.co.id): 1 time
    202.75.62.141 (ww5.netkl.org): 1 time
    202.77.102.133: 1 time
    202.88.241.107 (107.241.88.202.asianet.co.in): 1 time
    202.105.18.222: 1 time
    202.114.118.190: 1 time
    202.160.17.84 (espeed17-84.brunet.bn): 1 time
    203.110.240.201: 1 time
    203.150.231.66 (host66.truehits.co.th): 2 times
    203.190.9.115: 1 time
    204.48.18.3: 1 time
    206.189.7.22: 1 time
    206.189.88.75: 1 time
    206.189.131.213: 1 time
    206.189.158.24: 1 time
    206.189.165.31: 1 time
    206.189.184.81: 1 time
    206.189.204.75 (derp.danielbarnes.me): 1 time
    207.154.206.212: 1 time
    207.248.62.98 (mmredes-207-248-62-98.multimedios.net): 1 time
    209.97.170.244: 1 time
    209.141.33.7: 2 times
    209.141.52.206: 2 times
    210.21.87.251: 1 time
    210.21.226.2 (reverse.gdsz.cncnet.net): 1 time
    210.54.37.139: 1 time
    210.120.63.89: 1 time
    210.212.205.34: 1 time
    211.35.76.241: 1 time
    212.10.84.133 (d40a5485.rev.stofanet.dk): 1 time
    212.64.7.134: 1 time
    212.64.68.4: 1 time
    212.237.37.62 (borovoy.tk): 1 time
    213.47.38.104 (213-47-38-104.cable.dynamic.surfer.at): 1 time
    213.230.99.192: 1 time
    216.155.93.77: 1 time
    217.29.21.66 (217-29-21-66.saimanet.kg): 1 time
    217.145.239.38 (217.145.239.38.static.quadranet.com): 1 time
    217.218.225.36: 3 times
    217.219.104.28: 2 times
    217.219.106.146: 2 times
    218.17.245.44 (44.245.17.218.broad.sz.gd.dynamic.163data.com.cn): 1 time
    218.75.102.110: 1 time
    218.253.193.2 (mail2.netsoft.me): 1 time
    219.92.54.211: 2 times
    219.92.245.170 (tw-245-170.tm.net.my): 1 time
    219.119.75.148 (p075148.doubleroute.jp): 1 time
    220.90.129.103: 1 time
    220.135.135.165 (220-135-135-165.HINET-IP.hinet.net): 1 time
    221.160.100.14: 1 time
    221.221.155.98: 1 time
    221.230.53.66: 1 time
    221.232.130.28 (28.130.232.221.broad.wh.hb.dynamic.163data.com.cn): 1 time
    222.107.142.134: 1 time
    222.244.139.76: 1 time
    222.255.46.225 (static.vnpt.vn): 2 times
    223.99.248.117: 1 time
    223.197.175.171 (223-197-175-171.static.imsbiz.com): 1 time
    223.202.201.220: 1 time
 
 Login attempted when not in AllowUsers list:
    adm : 3 Time(s)
    daemon : 1 Time(s)
    ftp : 4 Time(s)
    lp : 1 Time(s)
    nobody : 2 Time(s)
    operator : 3 Time(s)
    root : 196 Time(s)
    sshd : 1 Time(s)
 
 
 Received disconnect:
    11:  [preauth] : 120 Time(s)
    11: Bye Bye [preauth] : 921 Time(s)
    11: Client disconnecting normally [preauth] : 1 Time(s)
    11: Normal Shutdown, Thank you for playing [preauth] : 135 Time(s)
    11: disconnected by user [preauth] : 3 Time(s)
    3: com.jcraft.jsch.JSchException: Auth fail [preauth] : 15 Time(s)
 
 Maximum authentication attemps exceeded:
     support:
      193.201.224.214: 2 Times(s)
    ftpuser:
      193.201.224.214: 1 Times(s)
    admin:
      193.201.224.214: 20 Times(s)
      178.140.97.112: 1 Times(s)
      1.49.234.44: 1 Times(s)
    ubnt:
      193.201.224.214: 3 Times(s)
      171.35.172.5: 1 Times(s)
      81.158.220.175: 1 Times(s)
    test:
      193.201.224.214: 2 Times(s)
    super:
      193.201.224.214: 1 Times(s)
    default:
      193.201.224.214: 1 Times(s)
    manager:
      193.201.224.214: 1 Times(s)
    adm:
      193.201.224.214: 2 Times(s)
    ftp:
      193.201.224.214: 1 Times(s)
    user:
      193.201.224.214: 3 Times(s)
    nagios:
      193.201.224.214: 1 Times(s)
    root:
      193.201.224.214: 21 Times(s)
      116.54.202.33: 1 Times(s)
      112.230.110.88: 1 Times(s)
      153.196.109.169: 1 Times(s)
      178.140.97.112: 2 Times(s)
      114.241.95.100: 1 Times(s)
      122.2.223.242: 1 Times(s)
      190.78.77.215: 1 Times(s)
      78.231.94.165: 1 Times(s)
      85.118.85.5: 1 Times(s)
    1234:
      193.201.224.214: 1 Times(s)

Currently in use: VU+ Duo 4K (2xFBC S2), VU+ Solo 4K (1xFBC S2), uClan Usytm 4K Pro (S2+T2), Octagon SF8008 (S2+T2), Zgemma H9.2H (S2+T2)

Due to my bad health, I will not be very active at times and may be slow to respond. I will not read the forum or PM on a regular basis.

Many answers to your question can be found in our new and improved wiki.


Re: If you think opening a port to the internet is ok... #2 Erik Slagter

  • PLi® Core member
  • 46,951 posts

+541
Excellent

Posted 8 March 2019 - 15:37

That's why I have a construction that anyone trying to connect to any port not required by myself, is completely banned for two weeks, all traffic will get dropped (not rejected, so it will also act as a cheap honeypot).

 

It's pathetic.


* Wavefrontier T90 with 28E/23E/19E/13E via SCR switches 2 x 2 x 6 user bands
I don't read PM -> if you have something to ask or to report, do it in the forum so others can benefit. I don't take freelance jobs.
Ik lees geen PM -> als je iets te vragen of te melden hebt, doe het op het forum, zodat anderen er ook wat aan hebben.


Re: If you think opening a port to the internet is ok... #3 littlesat

  • PLi® Core member
  • 56,123 posts

+685
Excellent

Posted 8 March 2019 - 16:13

Yep... also with other Ports you’ll have it...

WaveFrontier 28.2E | 23.5E | 19.2E | 16E | 13E | 10/9E | 7E | 5E | 1W | 4/5W | 15W


Re: If you think opening a port to the internet is ok... #4 WanWizard

  • PLi® Core member
  • 68,309 posts

+1,719
Excellent

Posted 8 March 2019 - 17:40

That is what I wanted to get across. "My device will not be found" is an illusion.


Currently in use: VU+ Duo 4K (2xFBC S2), VU+ Solo 4K (1xFBC S2), uClan Usytm 4K Pro (S2+T2), Octagon SF8008 (S2+T2), Zgemma H9.2H (S2+T2)

Due to my bad health, I will not be very active at times and may be slow to respond. I will not read the forum or PM on a regular basis.

Many answers to your question can be found in our new and improved wiki.


Re: If you think opening a port to the internet is ok... #5 athoik

  • PLi® Core member
  • 8,458 posts

+327
Excellent

Posted 8 March 2019 - 19:40

Port knocking might help keeping things hidden, but that requires iptables and some knowledge..
Wavefield T90: 0.8W - 1.9E - 4.8E - 13E - 16E - 19.2E - 23.5E - 26E - 33E - 39E - 42E - 45E on EMP Centauri DiseqC 16/1
Unamed: 13E Quattro - 9E Quattro on IKUSI MS-0916

Re: If you think opening a port to the internet is ok... #6 MiLo

  • PLi® Core member
  • 14,042 posts

+298
Excellent

Posted 8 March 2019 - 20:38

I wonder how many hits port 80 would get? Talking about honeypots...
Real musicians never die - they just decompose

Re: If you think opening a port to the internet is ok... #7 WanWizard

  • PLi® Core member
  • 68,309 posts

+1,719
Excellent

Posted 8 March 2019 - 21:18

I'm not going to find out.  ;)


Currently in use: VU+ Duo 4K (2xFBC S2), VU+ Solo 4K (1xFBC S2), uClan Usytm 4K Pro (S2+T2), Octagon SF8008 (S2+T2), Zgemma H9.2H (S2+T2)

Due to my bad health, I will not be very active at times and may be slow to respond. I will not read the forum or PM on a regular basis.

Many answers to your question can be found in our new and improved wiki.


Re: If you think opening a port to the internet is ok... #8 Pr2

  • PLi® Contributor
  • 6,046 posts

+256
Excellent

Posted 8 March 2019 - 23:22

People will argue that it is because you use a "well known port" they use higher port so they are safe.   :D


NO SUPPORT by PM, it is a forum make your question public so everybody can benefit from the question/answer.
If you think that my answer helps you, you can press the up arrow in bottom right of the answer.

Wanna help with OpenPLi Translation? Please read our Wiki Information for translators

Sat: Hotbird 13.0E, Astra 19.2E, Eutelsat5A 5.0W
VU+ Solo 4K: 2*DVB-S2 + 2*DVB-C/T/T2 (used in DVB-C) & Duo 4K: 2*DVB-S2X + DVB-C (FBC)

AB-Com: PULSe 4K 1*DVB-S2X (+ DVB-C/T/T2)
Edision OS Mio 4K: 1*DVB-S2X + 1*DVB-C/T/T2
 


Re: If you think opening a port to the internet is ok... #9 littlesat

  • PLi® Core member
  • 56,123 posts

+685
Excellent

Posted 9 March 2019 - 08:01

Even with higher ports you’ll have hits

WaveFrontier 28.2E | 23.5E | 19.2E | 16E | 13E | 10/9E | 7E | 5E | 1W | 4/5W | 15W


Re: If you think opening a port to the internet is ok... #10 40H3X

  • Forum Moderator
    PLi® Contributor
  • 5,782 posts

+186
Excellent

Posted 9 March 2019 - 08:22

That ip number from the Ukraine is giving it effort, busy pentester ;)


Edited by 40H3X, 10 March 2019 - 08:59.

Hardware: Vu+ Uno 4K SE - Vu+ Duo 4K  - Fuba 78 cm - Tripleblock LNB Quad 19.2/23.5/28.2 - DS918+
Software : OpenPLi - OSCam - Settings van Hans - Autotimer - EPGImport

---------------------------------------------------------------------------------------------------------------------------------------

Remember: Upvote with the rep_up.png button for any user/post you find to be helpful, informative, or deserving of recognition!

---------------------------------------------------------------------------------------------------------------------------------------

Many answers to your question can be found in our new and improved wiki

Note: I do not provide support via PM !.



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users