City: Oslo
Region: Oslo
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.112.137.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34730
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.112.137.2. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024112700 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 27 22:58:45 CST 2024
;; MSG SIZE rcvd: 1062.137.112.139.in-addr.arpa domain name pointer tietoevry-owned-address-139-112-137-x.hidden-host.tietoevry.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
2.137.112.139.in-addr.arpa name = tietoevry-owned-address-139-112-137-x.hidden-host.tietoevry.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 43.243.75.34 | attackspam | Icarus honeypot on github |
2020-10-08 19:09:44 |
| 36.89.213.100 | attackbotsspam | $f2bV_matches |
2020-10-08 18:39:40 |
| 139.59.93.93 | attackspam | sshd: Failed password for .... from 139.59.93.93 port 48720 ssh2 (10 attempts) |
2020-10-08 18:50:13 |
| 191.101.200.6 | attackbots | SpamScore above: 10.0 |
2020-10-08 18:49:52 |
| 74.112.143.154 | attack | Lines containing failures of 74.112.143.154 Oct 7 22:31:29 node83 sshd[7285]: Invalid user admin from 74.112.143.154 port 51176 Oct 7 22:31:29 node83 sshd[7285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.112.143.154 Oct 7 22:31:32 node83 sshd[7285]: Failed password for invalid user admin from 74.112.143.154 port 51176 ssh2 Oct 7 22:31:32 node83 sshd[7285]: Connection closed by invalid user admin 74.112.143.154 port 51176 [preauth] Oct 7 22:31:35 node83 sshd[7292]: Invalid user admin from 74.112.143.154 port 51195 Oct 7 22:31:36 node83 sshd[7292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.112.143.154 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=74.112.143.154 |
2020-10-08 18:53:15 |
| 96.83.189.229 | attackbotsspam | Oct 8 00:37:21 web1 sshd\[29662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.83.189.229 user=root Oct 8 00:37:23 web1 sshd\[29662\]: Failed password for root from 96.83.189.229 port 59970 ssh2 Oct 8 00:41:10 web1 sshd\[30066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.83.189.229 user=root Oct 8 00:41:12 web1 sshd\[30066\]: Failed password for root from 96.83.189.229 port 38064 ssh2 Oct 8 00:45:02 web1 sshd\[30435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.83.189.229 user=root |
2020-10-08 18:56:51 |
| 101.206.162.170 | attack | (sshd) Failed SSH login from 101.206.162.170 (CN/China/-): 5 in the last 3600 secs |
2020-10-08 19:09:22 |
| 106.38.70.178 | attackspam | 1433/tcp 1433/tcp 1433/tcp... [2020-08-08/10-07]6pkt,1pt.(tcp) |
2020-10-08 18:59:16 |
| 190.24.138.66 | attackspambots | 445/tcp 445/tcp 445/tcp... [2020-09-09/10-07]7pkt,1pt.(tcp) |
2020-10-08 18:45:06 |
| 187.237.230.147 | attackbots | 445/tcp 445/tcp 445/tcp... [2020-08-11/10-07]5pkt,1pt.(tcp) |
2020-10-08 18:47:58 |
| 77.81.76.79 | attackbots | 445/tcp 445/tcp 445/tcp... [2020-08-15/10-07]6pkt,1pt.(tcp) |
2020-10-08 18:41:26 |
| 186.96.196.225 | attackspam | Attempted Brute Force (dovecot) |
2020-10-08 18:58:25 |
| 101.69.247.6 | attack | DATE:2020-10-07 22:40:57, IP:101.69.247.6, PORT:ssh SSH brute force auth (docker-dc) |
2020-10-08 19:13:48 |
| 93.142.251.70 | attack | 93.142.251.70 - - [08/Oct/2020:02:26:46 +0000] "POST /xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" "-" 93.142.251.70 - - [08/Oct/2020:02:28:06 +0000] "POST /xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" "-" 93.142.251.70 - - [08/Oct/2020:02:30:21 +0000] "POST /xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" "-" 93.142.251.70 - - [08/Oct/2020:02:31:29 +0000] "POST /xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" "-" 93.142.251.70 - - [08/Oct/2020:02:33:46 +0000] "POST /xmlrpc.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" "-" |
2020-10-08 19:00:31 |
| 206.189.121.234 | attackbotsspam | (sshd) Failed SSH login from 206.189.121.234 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 8 00:00:20 optimus sshd[8351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.121.234 user=root Oct 8 00:00:22 optimus sshd[8351]: Failed password for root from 206.189.121.234 port 58718 ssh2 Oct 8 00:03:57 optimus sshd[9275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.121.234 user=root Oct 8 00:03:59 optimus sshd[9275]: Failed password for root from 206.189.121.234 port 36460 ssh2 Oct 8 00:07:22 optimus sshd[10126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.121.234 user=root |
2020-10-08 19:16:39 |