City: unknown
Region: unknown
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: Evry Norge As
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.114.89.154
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52871
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.114.89.154. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019051201 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon May 13 02:45:11 CST 2019
;; MSG SIZE rcvd: 118
Host 154.89.114.139.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 154.89.114.139.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 167.71.5.49 | attackbots | Sep 3 17:25:51 php2 sshd\[32697\]: Invalid user sorin from 167.71.5.49 Sep 3 17:25:51 php2 sshd\[32697\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.5.49 Sep 3 17:25:53 php2 sshd\[32697\]: Failed password for invalid user sorin from 167.71.5.49 port 42575 ssh2 Sep 3 17:29:37 php2 sshd\[698\]: Invalid user ts from 167.71.5.49 Sep 3 17:29:37 php2 sshd\[698\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.5.49 |
2019-09-04 11:54:55 |
| 39.105.183.128 | attackspam | " " |
2019-09-04 12:00:34 |
| 222.141.81.155 | attackspambots | " " |
2019-09-04 11:50:46 |
| 79.137.86.43 | attackspam | Sep 3 23:57:45 xtremcommunity sshd\[15591\]: Invalid user mis from 79.137.86.43 port 33540 Sep 3 23:57:45 xtremcommunity sshd\[15591\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.86.43 Sep 3 23:57:46 xtremcommunity sshd\[15591\]: Failed password for invalid user mis from 79.137.86.43 port 33540 ssh2 Sep 4 00:01:42 xtremcommunity sshd\[15749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.86.43 user=root Sep 4 00:01:44 xtremcommunity sshd\[15749\]: Failed password for root from 79.137.86.43 port 50526 ssh2 ... |
2019-09-04 12:07:24 |
| 58.140.91.76 | attack | Sep 4 04:17:15 web8 sshd\[30673\]: Invalid user tip from 58.140.91.76 Sep 4 04:17:15 web8 sshd\[30673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.140.91.76 Sep 4 04:17:18 web8 sshd\[30673\]: Failed password for invalid user tip from 58.140.91.76 port 28237 ssh2 Sep 4 04:21:50 web8 sshd\[510\]: Invalid user bianca from 58.140.91.76 Sep 4 04:21:50 web8 sshd\[510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.140.91.76 |
2019-09-04 12:29:19 |
| 157.230.16.197 | attackspam | Sep 4 05:41:21 markkoudstaal sshd[16996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.16.197 Sep 4 05:41:23 markkoudstaal sshd[16996]: Failed password for invalid user sirene from 157.230.16.197 port 41030 ssh2 Sep 4 05:45:17 markkoudstaal sshd[17366]: Failed password for sshd from 157.230.16.197 port 28697 ssh2 |
2019-09-04 11:48:29 |
| 200.16.132.202 | attackspam | Sep 4 06:48:07 docs sshd\[39580\]: Invalid user test from 200.16.132.202Sep 4 06:48:09 docs sshd\[39580\]: Failed password for invalid user test from 200.16.132.202 port 40576 ssh2Sep 4 06:53:10 docs sshd\[39734\]: Invalid user tip from 200.16.132.202Sep 4 06:53:12 docs sshd\[39734\]: Failed password for invalid user tip from 200.16.132.202 port 33314 ssh2Sep 4 06:57:57 docs sshd\[39906\]: Invalid user runo from 200.16.132.202Sep 4 06:57:58 docs sshd\[39906\]: Failed password for invalid user runo from 200.16.132.202 port 54273 ssh2 ... |
2019-09-04 12:12:26 |
| 69.164.212.109 | attackbotsspam | Lines containing failures of 69.164.212.109 Sep 3 20:18:03 metroid sshd[502]: Invalid user mint from 69.164.212.109 port 51654 Sep 3 20:18:03 metroid sshd[502]: Received disconnect from 69.164.212.109 port 51654:11: Bye Bye [preauth] Sep 3 20:18:03 metroid sshd[502]: Disconnected from invalid user mint 69.164.212.109 port 51654 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=69.164.212.109 |
2019-09-04 12:17:44 |
| 14.29.237.125 | attack | Sep 4 03:48:13 www_kotimaassa_fi sshd[25162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.237.125 Sep 4 03:48:15 www_kotimaassa_fi sshd[25162]: Failed password for invalid user malviya from 14.29.237.125 port 49950 ssh2 ... |
2019-09-04 12:00:52 |
| 202.98.213.159 | attackspambots | 10 attempts against mh-pma-try-ban on oak.magehost.pro |
2019-09-04 11:56:25 |
| 195.189.9.3 | attackbots | 35erYFt978XjZ8VCEvK6sobLAH46ZcyFAQ |
2019-09-04 12:20:06 |
| 43.225.167.166 | attack | Sep 2 12:41:22 localhost kernel: [1180298.121220] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=43.225.167.166 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=12934 PROTO=TCP SPT=57863 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 12:41:22 localhost kernel: [1180298.121250] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=43.225.167.166 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=12934 PROTO=TCP SPT=57863 DPT=445 SEQ=4147073861 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 OPT (02040218) Sep 3 23:29:20 localhost kernel: [1305576.499606] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=43.225.167.166 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=248 ID=63360 PROTO=TCP SPT=58376 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 3 23:29:20 localhost kernel: [1305576.499631] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=43.225.167.166 DST=[mungedIP2] LEN= |
2019-09-04 12:07:51 |
| 120.136.167.74 | attackspambots | Sep 3 23:58:43 vps200512 sshd\[13822\]: Invalid user gitolite from 120.136.167.74 Sep 3 23:58:43 vps200512 sshd\[13822\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.136.167.74 Sep 3 23:58:45 vps200512 sshd\[13822\]: Failed password for invalid user gitolite from 120.136.167.74 port 49669 ssh2 Sep 4 00:01:53 vps200512 sshd\[13903\]: Invalid user ahmed from 120.136.167.74 Sep 4 00:01:53 vps200512 sshd\[13903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.136.167.74 |
2019-09-04 12:15:04 |
| 82.233.232.25 | attackspam | Automatic report - Port Scan Attack |
2019-09-04 11:51:57 |
| 36.156.24.43 | attackspam | Sep 4 06:01:38 fr01 sshd[6622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.156.24.43 user=root Sep 4 06:01:41 fr01 sshd[6622]: Failed password for root from 36.156.24.43 port 53466 ssh2 ... |
2019-09-04 12:03:44 |