City: unknown
Region: unknown
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.164.131.202
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38782
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.164.131.202. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020400 1800 900 604800 86400
;; Query time: 31 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 21:38:51 CST 2025
;; MSG SIZE rcvd: 108Host 202.131.164.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 202.131.164.139.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 144.217.255.89 | attackspambots | 2019-09-24T17:49:26.245802abusebot.cloudsearch.cf sshd\[9661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns542132.ip-144-217-255.net user=root |
2019-09-25 04:45:57 |
| 142.93.172.64 | attackspam | Sep 24 18:17:31 ns37 sshd[31703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.172.64 |
2019-09-25 04:34:05 |
| 104.236.252.162 | attackbots | Sep 24 23:00:05 server sshd\[29391\]: Invalid user toor from 104.236.252.162 port 46676 Sep 24 23:00:05 server sshd\[29391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.252.162 Sep 24 23:00:07 server sshd\[29391\]: Failed password for invalid user toor from 104.236.252.162 port 46676 ssh2 Sep 24 23:04:01 server sshd\[3774\]: Invalid user gt from 104.236.252.162 port 58342 Sep 24 23:04:01 server sshd\[3774\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.252.162 |
2019-09-25 04:21:08 |
| 14.33.133.188 | attackbotsspam | SSH bruteforce (Triggered fail2ban) Sep 24 21:32:17 dev1 sshd[95087]: error: maximum authentication attempts exceeded for invalid user root from 14.33.133.188 port 42135 ssh2 [preauth] Sep 24 21:32:17 dev1 sshd[95087]: Disconnecting invalid user root 14.33.133.188 port 42135: Too many authentication failures [preauth] |
2019-09-25 04:29:23 |
| 142.44.137.62 | attack | Sep 24 02:31:19 tdfoods sshd\[1865\]: Invalid user devsql from 142.44.137.62 Sep 24 02:31:19 tdfoods sshd\[1865\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns549998.ip-142-44-137.net Sep 24 02:31:21 tdfoods sshd\[1865\]: Failed password for invalid user devsql from 142.44.137.62 port 40760 ssh2 Sep 24 02:35:32 tdfoods sshd\[2263\]: Invalid user jboss from 142.44.137.62 Sep 24 02:35:32 tdfoods sshd\[2263\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns549998.ip-142-44-137.net |
2019-09-25 04:47:01 |
| 116.44.150.138 | attack | port scan and connect, tcp 8080 (http-proxy) |
2019-09-25 04:41:26 |
| 81.22.45.165 | attackspambots | Sep 24 22:31:08 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.165 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=18188 PROTO=TCP SPT=57112 DPT=7475 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-25 04:33:18 |
| 165.22.246.63 | attack | Sep 24 22:14:25 h2177944 sshd\[27550\]: Invalid user family from 165.22.246.63 port 41846 Sep 24 22:14:25 h2177944 sshd\[27550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.246.63 Sep 24 22:14:27 h2177944 sshd\[27550\]: Failed password for invalid user family from 165.22.246.63 port 41846 ssh2 Sep 24 22:19:09 h2177944 sshd\[27707\]: Invalid user demo from 165.22.246.63 port 55040 ... |
2019-09-25 04:27:21 |
| 222.186.42.4 | attack | v+ssh-bruteforce |
2019-09-25 04:18:29 |
| 40.73.100.56 | attackspambots | Sep 24 21:43:41 MK-Soft-Root2 sshd[19151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.100.56 Sep 24 21:43:43 MK-Soft-Root2 sshd[19151]: Failed password for invalid user filter from 40.73.100.56 port 39764 ssh2 ... |
2019-09-25 04:39:01 |
| 112.45.122.7 | attackbots | Trying to log into mailserver (postfix/smtp) using multiple names and passwords |
2019-09-25 04:55:11 |
| 119.196.83.2 | attackbotsspam | Sep 22 19:04:38 tuxlinux sshd[37380]: Invalid user tj from 119.196.83.2 port 54116 Sep 22 19:04:38 tuxlinux sshd[37380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.196.83.2 Sep 22 19:04:38 tuxlinux sshd[37380]: Invalid user tj from 119.196.83.2 port 54116 Sep 22 19:04:38 tuxlinux sshd[37380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.196.83.2 Sep 22 19:04:38 tuxlinux sshd[37380]: Invalid user tj from 119.196.83.2 port 54116 Sep 22 19:04:38 tuxlinux sshd[37380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.196.83.2 Sep 22 19:04:40 tuxlinux sshd[37380]: Failed password for invalid user tj from 119.196.83.2 port 54116 ssh2 ... |
2019-09-25 04:22:15 |
| 129.28.196.92 | attack | 2019-09-24T05:35:35.034277suse-nuc sshd[3244]: Invalid user oracle from 129.28.196.92 port 58506 ... |
2019-09-25 04:45:45 |
| 46.101.72.145 | attackspam | Sep 24 13:43:02 debian sshd\[9261\]: Invalid user pavel from 46.101.72.145 port 54360 Sep 24 13:43:02 debian sshd\[9261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.72.145 Sep 24 13:43:04 debian sshd\[9261\]: Failed password for invalid user pavel from 46.101.72.145 port 54360 ssh2 ... |
2019-09-25 04:17:17 |
| 209.235.23.125 | attackbotsspam | 2019-09-24T20:33:14.072271abusebot-3.cloudsearch.cf sshd\[20630\]: Invalid user india from 209.235.23.125 port 58742 |
2019-09-25 04:34:34 |