City: unknown
Region: unknown
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.0.13.83
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36372
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;141.0.13.83. IN A
;; AUTHORITY SECTION:
. 185 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 09:18:54 CST 2022
;; MSG SIZE rcvd: 10483.13.0.141.in-addr.arpa domain name pointer n27-04-11.opera-mini.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
83.13.0.141.in-addr.arpa name = n27-04-11.opera-mini.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.98.4.82 | attackbots | 2020-04-18T04:45:52.102925shield sshd\[20321\]: Invalid user ak from 14.98.4.82 port 65261 2020-04-18T04:45:52.107348shield sshd\[20321\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.98.4.82 2020-04-18T04:45:53.662884shield sshd\[20321\]: Failed password for invalid user ak from 14.98.4.82 port 65261 ssh2 2020-04-18T04:54:43.530085shield sshd\[22051\]: Invalid user y from 14.98.4.82 port 12882 2020-04-18T04:54:43.535090shield sshd\[22051\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.98.4.82 |
2020-04-18 14:46:33 |
| 171.231.244.12 | spamattack | Mail hack |
2020-04-18 15:02:16 |
| 139.199.18.194 | attackbots | Apr 18 07:35:48 nbi-636 sshd[31845]: Invalid user v from 139.199.18.194 port 57476 Apr 18 07:35:48 nbi-636 sshd[31845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.18.194 Apr 18 07:35:50 nbi-636 sshd[31845]: Failed password for invalid user v from 139.199.18.194 port 57476 ssh2 Apr 18 07:35:51 nbi-636 sshd[31845]: Received disconnect from 139.199.18.194 port 57476:11: Bye Bye [preauth] Apr 18 07:35:51 nbi-636 sshd[31845]: Disconnected from invalid user v 139.199.18.194 port 57476 [preauth] Apr 18 07:52:09 nbi-636 sshd[4956]: Invalid user desktop from 139.199.18.194 port 52072 Apr 18 07:52:09 nbi-636 sshd[4956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.18.194 Apr 18 07:52:11 nbi-636 sshd[4956]: Failed password for invalid user desktop from 139.199.18.194 port 52072 ssh2 Apr 18 07:52:14 nbi-636 sshd[4956]: Received disconnect from 139.199.18.194 port 52072:11: Bye ........ ------------------------------- |
2020-04-18 14:47:28 |
| 212.129.18.55 | attackspambots | [2020-04-18 02:10:22] NOTICE[1170][C-00001963] chan_sip.c: Call from '' (212.129.18.55:50380) to extension '01148221530196' rejected because extension not found in context 'public'. [2020-04-18 02:10:22] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-18T02:10:22.159-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01148221530196",SessionID="0x7f6c08099cc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.129.18.55/50380",ACLName="no_extension_match" [2020-04-18 02:11:36] NOTICE[1170][C-00001965] chan_sip.c: Call from '' (212.129.18.55:56351) to extension '+48221530196' rejected because extension not found in context 'public'. [2020-04-18 02:11:36] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-18T02:11:36.198-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="+48221530196",SessionID="0x7f6c0824ccd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.129. ... |
2020-04-18 14:30:20 |
| 51.38.16.203 | attackspam | Port Scan: Events[1] countPorts[1]: 5060 .. |
2020-04-18 15:13:50 |
| 157.245.2.229 | attackbots | Trolling for resource vulnerabilities |
2020-04-18 15:11:24 |
| 181.52.249.213 | attackspam | Invalid user admin from 181.52.249.213 port 54108 |
2020-04-18 15:06:29 |
| 94.102.56.181 | attackspam | Apr 18 08:24:47 debian-2gb-nbg1-2 kernel: \[9450059.810604\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.56.181 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=21826 PROTO=TCP SPT=47562 DPT=9506 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-18 14:39:14 |
| 122.166.100.91 | attackbots | Port probing on unauthorized port 23 |
2020-04-18 14:55:58 |
| 107.170.113.190 | attackbotsspam | Bruteforce detected by fail2ban |
2020-04-18 14:54:47 |
| 45.95.168.200 | attackbots | Unauthorized connection attempt detected from IP address 45.95.168.200 to port 22 |
2020-04-18 14:48:04 |
| 79.137.74.57 | attackbots | Apr 18 08:21:39 ift sshd\[25916\]: Failed password for root from 79.137.74.57 port 34435 ssh2Apr 18 08:25:32 ift sshd\[26624\]: Invalid user guest from 79.137.74.57Apr 18 08:25:34 ift sshd\[26624\]: Failed password for invalid user guest from 79.137.74.57 port 37853 ssh2Apr 18 08:29:10 ift sshd\[26917\]: Invalid user qc from 79.137.74.57Apr 18 08:29:12 ift sshd\[26917\]: Failed password for invalid user qc from 79.137.74.57 port 41270 ssh2 ... |
2020-04-18 14:49:54 |
| 132.232.42.33 | attack | Apr 18 06:14:29 sip sshd[12479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.42.33 Apr 18 06:14:31 sip sshd[12479]: Failed password for invalid user ubuntu from 132.232.42.33 port 49018 ssh2 Apr 18 06:24:19 sip sshd[16088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.42.33 |
2020-04-18 14:54:24 |
| 142.44.240.12 | attack | Apr 17 19:25:37 hpm sshd\[17424\]: Invalid user test from 142.44.240.12 Apr 17 19:25:37 hpm sshd\[17424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=irc.zonenet.org Apr 17 19:25:40 hpm sshd\[17424\]: Failed password for invalid user test from 142.44.240.12 port 60162 ssh2 Apr 17 19:28:18 hpm sshd\[17610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=irc.zonenet.org user=root Apr 17 19:28:19 hpm sshd\[17610\]: Failed password for root from 142.44.240.12 port 35900 ssh2 |
2020-04-18 15:12:22 |
| 106.52.239.14 | attackspambots | 2020-04-17T22:57:11.624080linuxbox-skyline sshd[206833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.239.14 user=root 2020-04-17T22:57:13.395251linuxbox-skyline sshd[206833]: Failed password for root from 106.52.239.14 port 34186 ssh2 ... |
2020-04-18 14:41:13 |