City: unknown
Region: unknown
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.0.8.26
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49768
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;141.0.8.26. IN A
;; AUTHORITY SECTION:
. 575 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400
;; Query time: 87 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 09:21:25 CST 2022
;; MSG SIZE rcvd: 10326.8.0.141.in-addr.arpa domain name pointer sg21-01-04.opera-mini.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
26.8.0.141.in-addr.arpa name = sg21-01-04.opera-mini.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 149.56.10.119 | attack | Aug 1 07:16:19 MK-Soft-VM5 sshd\[2829\]: Invalid user junior from 149.56.10.119 port 45040 Aug 1 07:16:19 MK-Soft-VM5 sshd\[2829\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.10.119 Aug 1 07:16:21 MK-Soft-VM5 sshd\[2829\]: Failed password for invalid user junior from 149.56.10.119 port 45040 ssh2 ... |
2019-08-01 15:19:09 |
| 190.90.8.254 | attackbots | Aug 1 07:05:43 www1 sshd\[7432\]: Invalid user francis from 190.90.8.254Aug 1 07:05:45 www1 sshd\[7432\]: Failed password for invalid user francis from 190.90.8.254 port 55862 ssh2Aug 1 07:08:50 www1 sshd\[7656\]: Invalid user gmodserver from 190.90.8.254Aug 1 07:08:52 www1 sshd\[7656\]: Failed password for invalid user gmodserver from 190.90.8.254 port 59218 ssh2Aug 1 07:09:23 www1 sshd\[7720\]: Invalid user xd from 190.90.8.254Aug 1 07:09:25 www1 sshd\[7720\]: Failed password for invalid user xd from 190.90.8.254 port 33794 ssh2 ... |
2019-08-01 15:53:45 |
| 66.70.160.42 | attackspam | Jul 29 09:14:08 georgia postfix/smtpd[28902]: connect from ip42.ip-66-70-160.net[66.70.160.42] Jul 29 09:14:09 georgia postfix/smtpd[28902]: warning: ip42.ip-66-70-160.net[66.70.160.42]: SASL LOGIN authentication failed: authentication failure Jul 29 09:14:09 georgia postfix/smtpd[28902]: lost connection after AUTH from ip42.ip-66-70-160.net[66.70.160.42] Jul 29 09:14:09 georgia postfix/smtpd[28902]: disconnect from ip42.ip-66-70-160.net[66.70.160.42] ehlo=1 auth=0/1 commands=1/2 Jul 29 09:14:09 georgia postfix/smtpd[28902]: connect from ip42.ip-66-70-160.net[66.70.160.42] Jul 29 09:14:09 georgia postfix/smtpd[28902]: warning: ip42.ip-66-70-160.net[66.70.160.42]: SASL LOGIN authentication failed: authentication failure Jul 29 09:14:09 georgia postfix/smtpd[28902]: lost connection after AUTH from ip42.ip-66-70-160.net[66.70.160.42] Jul 29 09:14:09 georgia postfix/smtpd[28902]: disconnect from ip42.ip-66-70-160.net[66.70.160.42] ehlo=1 auth=0/1 commands=1/2 Jul 29 09:14:0........ ------------------------------- |
2019-08-01 15:55:24 |
| 200.1.221.204 | attackbots | libpam_shield report: forced login attempt |
2019-08-01 15:20:01 |
| 139.59.41.154 | attack | Aug 1 02:40:46 vps200512 sshd\[9929\]: Invalid user test02 from 139.59.41.154 Aug 1 02:40:46 vps200512 sshd\[9929\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.41.154 Aug 1 02:40:48 vps200512 sshd\[9929\]: Failed password for invalid user test02 from 139.59.41.154 port 48528 ssh2 Aug 1 02:47:16 vps200512 sshd\[10008\]: Invalid user debian-tor from 139.59.41.154 Aug 1 02:47:16 vps200512 sshd\[10008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.41.154 |
2019-08-01 15:02:01 |
| 209.17.96.226 | attack | 2019-08-01T03:29:00.008Z CLOSE host=209.17.96.226 port=60295 fd=4 time=32.034 bytes=503 ... |
2019-08-01 15:17:04 |
| 106.12.125.139 | attackspam | Aug 1 02:44:27 xtremcommunity sshd\[13563\]: Invalid user qwerty from 106.12.125.139 port 35746 Aug 1 02:44:27 xtremcommunity sshd\[13563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.125.139 Aug 1 02:44:29 xtremcommunity sshd\[13563\]: Failed password for invalid user qwerty from 106.12.125.139 port 35746 ssh2 Aug 1 02:50:16 xtremcommunity sshd\[13721\]: Invalid user 123alex from 106.12.125.139 port 58646 Aug 1 02:50:16 xtremcommunity sshd\[13721\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.125.139 ... |
2019-08-01 15:07:18 |
| 73.26.245.243 | attackbots | Automatic report - Banned IP Access |
2019-08-01 15:16:36 |
| 73.29.142.190 | attackbots | May 10 03:04:53 ubuntu sshd[28300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.29.142.190 May 10 03:04:55 ubuntu sshd[28300]: Failed password for invalid user admin from 73.29.142.190 port 58613 ssh2 May 10 03:04:57 ubuntu sshd[28300]: Failed password for invalid user admin from 73.29.142.190 port 58613 ssh2 May 10 03:04:59 ubuntu sshd[28300]: Failed password for invalid user admin from 73.29.142.190 port 58613 ssh2 |
2019-08-01 15:10:36 |
| 68.48.240.245 | attackbots | Tried sshing with brute force. |
2019-08-01 15:11:12 |
| 35.185.239.108 | attack | Aug 1 08:36:03 MK-Soft-Root2 sshd\[30665\]: Invalid user geobox from 35.185.239.108 port 47904 Aug 1 08:36:03 MK-Soft-Root2 sshd\[30665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.185.239.108 Aug 1 08:36:05 MK-Soft-Root2 sshd\[30665\]: Failed password for invalid user geobox from 35.185.239.108 port 47904 ssh2 ... |
2019-08-01 15:46:15 |
| 118.25.153.73 | attack | Aug 1 06:38:22 andromeda sshd\[51373\]: Invalid user tecnici from 118.25.153.73 port 54472 Aug 1 06:38:22 andromeda sshd\[51373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.153.73 Aug 1 06:38:24 andromeda sshd\[51373\]: Failed password for invalid user tecnici from 118.25.153.73 port 54472 ssh2 |
2019-08-01 15:41:52 |
| 211.103.183.5 | attack | Jul 29 06:37:57 nbi-636 sshd[28089]: User r.r from 211.103.183.5 not allowed because not listed in AllowUsers Jul 29 06:37:57 nbi-636 sshd[28089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.103.183.5 user=r.r Jul 29 06:37:59 nbi-636 sshd[28089]: Failed password for invalid user r.r from 211.103.183.5 port 41718 ssh2 Jul 29 06:37:59 nbi-636 sshd[28089]: Received disconnect from 211.103.183.5 port 41718:11: Bye Bye [preauth] Jul 29 06:37:59 nbi-636 sshd[28089]: Disconnected from 211.103.183.5 port 41718 [preauth] Jul 29 06:40:33 nbi-636 sshd[28565]: Invalid user admin5 from 211.103.183.5 port 35584 Jul 29 06:40:35 nbi-636 sshd[28565]: Failed password for invalid user admin5 from 211.103.183.5 port 35584 ssh2 Jul 29 06:40:35 nbi-636 sshd[28565]: Received disconnect from 211.103.183.5 port 35584:11: Bye Bye [preauth] Jul 29 06:40:35 nbi-636 sshd[28565]: Disconnected from 211.103.183.5 port 35584 [preauth] Jul 29 06:59:17 nbi........ ------------------------------- |
2019-08-01 15:50:26 |
| 62.28.34.125 | attackbotsspam | Aug 1 09:33:53 eventyay sshd[5818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.34.125 Aug 1 09:33:55 eventyay sshd[5818]: Failed password for invalid user ftpuser from 62.28.34.125 port 31045 ssh2 Aug 1 09:41:27 eventyay sshd[7578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.34.125 ... |
2019-08-01 15:43:20 |
| 18.138.76.240 | attack | Aug 1 05:43:12 heissa sshd\[6770\]: Invalid user hadoop from 18.138.76.240 port 56076 Aug 1 05:43:12 heissa sshd\[6770\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-18-138-76-240.ap-southeast-1.compute.amazonaws.com Aug 1 05:43:14 heissa sshd\[6770\]: Failed password for invalid user hadoop from 18.138.76.240 port 56076 ssh2 Aug 1 05:49:22 heissa sshd\[7377\]: Invalid user vinodh from 18.138.76.240 port 51794 Aug 1 05:49:22 heissa sshd\[7377\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-18-138-76-240.ap-southeast-1.compute.amazonaws.com |
2019-08-01 15:47:49 |