City: unknown
Region: unknown
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 141.0.8.86
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9162
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;141.0.8.86. IN A
;; AUTHORITY SECTION:
. 526 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 09:21:42 CST 2022
;; MSG SIZE rcvd: 10386.8.0.141.in-addr.arpa domain name pointer sg21-06-04.opera-mini.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
86.8.0.141.in-addr.arpa name = sg21-06-04.opera-mini.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 43.252.144.254 | attackspambots | port scan and connect, tcp 80 (http) |
2019-07-12 08:56:26 |
| 46.3.96.66 | attackspambots | 12.07.2019 00:06:08 Connection to port 2526 blocked by firewall |
2019-07-12 08:58:41 |
| 132.232.112.25 | attackspambots | Jul 11 21:02:28 plusreed sshd[13050]: Invalid user deployer from 132.232.112.25 ... |
2019-07-12 09:03:40 |
| 198.108.67.82 | attackbotsspam | " " |
2019-07-12 09:07:58 |
| 121.190.197.205 | attack | SSH bruteforce (Triggered fail2ban) |
2019-07-12 09:15:05 |
| 5.188.62.5 | attack | 2019-07-11 17:16:07,508 cac1d2 proftpd\[8320\] cac1d2.c-u-tech.com \(5.188.62.5\[5.188.62.5\]\): USER xn--rjq: no such user found from 5.188.62.5 \[5.188.62.5\] to ::ffff:45.62.247.135:21 2019-07-11 17:16:39,181 cac1d2 proftpd\[8338\] cac1d2.c-u-tech.com \(5.188.62.5\[5.188.62.5\]\): USER xn--rjq: no such user found from 5.188.62.5 \[5.188.62.5\] to ::ffff:45.62.247.135:21 2019-07-11 17:30:41,695 cac1d2 proftpd\[10135\] cac1d2.c-u-tech.com \(5.188.62.5\[5.188.62.5\]\): USER xn--rjq: no such user found from 5.188.62.5 \[5.188.62.5\] to ::ffff:45.62.247.135:21 ... |
2019-07-12 08:35:12 |
| 190.94.151.46 | attackbotsspam | 3389BruteforceFW21 |
2019-07-12 09:19:27 |
| 162.247.72.199 | attackbots | Jul 12 02:05:54 lnxweb62 sshd[31285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.72.199 Jul 12 02:05:56 lnxweb62 sshd[31285]: Failed password for invalid user admin from 162.247.72.199 port 43894 ssh2 Jul 12 02:05:58 lnxweb62 sshd[31285]: Failed password for invalid user admin from 162.247.72.199 port 43894 ssh2 Jul 12 02:06:00 lnxweb62 sshd[31285]: Failed password for invalid user admin from 162.247.72.199 port 43894 ssh2 |
2019-07-12 09:00:58 |
| 104.248.117.234 | attackbots | Jul 12 02:35:11 dedicated sshd[23169]: Invalid user dev from 104.248.117.234 port 48184 |
2019-07-12 08:47:12 |
| 59.9.31.195 | attackspambots | Jul 12 02:32:40 dedicated sshd[22931]: Invalid user gi from 59.9.31.195 port 54926 |
2019-07-12 08:52:06 |
| 211.24.155.116 | attack | Jul 12 02:52:12 tuxlinux sshd[63064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.24.155.116 user=root Jul 12 02:52:13 tuxlinux sshd[63064]: Failed password for root from 211.24.155.116 port 38600 ssh2 Jul 12 02:52:12 tuxlinux sshd[63064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.24.155.116 user=root Jul 12 02:52:13 tuxlinux sshd[63064]: Failed password for root from 211.24.155.116 port 38600 ssh2 ... |
2019-07-12 08:54:00 |
| 165.255.134.140 | attack | Jul 12 01:49:40 shared03 sshd[21029]: Invalid user est from 165.255.134.140 Jul 12 01:49:40 shared03 sshd[21029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.255.134.140 Jul 12 01:49:43 shared03 sshd[21029]: Failed password for invalid user est from 165.255.134.140 port 55966 ssh2 Jul 12 01:49:43 shared03 sshd[21029]: Received disconnect from 165.255.134.140 port 55966:11: Bye Bye [preauth] Jul 12 01:49:43 shared03 sshd[21029]: Disconnected from 165.255.134.140 port 55966 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=165.255.134.140 |
2019-07-12 09:05:35 |
| 71.165.90.119 | attackbotsspam | Jul 12 02:06:20 ubuntu-2gb-nbg1-dc3-1 sshd[3755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.165.90.119 Jul 12 02:06:22 ubuntu-2gb-nbg1-dc3-1 sshd[3755]: Failed password for invalid user linux from 71.165.90.119 port 35192 ssh2 ... |
2019-07-12 08:51:32 |
| 223.241.30.161 | attackbotsspam | Jul 12 01:39:22 xxxxxxx7446550 sshd[11537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.241.30.161 user=r.r Jul 12 01:39:25 xxxxxxx7446550 sshd[11537]: Failed password for r.r from 223.241.30.161 port 43607 ssh2 Jul 12 01:39:27 xxxxxxx7446550 sshd[11537]: Failed password for r.r from 223.241.30.161 port 43607 ssh2 Jul 12 01:39:29 xxxxxxx7446550 sshd[11537]: Failed password for r.r from 223.241.30.161 port 43607 ssh2 Jul 12 01:39:31 xxxxxxx7446550 sshd[11537]: Failed password for r.r from 223.241.30.161 port 43607 ssh2 Jul 12 01:39:34 xxxxxxx7446550 sshd[11537]: Failed password for r.r from 223.241.30.161 port 43607 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=223.241.30.161 |
2019-07-12 08:52:28 |
| 72.0.253.124 | attackbotsspam | Jul 12 01:47:52 mxgate1 postfix/postscreen[13634]: CONNECT from [72.0.253.124]:11496 to [176.31.12.44]:25 Jul 12 01:47:52 mxgate1 postfix/dnsblog[13833]: addr 72.0.253.124 listed by domain zen.spamhaus.org as 127.0.0.4 Jul 12 01:47:52 mxgate1 postfix/dnsblog[13833]: addr 72.0.253.124 listed by domain zen.spamhaus.org as 127.0.0.11 Jul 12 01:47:52 mxgate1 postfix/dnsblog[13834]: addr 72.0.253.124 listed by domain cbl.abuseat.org as 127.0.0.2 Jul 12 01:47:52 mxgate1 postfix/dnsblog[13835]: addr 72.0.253.124 listed by domain b.barracudacentral.org as 127.0.0.2 Jul 12 01:47:52 mxgate1 postfix/dnsblog[13837]: addr 72.0.253.124 listed by domain bl.spamcop.net as 127.0.0.2 Jul 12 01:47:55 mxgate1 postfix/dnsblog[13836]: addr 72.0.253.124 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Jul 12 01:47:58 mxgate1 postfix/postscreen[13634]: DNSBL rank 6 for [72.0.253.124]:11496 Jul x@x Jul 12 01:47:59 mxgate1 postfix/postscreen[13634]: HANGUP after 0.55 from [72.0.253.124]:11496 i........ ------------------------------- |
2019-07-12 08:59:37 |