City: unknown
Region: unknown
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 153.44.137.238
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5320
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;153.44.137.238. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012501 1800 900 604800 86400
;; Query time: 47 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 26 11:25:36 CST 2025
;; MSG SIZE rcvd: 107Host 238.137.44.153.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 238.137.44.153.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 216.218.206.81 | attackspambots | srv02 Mass scanning activity detected Target: 1434(ms-sql-m) .. |
2020-07-19 16:53:22 |
| 82.251.161.207 | attack | 2020-07-19T08:40:06.204977shield sshd\[1459\]: Invalid user ics from 82.251.161.207 port 39200 2020-07-19T08:40:06.214945shield sshd\[1459\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=lns-bzn-40-82-251-161-207.adsl.proxad.net 2020-07-19T08:40:07.952190shield sshd\[1459\]: Failed password for invalid user ics from 82.251.161.207 port 39200 ssh2 2020-07-19T08:45:58.844328shield sshd\[2372\]: Invalid user kobis from 82.251.161.207 port 55756 2020-07-19T08:45:58.853600shield sshd\[2372\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=lns-bzn-40-82-251-161-207.adsl.proxad.net |
2020-07-19 16:52:51 |
| 206.51.29.115 | attackspam | $f2bV_matches |
2020-07-19 17:05:47 |
| 52.172.156.159 | attackspambots | Jul 19 03:54:47 Tower sshd[19554]: Connection from 52.172.156.159 port 56470 on 192.168.10.220 port 22 rdomain "" Jul 19 03:54:48 Tower sshd[19554]: Invalid user craig from 52.172.156.159 port 56470 Jul 19 03:54:48 Tower sshd[19554]: error: Could not get shadow information for NOUSER Jul 19 03:54:48 Tower sshd[19554]: Failed password for invalid user craig from 52.172.156.159 port 56470 ssh2 Jul 19 03:54:49 Tower sshd[19554]: Received disconnect from 52.172.156.159 port 56470:11: Bye Bye [preauth] Jul 19 03:54:49 Tower sshd[19554]: Disconnected from invalid user craig 52.172.156.159 port 56470 [preauth] |
2020-07-19 17:02:59 |
| 122.51.169.118 | attack | Jul 19 09:52:08 h2779839 sshd[18867]: Invalid user ftp from 122.51.169.118 port 39100 Jul 19 09:52:08 h2779839 sshd[18867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.169.118 Jul 19 09:52:08 h2779839 sshd[18867]: Invalid user ftp from 122.51.169.118 port 39100 Jul 19 09:52:10 h2779839 sshd[18867]: Failed password for invalid user ftp from 122.51.169.118 port 39100 ssh2 Jul 19 09:53:31 h2779839 sshd[18872]: Invalid user denys from 122.51.169.118 port 53452 Jul 19 09:53:31 h2779839 sshd[18872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.169.118 Jul 19 09:53:31 h2779839 sshd[18872]: Invalid user denys from 122.51.169.118 port 53452 Jul 19 09:53:33 h2779839 sshd[18872]: Failed password for invalid user denys from 122.51.169.118 port 53452 ssh2 Jul 19 09:54:57 h2779839 sshd[19016]: Invalid user aimil from 122.51.169.118 port 39580 ... |
2020-07-19 17:04:53 |
| 154.17.8.73 | attack | Jul 19 07:37:31 XXXXXX sshd[12058]: Invalid user vtiger from 154.17.8.73 port 58094 |
2020-07-19 16:38:23 |
| 129.213.194.239 | attack | Jul 19 09:48:41 abendstille sshd\[6439\]: Invalid user mac from 129.213.194.239 Jul 19 09:48:41 abendstille sshd\[6439\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.194.239 Jul 19 09:48:43 abendstille sshd\[6439\]: Failed password for invalid user mac from 129.213.194.239 port 49028 ssh2 Jul 19 09:54:52 abendstille sshd\[12687\]: Invalid user lsw from 129.213.194.239 Jul 19 09:54:52 abendstille sshd\[12687\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.194.239 ... |
2020-07-19 17:08:43 |
| 185.217.1.243 | attackbotsspam | *Port Scan* detected from 185.217.1.243 (SE/Sweden/Stockholm/Stockholm/-). 4 hits in the last 296 seconds |
2020-07-19 16:55:20 |
| 218.92.0.168 | attack | Jul 19 10:52:59 srv-ubuntu-dev3 sshd[33975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168 user=root Jul 19 10:53:01 srv-ubuntu-dev3 sshd[33975]: Failed password for root from 218.92.0.168 port 47838 ssh2 Jul 19 10:53:04 srv-ubuntu-dev3 sshd[33975]: Failed password for root from 218.92.0.168 port 47838 ssh2 Jul 19 10:52:59 srv-ubuntu-dev3 sshd[33975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168 user=root Jul 19 10:53:01 srv-ubuntu-dev3 sshd[33975]: Failed password for root from 218.92.0.168 port 47838 ssh2 Jul 19 10:53:04 srv-ubuntu-dev3 sshd[33975]: Failed password for root from 218.92.0.168 port 47838 ssh2 Jul 19 10:52:59 srv-ubuntu-dev3 sshd[33975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168 user=root Jul 19 10:53:01 srv-ubuntu-dev3 sshd[33975]: Failed password for root from 218.92.0.168 port 47838 ssh2 Jul 19 10 ... |
2020-07-19 17:00:36 |
| 112.85.42.87 | attackspam | 2020-07-19T09:02:39.122094shield sshd\[5780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.87 user=root 2020-07-19T09:02:41.256732shield sshd\[5780\]: Failed password for root from 112.85.42.87 port 17755 ssh2 2020-07-19T09:02:44.090642shield sshd\[5780\]: Failed password for root from 112.85.42.87 port 17755 ssh2 2020-07-19T09:02:46.897831shield sshd\[5780\]: Failed password for root from 112.85.42.87 port 17755 ssh2 2020-07-19T09:08:52.588118shield sshd\[7277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.87 user=root |
2020-07-19 17:10:06 |
| 139.186.4.114 | attack | Jul 19 10:39:20 vps687878 sshd\[23459\]: Failed password for invalid user ikan from 139.186.4.114 port 46826 ssh2 Jul 19 10:40:17 vps687878 sshd\[23557\]: Invalid user firefart from 139.186.4.114 port 56304 Jul 19 10:40:17 vps687878 sshd\[23557\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.186.4.114 Jul 19 10:40:19 vps687878 sshd\[23557\]: Failed password for invalid user firefart from 139.186.4.114 port 56304 ssh2 Jul 19 10:41:17 vps687878 sshd\[23653\]: Invalid user fresco from 139.186.4.114 port 37548 Jul 19 10:41:17 vps687878 sshd\[23653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.186.4.114 ... |
2020-07-19 16:50:27 |
| 222.91.97.134 | attackspam | Jul 19 08:10:20 ns308116 sshd[5912]: Invalid user ys from 222.91.97.134 port 2099 Jul 19 08:10:20 ns308116 sshd[5912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.91.97.134 Jul 19 08:10:22 ns308116 sshd[5912]: Failed password for invalid user ys from 222.91.97.134 port 2099 ssh2 Jul 19 08:18:25 ns308116 sshd[6176]: Invalid user bos from 222.91.97.134 port 2100 Jul 19 08:18:25 ns308116 sshd[6176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.91.97.134 ... |
2020-07-19 16:41:09 |
| 203.204.188.11 | attackbots | $f2bV_matches |
2020-07-19 16:48:12 |
| 183.250.89.179 | attackspambots | $f2bV_matches |
2020-07-19 16:55:45 |
| 167.99.187.122 | attackspam | Web application attack detected by fail2ban |
2020-07-19 16:52:10 |