City: Bergen
Region: Vestland
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 158.37.21.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41724
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;158.37.21.161. IN A
;; AUTHORITY SECTION:
. 132 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022072202 1800 900 604800 86400
;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 23 08:50:15 CST 2022
;; MSG SIZE rcvd: 106Host 161.21.37.158.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 161.21.37.158.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 79.9.68.225 | attack | TCP Port: 25 _ invalid blocked abuseat-org barracudacentral _ _ _ _ (13) |
2019-07-23 16:56:43 |
| 212.54.155.66 | attackbotsspam | 2019-07-23T03:02:56.695156abusebot-7.cloudsearch.cf sshd\[13418\]: Invalid user keith from 212.54.155.66 port 56402 |
2019-07-23 16:50:20 |
| 111.231.89.162 | attackspam | 2019-07-23T09:03:25.740282abusebot-6.cloudsearch.cf sshd\[1738\]: Invalid user tosi from 111.231.89.162 port 54546 |
2019-07-23 17:26:24 |
| 104.236.131.54 | attackbots | 2019-07-23T08:33:44.045948abusebot-4.cloudsearch.cf sshd\[31499\]: Invalid user postgres from 104.236.131.54 port 40800 |
2019-07-23 17:13:05 |
| 95.13.100.25 | attack | Automatic report - Port Scan Attack |
2019-07-23 17:26:44 |
| 116.107.222.255 | attackbots | Jul 23 01:25:58 master sshd[32375]: Failed password for invalid user admin from 116.107.222.255 port 57352 ssh2 |
2019-07-23 16:48:44 |
| 193.169.252.171 | attackbots | Jul 22 23:57:11 web1 postfix/smtpd[14566]: warning: unknown[193.169.252.171]: SASL LOGIN authentication failed: authentication failure ... |
2019-07-23 17:10:12 |
| 187.16.32.212 | attackspambots | $f2bV_matches |
2019-07-23 17:22:06 |
| 178.133.213.16 | attackbotsspam | TCP Port: 25 _ invalid blocked dnsbl-sorbs abuseat-org _ _ _ _ (6) |
2019-07-23 17:06:20 |
| 50.116.75.249 | attack | 50.116.75.249 - - \[23/Jul/2019:11:35:27 +0200\] "POST /wp-login.php HTTP/1.1" 200 2110 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 50.116.75.249 - - \[23/Jul/2019:11:35:30 +0200\] "POST /wp-login.php HTTP/1.1" 200 2113 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2019-07-23 17:42:10 |
| 51.68.86.247 | attackspambots | Jul 22 18:26:38 fwservlet sshd[6316]: Invalid user testuser1 from 51.68.86.247 Jul 22 18:26:38 fwservlet sshd[6316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.86.247 Jul 22 18:26:40 fwservlet sshd[6316]: Failed password for invalid user testuser1 from 51.68.86.247 port 45726 ssh2 Jul 22 18:26:40 fwservlet sshd[6316]: Received disconnect from 51.68.86.247 port 45726:11: Bye Bye [preauth] Jul 22 18:26:40 fwservlet sshd[6316]: Disconnected from 51.68.86.247 port 45726 [preauth] Jul 22 19:10:54 fwservlet sshd[6966]: Invalid user ftptest from 51.68.86.247 Jul 22 19:10:54 fwservlet sshd[6966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.86.247 Jul 22 19:10:56 fwservlet sshd[6966]: Failed password for invalid user ftptest from 51.68.86.247 port 54814 ssh2 Jul 22 19:10:56 fwservlet sshd[6966]: Received disconnect from 51.68.86.247 port 54814:11: Bye Bye [preauth] Jul 22 19:10:5........ ------------------------------- |
2019-07-23 17:07:34 |
| 142.54.101.146 | attack | Jul 23 06:27:55 MK-Soft-VM3 sshd\[2881\]: Invalid user admin from 142.54.101.146 port 39814 Jul 23 06:27:55 MK-Soft-VM3 sshd\[2881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.54.101.146 Jul 23 06:27:58 MK-Soft-VM3 sshd\[2881\]: Failed password for invalid user admin from 142.54.101.146 port 39814 ssh2 ... |
2019-07-23 16:51:12 |
| 89.46.107.97 | attackbots | xmlrpc attack |
2019-07-23 17:16:53 |
| 54.37.204.232 | attackbots | Jul 23 10:56:39 SilenceServices sshd[30642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.204.232 Jul 23 10:56:41 SilenceServices sshd[30642]: Failed password for invalid user mao from 54.37.204.232 port 53258 ssh2 Jul 23 11:03:02 SilenceServices sshd[2555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.204.232 |
2019-07-23 17:07:03 |
| 213.135.176.140 | attackspambots | WordPress XMLRPC scan :: 213.135.176.140 0.164 BYPASS [23/Jul/2019:19:23:41 1000] [censored_4] "GET /xmlrpc.php HTTP/1.1" 405 53 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" |
2019-07-23 17:39:08 |