City: Bergen
Region: Vestland
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 158.37.3.172
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63280
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;158.37.3.172. IN A
;; AUTHORITY SECTION:
. 309 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022010702 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 08 10:01:00 CST 2022
;; MSG SIZE rcvd: 105b'172.3.37.158.in-addr.arpa domain name pointer ubw-ts-t02.uhad.no.
'Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
172.3.37.158.in-addr.arpa name = ubw-ts-t02.uhad.no.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 129.211.77.44 | attackspam | $f2bV_matches |
2020-06-27 19:58:40 |
| 51.195.28.121 | attackbotsspam | Lines containing failures of 51.195.28.121 Jun 26 13:18:42 kopano sshd[17782]: Invalid user vnc from 51.195.28.121 port 34158 Jun 26 13:18:42 kopano sshd[17782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.195.28.121 Jun 26 13:18:44 kopano sshd[17782]: Failed password for invalid user vnc from 51.195.28.121 port 34158 ssh2 Jun 26 13:18:44 kopano sshd[17782]: Received disconnect from 51.195.28.121 port 34158:11: Bye Bye [preauth] Jun 26 13:18:44 kopano sshd[17782]: Disconnected from invalid user vnc 51.195.28.121 port 34158 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=51.195.28.121 |
2020-06-27 20:28:55 |
| 35.243.217.161 | attackbotsspam | 2020-06-27T11:01:53.440097shield sshd\[13858\]: Invalid user webuser from 35.243.217.161 port 49898 2020-06-27T11:01:53.443844shield sshd\[13858\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.217.243.35.bc.googleusercontent.com 2020-06-27T11:01:55.643523shield sshd\[13858\]: Failed password for invalid user webuser from 35.243.217.161 port 49898 ssh2 2020-06-27T11:02:58.850615shield sshd\[14202\]: Invalid user kinder from 35.243.217.161 port 39234 2020-06-27T11:02:58.854397shield sshd\[14202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.217.243.35.bc.googleusercontent.com |
2020-06-27 19:55:35 |
| 52.243.85.32 | attackspambots | Invalid user svccopssh from 52.243.85.32 port 55280 |
2020-06-27 20:00:09 |
| 23.129.64.206 | attackbots | Jun 27 11:49:22 IngegnereFirenze sshd[29516]: User root from 23.129.64.206 not allowed because not listed in AllowUsers ... |
2020-06-27 19:56:42 |
| 34.80.76.178 | attack | Invalid user tom from 34.80.76.178 port 39460 |
2020-06-27 20:05:55 |
| 80.82.78.192 | attack | Jun 27 13:54:11 debian-2gb-nbg1-2 kernel: \[15517503.656288\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.78.192 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=37242 PROTO=TCP SPT=47606 DPT=822 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-27 19:55:05 |
| 203.3.84.204 | attack | Fail2Ban Ban Triggered |
2020-06-27 19:52:41 |
| 185.220.102.8 | attack | Jun 27 13:22:22 cdc sshd[5342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.102.8 user=sshd Jun 27 13:22:24 cdc sshd[5342]: Failed password for invalid user sshd from 185.220.102.8 port 38567 ssh2 |
2020-06-27 20:34:22 |
| 157.97.80.205 | attack | Jun 27 14:22:26 lnxded63 sshd[7744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.97.80.205 |
2020-06-27 20:31:49 |
| 72.192.190.32 | attackbots | SSH/22 MH Probe, BF, Hack - |
2020-06-27 20:18:27 |
| 34.71.5.146 | attackbots | Jun 26 18:05:14 web9 sshd\[13859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.71.5.146 user=root Jun 26 18:05:15 web9 sshd\[13859\]: Failed password for root from 34.71.5.146 port 1026 ssh2 Jun 26 18:08:21 web9 sshd\[14246\]: Invalid user hurt from 34.71.5.146 Jun 26 18:08:21 web9 sshd\[14246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.71.5.146 Jun 26 18:08:23 web9 sshd\[14246\]: Failed password for invalid user hurt from 34.71.5.146 port 1030 ssh2 |
2020-06-27 20:14:52 |
| 183.166.98.72 | attack | Jun 27 05:47:54 zimbra postfix/smtpd[25597]: warning: unknown[183.166.98.72]: SASL PLAIN authentication failed: authentication failure Jun 27 05:47:55 zimbra postfix/smtpd[25597]: warning: unknown[183.166.98.72]: SASL LOGIN authentication failed: authentication failure Jun 27 05:47:56 zimbra postfix/smtpd[25597]: warning: unknown[183.166.98.72]: SASL PLAIN authentication failed: authentication failure Jun 27 05:47:57 zimbra postfix/smtpd[25597]: warning: unknown[183.166.98.72]: SASL LOGIN authentication failed: authentication failure ... ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=183.166.98.72 |
2020-06-27 19:53:49 |
| 182.254.172.107 | attackbotsspam | Invalid user kvm from 182.254.172.107 port 46314 |
2020-06-27 20:07:44 |
| 124.89.120.204 | attackbotsspam | 2020-06-27T05:46:11.594458amanda2.illicoweb.com sshd\[26094\]: Invalid user gascon from 124.89.120.204 port 32824 2020-06-27T05:46:11.599742amanda2.illicoweb.com sshd\[26094\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.89.120.204 2020-06-27T05:46:13.276951amanda2.illicoweb.com sshd\[26094\]: Failed password for invalid user gascon from 124.89.120.204 port 32824 ssh2 2020-06-27T05:47:38.896080amanda2.illicoweb.com sshd\[26108\]: Invalid user gaspard from 124.89.120.204 port 43280 2020-06-27T05:47:38.901361amanda2.illicoweb.com sshd\[26108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.89.120.204 ... |
2020-06-27 20:09:11 |