City: Bergen
Region: Vestland
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 158.37.7.172
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16238
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;158.37.7.172. IN A
;; AUTHORITY SECTION:
. 36 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022072202 1800 900 604800 86400
;; Query time: 119 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 23 08:49:58 CST 2022
;; MSG SIZE rcvd: 105Host 172.7.37.158.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 172.7.37.158.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 201.105.183.143 | attackspam | Unauthorized connection attempt from IP address 201.105.183.143 on Port 139(NETBIOS) |
2020-03-06 03:56:01 |
| 162.243.58.222 | attack | Feb 13 15:15:48 odroid64 sshd\[10601\]: Invalid user kadmin from 162.243.58.222 Feb 13 15:15:48 odroid64 sshd\[10601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.58.222 ... |
2020-03-06 04:05:44 |
| 138.68.82.194 | attack | Mar 5 03:49:13 wbs sshd\[8290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194 user=root Mar 5 03:49:15 wbs sshd\[8290\]: Failed password for root from 138.68.82.194 port 54956 ssh2 Mar 5 03:57:59 wbs sshd\[9099\]: Invalid user cristina from 138.68.82.194 Mar 5 03:57:59 wbs sshd\[9099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194 Mar 5 03:58:00 wbs sshd\[9099\]: Failed password for invalid user cristina from 138.68.82.194 port 36894 ssh2 |
2020-03-06 04:20:20 |
| 162.255.116.176 | attackspam | Nov 17 08:39:53 odroid64 sshd\[8739\]: User root from 162.255.116.176 not allowed because not listed in AllowUsers Nov 17 08:39:53 odroid64 sshd\[8739\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.255.116.176 user=root ... |
2020-03-06 03:50:18 |
| 27.254.136.29 | attack | Mar 5 18:25:44 ip-172-31-62-245 sshd\[19821\]: Invalid user chenlu from 27.254.136.29\ Mar 5 18:25:46 ip-172-31-62-245 sshd\[19821\]: Failed password for invalid user chenlu from 27.254.136.29 port 35454 ssh2\ Mar 5 18:30:35 ip-172-31-62-245 sshd\[19858\]: Invalid user jinheon from 27.254.136.29\ Mar 5 18:30:37 ip-172-31-62-245 sshd\[19858\]: Failed password for invalid user jinheon from 27.254.136.29 port 46218 ssh2\ Mar 5 18:35:19 ip-172-31-62-245 sshd\[19893\]: Failed password for root from 27.254.136.29 port 56976 ssh2\ |
2020-03-06 03:49:29 |
| 212.92.122.196 | attack | GET /wp/ HTTP/1.1
GET /temp/ HTTP/1.1
GET /main/ HTTP/1.1
GET /backup/ HTTP/1.1
GET /wordpress/ HTTP/1.1
GET /site/ HTTP/1.1
GET /tmp/ HTTP/1.1
GET /portal/ HTTP/1.1
GET /blog/ HTTP/1.1
GET /cms/ HTTP/1.1
GET /test/ HTTP/1.1
GET /new/ HTTP/1.1
GET /web/ HTTP/1.1
GET /demo/ HTTP/1.1
GET /home/ HTTP/1.1
GET /dev/ HTTP/1.1
GET /old/ HTTP/1.1 |
2020-03-06 03:55:40 |
| 191.18.44.72 | attackspam | SSH/22 MH Probe, BF, Hack - |
2020-03-06 04:11:25 |
| 58.186.118.51 | attackbotsspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-03-06 04:14:57 |
| 222.186.42.155 | attackspam | Mar 5 20:57:08 * sshd[15075]: Failed password for root from 222.186.42.155 port 52045 ssh2 |
2020-03-06 04:01:23 |
| 183.89.229.114 | attackspam | suspicious action Thu, 05 Mar 2020 10:32:06 -0300 |
2020-03-06 04:21:46 |
| 138.197.103.160 | attack | Mar 5 20:29:06 ns381471 sshd[515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.103.160 Mar 5 20:29:09 ns381471 sshd[515]: Failed password for invalid user admin1 from 138.197.103.160 port 42260 ssh2 |
2020-03-06 03:47:04 |
| 111.12.52.188 | attackspam | suspicious action Thu, 05 Mar 2020 10:32:12 -0300 |
2020-03-06 04:14:26 |
| 189.84.169.245 | attackbotsspam | Unauthorized connection attempt from IP address 189.84.169.245 on Port 445(SMB) |
2020-03-06 04:12:00 |
| 82.179.176.252 | attackspam | Unauthorized connection attempt from IP address 82.179.176.252 on Port 445(SMB) |
2020-03-06 03:53:18 |
| 196.11.81.74 | attackbotsspam | Port probing on unauthorized port 23 |
2020-03-06 04:16:39 |