City: Lillehammer
Region: Innlandet
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 158.38.201.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28166
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;158.38.201.52. IN A
;; AUTHORITY SECTION:
. 193 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022072202 1800 900 604800 86400
;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 23 08:50:05 CST 2022
;; MSG SIZE rcvd: 106Host 52.201.38.158.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 52.201.38.158.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.69.245.45 | attack | Honeypot hit. |
2020-03-05 20:13:41 |
| 82.21.80.134 | attackbotsspam | attempted connection to port 8080 |
2020-03-05 20:21:39 |
| 117.4.106.186 | attackspam | Unauthorized connection attempt from IP address 117.4.106.186 on Port 445(SMB) |
2020-03-05 20:02:15 |
| 113.210.51.226 | attackspambots | Unauthorized connection attempt from IP address 113.210.51.226 on Port 445(SMB) |
2020-03-05 20:06:07 |
| 91.204.188.50 | attack | Mar 5 01:33:51 hanapaa sshd\[21092\]: Invalid user penglina from 91.204.188.50 Mar 5 01:33:51 hanapaa sshd\[21092\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.204.188.50 Mar 5 01:33:52 hanapaa sshd\[21092\]: Failed password for invalid user penglina from 91.204.188.50 port 39618 ssh2 Mar 5 01:43:40 hanapaa sshd\[21858\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.204.188.50 user=root Mar 5 01:43:42 hanapaa sshd\[21858\]: Failed password for root from 91.204.188.50 port 51862 ssh2 |
2020-03-05 19:58:20 |
| 14.21.36.84 | attackbots | Mar 4 23:26:29 eddieflores sshd\[14655\]: Invalid user csgoserver from 14.21.36.84 Mar 4 23:26:29 eddieflores sshd\[14655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.36.84 Mar 4 23:26:30 eddieflores sshd\[14655\]: Failed password for invalid user csgoserver from 14.21.36.84 port 57224 ssh2 Mar 4 23:32:15 eddieflores sshd\[15115\]: Invalid user peter from 14.21.36.84 Mar 4 23:32:15 eddieflores sshd\[15115\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.36.84 |
2020-03-05 19:51:53 |
| 42.62.96.36 | attack | 1433/tcp 1433/tcp 1433/tcp... [2020-02-15/03-05]4pkt,1pt.(tcp) |
2020-03-05 19:49:02 |
| 77.232.100.165 | attackbotsspam | Mar 5 12:53:39 vps691689 sshd[7110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.232.100.165 Mar 5 12:53:41 vps691689 sshd[7110]: Failed password for invalid user kuangjianzhong from 77.232.100.165 port 51418 ssh2 Mar 5 13:03:32 vps691689 sshd[7518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.232.100.165 ... |
2020-03-05 20:16:40 |
| 178.62.54.132 | attack | web-1 [ssh] SSH Attack |
2020-03-05 19:54:18 |
| 115.74.94.40 | attackspambots | Unauthorized connection attempt from IP address 115.74.94.40 on Port 445(SMB) |
2020-03-05 19:51:23 |
| 124.207.48.72 | attackbotsspam | " " |
2020-03-05 19:57:05 |
| 51.254.113.128 | attackspam | Mar 5 08:36:11 firewall sshd[24710]: Invalid user teamspeak from 51.254.113.128 Mar 5 08:36:13 firewall sshd[24710]: Failed password for invalid user teamspeak from 51.254.113.128 port 36099 ssh2 Mar 5 08:44:51 firewall sshd[24952]: Invalid user teamcity from 51.254.113.128 ... |
2020-03-05 20:00:06 |
| 52.24.5.49 | attack | 52.24.5.49 - - \[05/Mar/2020:05:46:15 +0100\] "POST /wp-login.php HTTP/1.0" 200 3080 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 52.24.5.49 - - \[05/Mar/2020:05:46:18 +0100\] "POST /wp-login.php HTTP/1.0" 200 3039 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 52.24.5.49 - - \[05/Mar/2020:05:46:21 +0100\] "POST /wp-login.php HTTP/1.0" 200 3048 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-03-05 20:20:08 |
| 1.192.214.214 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-03-05 20:03:06 |
| 61.178.103.148 | attackspam | 03/05/2020-07:10:08.949125 61.178.103.148 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2020-03-05 20:17:05 |