City: unknown
Region: unknown
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 185.20.245.196
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23897
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;185.20.245.196. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025030702 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 08 07:12:03 CST 2025
;; MSG SIZE rcvd: 107Host 196.245.20.185.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 196.245.20.185.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 101.32.41.101 | attackbotsspam | Sep 19 02:32:50 ip-172-31-16-56 sshd\[26929\]: Failed password for root from 101.32.41.101 port 45902 ssh2\ Sep 19 02:37:06 ip-172-31-16-56 sshd\[27011\]: Invalid user test from 101.32.41.101\ Sep 19 02:37:07 ip-172-31-16-56 sshd\[27011\]: Failed password for invalid user test from 101.32.41.101 port 57706 ssh2\ Sep 19 02:41:20 ip-172-31-16-56 sshd\[27155\]: Invalid user admin from 101.32.41.101\ Sep 19 02:41:22 ip-172-31-16-56 sshd\[27155\]: Failed password for invalid user admin from 101.32.41.101 port 41304 ssh2\ |
2020-09-19 17:29:15 |
| 103.145.13.159 | attackbots | Listed on zen-spamhaus also abuseat.org / proto=17 . srcport=5061 . dstport=5060 . (2851) |
2020-09-19 17:15:31 |
| 115.99.84.236 | attackbots | Listed on dnsbl-sorbs plus abuseat.org and zen-spamhaus / proto=6 . srcport=60353 . dstport=23 . (2850) |
2020-09-19 17:26:53 |
| 94.23.24.213 | attackbotsspam | Auto Fail2Ban report, multiple SSH login attempts. |
2020-09-19 17:22:59 |
| 95.188.8.193 | attackbots | Unauthorised access (Sep 18) SRC=95.188.8.193 LEN=40 TTL=244 ID=46 DF TCP DPT=23 WINDOW=14600 SYN |
2020-09-19 17:52:52 |
| 139.59.215.241 | attackbotsspam | 139.59.215.241 - - [19/Sep/2020:06:55:27 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.215.241 - - [19/Sep/2020:06:55:27 +0200] "POST /wp-login.php HTTP/1.1" 200 2698 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.215.241 - - [19/Sep/2020:06:55:28 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.215.241 - - [19/Sep/2020:06:55:28 +0200] "POST /wp-login.php HTTP/1.1" 200 2697 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.215.241 - - [19/Sep/2020:06:55:28 +0200] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.215.241 - - [19/Sep/2020:06:55:28 +0200] "POST /wp-login.php HTTP/1.1" 200 2696 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/201001 ... |
2020-09-19 17:48:19 |
| 188.0.120.53 | attackbotsspam | Icarus honeypot on github |
2020-09-19 17:51:21 |
| 107.170.18.163 | attackspambots | Sep 19 11:18:26 abendstille sshd\[26734\]: Invalid user nagios from 107.170.18.163 Sep 19 11:18:26 abendstille sshd\[26734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.18.163 Sep 19 11:18:27 abendstille sshd\[26734\]: Failed password for invalid user nagios from 107.170.18.163 port 52365 ssh2 Sep 19 11:28:01 abendstille sshd\[3090\]: Invalid user tomcat from 107.170.18.163 Sep 19 11:28:01 abendstille sshd\[3090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.18.163 ... |
2020-09-19 17:36:26 |
| 185.39.11.109 | attack | [Mon Sep 14 21:35:04 2020] - Syn Flood From IP: 185.39.11.109 Port: 52084 |
2020-09-19 17:35:56 |
| 51.210.44.194 | attackbotsspam | Sep 19 11:19:34 h2865660 sshd[20743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.210.44.194 user=root Sep 19 11:19:36 h2865660 sshd[20743]: Failed password for root from 51.210.44.194 port 60104 ssh2 Sep 19 11:25:10 h2865660 sshd[21008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.210.44.194 user=root Sep 19 11:25:12 h2865660 sshd[21008]: Failed password for root from 51.210.44.194 port 48248 ssh2 Sep 19 11:29:52 h2865660 sshd[21307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.210.44.194 user=root Sep 19 11:29:54 h2865660 sshd[21307]: Failed password for root from 51.210.44.194 port 59786 ssh2 ... |
2020-09-19 17:38:43 |
| 144.172.91.3 | attackbots | 144.172.91.3 has been banned for [spam] ... |
2020-09-19 17:47:06 |
| 181.49.154.26 | attackbotsspam | Sep 19 11:21:18 sso sshd[12136]: Failed password for www-data from 181.49.154.26 port 40154 ssh2 Sep 19 11:25:00 sso sshd[12591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.154.26 ... |
2020-09-19 17:41:25 |
| 110.81.155.168 | attackbots | Sep 19 10:34:21 vpn01 sshd[18013]: Failed password for root from 110.81.155.168 port 49664 ssh2 Sep 19 10:39:04 vpn01 sshd[18052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.81.155.168 ... |
2020-09-19 17:32:51 |
| 112.85.42.72 | attackspam | Sep 19 12:13:39 pkdns2 sshd\[3854\]: Failed password for root from 112.85.42.72 port 15674 ssh2Sep 19 12:13:42 pkdns2 sshd\[3854\]: Failed password for root from 112.85.42.72 port 15674 ssh2Sep 19 12:13:44 pkdns2 sshd\[3854\]: Failed password for root from 112.85.42.72 port 15674 ssh2Sep 19 12:20:40 pkdns2 sshd\[4189\]: Failed password for root from 112.85.42.72 port 47543 ssh2Sep 19 12:21:32 pkdns2 sshd\[4218\]: Failed password for root from 112.85.42.72 port 36314 ssh2Sep 19 12:22:24 pkdns2 sshd\[4249\]: Failed password for root from 112.85.42.72 port 24591 ssh2 ... |
2020-09-19 17:39:38 |
| 67.8.152.107 | attack | TCP Port Scanning |
2020-09-19 17:55:18 |