City: Oslo
Region: Oslo
Country: Norway
Internet Service Provider: Telenor
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.150.131.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20594
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;2.150.131.85. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025031502 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 16 12:12:07 CST 2025
;; MSG SIZE rcvd: 105
85.131.150.2.in-addr.arpa domain name pointer 2.150.131.85.tmi.telenormobil.no.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
85.131.150.2.in-addr.arpa name = 2.150.131.85.tmi.telenormobil.no.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 12.31.192.18 | attackspambots | Automatic report - XMLRPC Attack |
2019-10-30 16:05:20 |
| 165.22.254.29 | attackbotsspam | Automatic report - XMLRPC Attack |
2019-10-30 16:16:58 |
| 123.207.8.86 | attackbotsspam | Invalid user cd from 123.207.8.86 port 59650 |
2019-10-30 16:23:29 |
| 118.89.27.248 | attack | Oct 30 06:48:56 localhost sshd\[29519\]: Invalid user applmgr from 118.89.27.248 port 51306 Oct 30 06:48:56 localhost sshd\[29519\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.27.248 Oct 30 06:48:57 localhost sshd\[29519\]: Failed password for invalid user applmgr from 118.89.27.248 port 51306 ssh2 |
2019-10-30 16:09:44 |
| 182.61.176.105 | attackbotsspam | Oct 29 18:56:48 auw2 sshd\[5706\]: Invalid user ou from 182.61.176.105 Oct 29 18:56:48 auw2 sshd\[5706\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.176.105 Oct 29 18:56:49 auw2 sshd\[5706\]: Failed password for invalid user ou from 182.61.176.105 port 49646 ssh2 Oct 29 19:01:14 auw2 sshd\[6057\]: Invalid user upload2 from 182.61.176.105 Oct 29 19:01:14 auw2 sshd\[6057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.176.105 |
2019-10-30 16:07:45 |
| 139.59.17.116 | attack | Automatic report - Banned IP Access |
2019-10-30 16:43:42 |
| 92.127.240.52 | attack | 445/tcp [2019-10-30]1pkt |
2019-10-30 16:20:59 |
| 80.211.78.132 | attackbots | Oct 30 07:39:34 XXX sshd[11393]: Invalid user bd from 80.211.78.132 port 42584 |
2019-10-30 16:27:32 |
| 109.87.115.220 | attackbotsspam | Oct 30 07:03:49 MK-Soft-Root2 sshd[9994]: Failed password for root from 109.87.115.220 port 49087 ssh2 Oct 30 07:09:55 MK-Soft-Root2 sshd[11052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.87.115.220 ... |
2019-10-30 16:37:11 |
| 184.105.139.105 | attackspambots | 10/30/2019-06:44:48.836364 184.105.139.105 Protocol: 17 GPL RPC xdmcp info query |
2019-10-30 16:07:26 |
| 181.113.24.210 | attack | 23/tcp [2019-10-30]1pkt |
2019-10-30 16:15:47 |
| 178.34.152.122 | attackbotsspam | SMB Server BruteForce Attack |
2019-10-30 16:35:10 |
| 118.25.55.87 | attack | Oct 30 07:52:04 server sshd\[25649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.55.87 user=root Oct 30 07:52:06 server sshd\[25649\]: Failed password for root from 118.25.55.87 port 39990 ssh2 Oct 30 08:08:44 server sshd\[29470\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.55.87 user=root Oct 30 08:08:45 server sshd\[29470\]: Failed password for root from 118.25.55.87 port 54194 ssh2 Oct 30 08:13:00 server sshd\[30519\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.55.87 user=root ... |
2019-10-30 16:16:17 |
| 14.243.100.60 | attackspambots | 445/tcp [2019-10-30]1pkt |
2019-10-30 16:04:55 |
| 219.143.181.212 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/219.143.181.212/ CN - 1H : (788) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4847 IP : 219.143.181.212 CIDR : 219.143.128.0/18 PREFIX COUNT : 1024 UNIQUE IP COUNT : 6630912 ATTACKS DETECTED ASN4847 : 1H - 1 3H - 1 6H - 1 12H - 2 24H - 4 DateTime : 2019-10-30 04:50:41 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-30 16:33:37 |