City: unknown
Region: unknown
Country: Norway
Internet Service Provider: Telenor
Hostname: unknown
Organization: Telenor Norge AS
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.150.211.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60359
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.150.211.11. IN A
;; AUTHORITY SECTION:
. 2956 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019082100 1800 900 604800 86400
;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 22 00:42:39 CST 2019
;; MSG SIZE rcvd: 11611.211.150.2.in-addr.arpa domain name pointer 2.150.211.11.tmi.telenormobil.no.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
11.211.150.2.in-addr.arpa name = 2.150.211.11.tmi.telenormobil.no.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 193.112.248.85 | attackbotsspam | Mar 5 22:53:03 localhost sshd\[2543\]: Invalid user tsashipping from 193.112.248.85 Mar 5 22:53:03 localhost sshd\[2543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.248.85 Mar 5 22:53:05 localhost sshd\[2543\]: Failed password for invalid user tsashipping from 193.112.248.85 port 42342 ssh2 Mar 5 22:59:49 localhost sshd\[2816\]: Invalid user user from 193.112.248.85 Mar 5 22:59:49 localhost sshd\[2816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.248.85 ... |
2020-03-06 06:13:02 |
| 174.138.58.149 | attackspambots | Mar 6 03:20:59 areeb-Workstation sshd[5518]: Failed password for gnats from 174.138.58.149 port 56886 ssh2 ... |
2020-03-06 06:04:36 |
| 159.89.162.118 | attack | Oct 22 22:28:34 odroid64 sshd\[3903\]: User root from 159.89.162.118 not allowed because not listed in AllowUsers Oct 22 22:28:34 odroid64 sshd\[3903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.162.118 user=root Oct 22 22:28:34 odroid64 sshd\[3903\]: User root from 159.89.162.118 not allowed because not listed in AllowUsers Oct 22 22:28:34 odroid64 sshd\[3903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.162.118 user=root Oct 22 22:28:37 odroid64 sshd\[3903\]: Failed password for invalid user root from 159.89.162.118 port 33152 ssh2 Oct 22 22:28:34 odroid64 sshd\[3903\]: User root from 159.89.162.118 not allowed because not listed in AllowUsers Oct 22 22:28:34 odroid64 sshd\[3903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.162.118 user=root Oct 22 22:28:37 odroid64 sshd\[3903\]: Failed password for invalid user root ... |
2020-03-06 05:47:57 |
| 222.186.180.8 | attack | detected by Fail2Ban |
2020-03-06 06:09:06 |
| 49.88.112.75 | attackbots | Mar 6 02:48:22 gw1 sshd[4997]: Failed password for root from 49.88.112.75 port 29441 ssh2 ... |
2020-03-06 05:56:06 |
| 120.70.102.16 | attackspam | Mar 5 16:07:15 santamaria sshd\[7170\]: Invalid user hudson from 120.70.102.16 Mar 5 16:07:15 santamaria sshd\[7170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.70.102.16 Mar 5 16:07:17 santamaria sshd\[7170\]: Failed password for invalid user hudson from 120.70.102.16 port 53171 ssh2 ... |
2020-03-06 05:55:20 |
| 159.89.165.127 | attackspambots | Mar 5 21:45:18 localhost sshd\[31329\]: Invalid user admin from 159.89.165.127 Mar 5 21:45:18 localhost sshd\[31329\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.165.127 Mar 5 21:45:20 localhost sshd\[31329\]: Failed password for invalid user admin from 159.89.165.127 port 32830 ssh2 Mar 5 21:53:21 localhost sshd\[31681\]: Invalid user postgres from 159.89.165.127 Mar 5 21:53:21 localhost sshd\[31681\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.165.127 ... |
2020-03-06 05:41:53 |
| 185.36.81.57 | attack | Mar 5 22:57:25 srv01 postfix/smtpd\[32448\]: warning: unknown\[185.36.81.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 5 22:57:52 srv01 postfix/smtpd\[32448\]: warning: unknown\[185.36.81.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 5 22:58:01 srv01 postfix/smtpd\[31566\]: warning: unknown\[185.36.81.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 5 22:58:46 srv01 postfix/smtpd\[31566\]: warning: unknown\[185.36.81.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 5 23:00:00 srv01 postfix/smtpd\[29496\]: warning: unknown\[185.36.81.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-03-06 06:01:03 |
| 139.162.123.103 | attack | Scanning random ports - tries to find possible vulnerable services |
2020-03-06 05:59:00 |
| 139.162.113.212 | attack | Port 26 (SMTP) access denied |
2020-03-06 05:53:38 |
| 5.196.110.170 | attackspam | Mar 5 21:01:36 XXX sshd[14017]: Invalid user oracle from 5.196.110.170 port 37662 |
2020-03-06 06:03:26 |
| 91.151.93.224 | attackspambots | SpamScore above: 10.0 |
2020-03-06 05:45:51 |
| 222.186.30.145 | attackspam | 2020-03-05T23:03:05.540534scmdmz1 sshd[25948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.145 user=root 2020-03-05T23:03:07.799768scmdmz1 sshd[25948]: Failed password for root from 222.186.30.145 port 18848 ssh2 2020-03-05T23:03:09.698383scmdmz1 sshd[25948]: Failed password for root from 222.186.30.145 port 18848 ssh2 ... |
2020-03-06 06:05:36 |
| 119.57.162.18 | attackspambots | Mar 5 21:00:24 XXX sshd[13994]: Invalid user xutong from 119.57.162.18 port 39317 |
2020-03-06 06:02:52 |
| 31.0.224.191 | attackbots | Honeypot attack, port: 5555, PTR: apn-31-0-224-191.static.gprs.plus.pl. |
2020-03-06 05:56:34 |