City: unknown
Region: unknown
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.52.51.59
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60922
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;213.52.51.59. IN A
;; AUTHORITY SECTION:
. 514 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011001 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 11 01:42:47 CST 2022
;; MSG SIZE rcvd: 105
59.51.52.213.in-addr.arpa domain name pointer static59.banetele-cust.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
59.51.52.213.in-addr.arpa name = static59.banetele-cust.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 129.204.2.182 | attackspambots | Jan 4 07:03:37 IngegnereFirenze sshd[31032]: Failed password for invalid user m from 129.204.2.182 port 59137 ssh2 ... |
2020-01-04 17:32:57 |
| 62.165.30.221 | attackspambots | Jan 4 04:17:42 debian sshd[27780]: Unable to negotiate with 62.165.30.221 port 32718: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Jan 4 04:20:46 debian sshd[27902]: Unable to negotiate with 62.165.30.221 port 51711: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2020-01-04 17:35:11 |
| 112.120.134.69 | attack | Honeypot attack, port: 5555, PTR: n112120134069.netvigator.com. |
2020-01-04 17:29:09 |
| 111.231.237.245 | attackspam | Jan 4 11:18:31 server sshd\[2462\]: Invalid user filter from 111.231.237.245 Jan 4 11:18:31 server sshd\[2462\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.237.245 Jan 4 11:18:33 server sshd\[2462\]: Failed password for invalid user filter from 111.231.237.245 port 50630 ssh2 Jan 4 11:28:33 server sshd\[4635\]: Invalid user telnet from 111.231.237.245 Jan 4 11:28:33 server sshd\[4635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.237.245 ... |
2020-01-04 17:25:08 |
| 113.167.175.242 | attackspam | 20/1/3@23:49:09: FAIL: Alarm-Network address from=113.167.175.242 20/1/3@23:49:10: FAIL: Alarm-Network address from=113.167.175.242 ... |
2020-01-04 17:32:41 |
| 165.22.112.45 | attackspambots | Jan 4 05:49:18 nextcloud sshd\[7273\]: Invalid user mwc from 165.22.112.45 Jan 4 05:49:18 nextcloud sshd\[7273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.112.45 Jan 4 05:49:20 nextcloud sshd\[7273\]: Failed password for invalid user mwc from 165.22.112.45 port 49444 ssh2 ... |
2020-01-04 17:24:40 |
| 92.74.47.131 | attack | Lines containing failures of 92.74.47.131 Jan 4 05:46:51 shared04 sshd[2501]: Invalid user admin from 92.74.47.131 port 44842 Jan 4 05:46:51 shared04 sshd[2501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.74.47.131 Jan 4 05:46:53 shared04 sshd[2501]: Failed password for invalid user admin from 92.74.47.131 port 44842 ssh2 Jan 4 05:46:53 shared04 sshd[2501]: Received disconnect from 92.74.47.131 port 44842:11: Bye Bye [preauth] Jan 4 05:46:53 shared04 sshd[2501]: Disconnected from invalid user admin 92.74.47.131 port 44842 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=92.74.47.131 |
2020-01-04 17:19:37 |
| 176.27.30.237 | attack | 2020-01-02T20:58:39.727779WS-Zach sshd[319948]: User root from 176.27.30.237 not allowed because none of user's groups are listed in AllowGroups 2020-01-02T20:58:40.525015WS-Zach sshd[319948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.27.30.237 user=root 2020-01-02T20:58:39.727779WS-Zach sshd[319948]: User root from 176.27.30.237 not allowed because none of user's groups are listed in AllowGroups 2020-01-02T20:58:42.715720WS-Zach sshd[319948]: Failed password for invalid user root from 176.27.30.237 port 51340 ssh2 2020-01-04T04:32:35.734264WS-Zach sshd[624247]: User root from 176.27.30.237 not allowed because none of user's groups are listed in AllowGroups ... |
2020-01-04 17:35:34 |
| 13.64.18.44 | attackspambots | Automatic report - SSH Brute-Force Attack |
2020-01-04 17:39:19 |
| 46.153.81.129 | attackspam | 2020-01-04T09:38:36.734006 sshd[25466]: Invalid user josefina from 46.153.81.129 port 49343 2020-01-04T09:38:36.747603 sshd[25466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.153.81.129 2020-01-04T09:38:36.734006 sshd[25466]: Invalid user josefina from 46.153.81.129 port 49343 2020-01-04T09:38:38.720633 sshd[25466]: Failed password for invalid user josefina from 46.153.81.129 port 49343 ssh2 2020-01-04T09:56:03.724801 sshd[25770]: Invalid user kau from 46.153.81.129 port 44830 ... |
2020-01-04 17:27:59 |
| 124.78.10.184 | attack | Honeypot attack, port: 445, PTR: 184.10.78.124.broad.xw.sh.dynamic.163data.com.cn. |
2020-01-04 18:01:35 |
| 123.241.26.243 | attackbots | Honeypot attack, port: 81, PTR: 123-241-26-243.cctv.dynamic.tbcnet.net.tw. |
2020-01-04 17:48:41 |
| 36.66.149.211 | attackspam | Jan 4 10:20:42 tor-proxy-04 sshd\[20484\]: Invalid user test3 from 36.66.149.211 port 43384 Jan 4 10:22:56 tor-proxy-04 sshd\[20490\]: Invalid user carlos from 36.66.149.211 port 35150 Jan 4 10:25:20 tor-proxy-04 sshd\[20501\]: Invalid user test from 36.66.149.211 port 55148 ... |
2020-01-04 17:31:52 |
| 2.84.250.192 | attack | Honeypot attack, port: 81, PTR: ppp-2-84-250-192.home.otenet.gr. |
2020-01-04 17:59:22 |
| 86.188.246.2 | attackbotsspam | Jan 4 07:02:10 plex sshd[32603]: Invalid user ow from 86.188.246.2 port 53956 |
2020-01-04 17:30:40 |