City: Frekhaug
Region: Vestland
Country: Norway
Internet Service Provider: Telenor
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 46.9.142.67
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11916
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;46.9.142.67. IN A
;; AUTHORITY SECTION:
. 261 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022010602 1800 900 604800 86400
;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 07 09:23:40 CST 2022
;; MSG SIZE rcvd: 10467.142.9.46.in-addr.arpa domain name pointer 67.142.9.46.customer.cdi.no.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
67.142.9.46.in-addr.arpa name = 67.142.9.46.customer.cdi.no.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 132.255.116.14 | attackspam | Jul 29 13:09:32 rocket sshd[12495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.255.116.14 Jul 29 13:09:35 rocket sshd[12495]: Failed password for invalid user tonytan from 132.255.116.14 port 60407 ssh2 Jul 29 13:14:16 rocket sshd[13197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.255.116.14 ... |
2020-07-29 20:26:11 |
| 180.76.186.109 | attackspam | Jul 29 14:31:36 fhem-rasp sshd[7838]: Invalid user zychao from 180.76.186.109 port 35855 ... |
2020-07-29 20:40:11 |
| 159.65.216.161 | attackbots | 2020-07-29T12:40:20.279080shield sshd\[9045\]: Invalid user office2 from 159.65.216.161 port 60164 2020-07-29T12:40:20.289290shield sshd\[9045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.216.161 2020-07-29T12:40:22.622590shield sshd\[9045\]: Failed password for invalid user office2 from 159.65.216.161 port 60164 ssh2 2020-07-29T12:45:54.321426shield sshd\[9635\]: Invalid user siva from 159.65.216.161 port 45474 2020-07-29T12:45:54.331131shield sshd\[9635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.216.161 |
2020-07-29 20:52:26 |
| 210.105.148.87 | attackspambots | SSH Brute-Force attacks |
2020-07-29 20:24:08 |
| 222.186.173.142 | attackspambots | Jul 29 05:33:22 dignus sshd[16630]: Failed password for root from 222.186.173.142 port 53258 ssh2 Jul 29 05:33:22 dignus sshd[16630]: error: maximum authentication attempts exceeded for root from 222.186.173.142 port 53258 ssh2 [preauth] Jul 29 05:33:27 dignus sshd[16661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.142 user=root Jul 29 05:33:29 dignus sshd[16661]: Failed password for root from 222.186.173.142 port 16452 ssh2 Jul 29 05:33:33 dignus sshd[16661]: Failed password for root from 222.186.173.142 port 16452 ssh2 ... |
2020-07-29 20:34:55 |
| 61.177.172.102 | attackspam | Jul 29 15:00:13 theomazars sshd[14865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.102 user=root Jul 29 15:00:15 theomazars sshd[14865]: Failed password for root from 61.177.172.102 port 31509 ssh2 |
2020-07-29 21:02:48 |
| 70.49.168.237 | attackbotsspam | Jul 29 14:34:14 vps sshd[71678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=toroon474qw-lp140-03-70-49-168-237.dsl.bell.ca Jul 29 14:34:14 vps sshd[71678]: Failed password for invalid user changlc from 70.49.168.237 port 51366 ssh2 Jul 29 14:37:57 vps sshd[89041]: Invalid user pentaho from 70.49.168.237 port 37256 Jul 29 14:37:57 vps sshd[89041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=toroon474qw-lp140-03-70-49-168-237.dsl.bell.ca Jul 29 14:37:59 vps sshd[89041]: Failed password for invalid user pentaho from 70.49.168.237 port 37256 ssh2 ... |
2020-07-29 20:51:12 |
| 88.157.229.58 | attackspambots | Jul 29 14:29:58 home sshd[330299]: Invalid user linjie from 88.157.229.58 port 37076 Jul 29 14:29:58 home sshd[330299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.157.229.58 Jul 29 14:29:58 home sshd[330299]: Invalid user linjie from 88.157.229.58 port 37076 Jul 29 14:30:00 home sshd[330299]: Failed password for invalid user linjie from 88.157.229.58 port 37076 ssh2 Jul 29 14:34:06 home sshd[332592]: Invalid user julio from 88.157.229.58 port 49130 ... |
2020-07-29 20:47:44 |
| 158.69.158.101 | attack | 158.69.158.101 - - [29/Jul/2020:13:14:08 +0100] "POST //xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 158.69.158.101 - - [29/Jul/2020:13:14:08 +0100] "POST //xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 158.69.158.101 - - [29/Jul/2020:13:14:09 +0100] "POST //xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" ... |
2020-07-29 20:32:51 |
| 80.211.98.67 | attackbots | Jul 29 14:26:22 vmd36147 sshd[31522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67 Jul 29 14:26:25 vmd36147 sshd[31522]: Failed password for invalid user chenys from 80.211.98.67 port 39154 ssh2 Jul 29 14:35:01 vmd36147 sshd[18616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.98.67 ... |
2020-07-29 20:50:40 |
| 122.51.17.106 | attack | Jul 29 12:11:48 rush sshd[6027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.17.106 Jul 29 12:11:50 rush sshd[6027]: Failed password for invalid user luzw from 122.51.17.106 port 33114 ssh2 Jul 29 12:14:10 rush sshd[6081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.17.106 ... |
2020-07-29 20:33:34 |
| 51.83.73.109 | attackspam | Jul 29 14:39:35 OPSO sshd\[16255\]: Invalid user koeso from 51.83.73.109 port 40622 Jul 29 14:39:35 OPSO sshd\[16255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.73.109 Jul 29 14:39:37 OPSO sshd\[16255\]: Failed password for invalid user koeso from 51.83.73.109 port 40622 ssh2 Jul 29 14:43:16 OPSO sshd\[17144\]: Invalid user uftp from 51.83.73.109 port 50508 Jul 29 14:43:16 OPSO sshd\[17144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.73.109 |
2020-07-29 21:01:35 |
| 111.92.240.206 | attackbotsspam | 111.92.240.206 - - [29/Jul/2020:14:14:13 +0200] "GET /wp-login.php HTTP/1.1" 200 5738 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 111.92.240.206 - - [29/Jul/2020:14:14:15 +0200] "POST /wp-login.php HTTP/1.1" 200 5989 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 111.92.240.206 - - [29/Jul/2020:14:14:17 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-07-29 20:24:34 |
| 185.142.236.34 | attack | Fail2Ban Ban Triggered |
2020-07-29 20:31:34 |
| 106.75.234.88 | attack | 2020-07-29T15:44:31.806053mail.standpoint.com.ua sshd[29123]: Invalid user liuying from 106.75.234.88 port 60194 2020-07-29T15:44:31.808980mail.standpoint.com.ua sshd[29123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.234.88 2020-07-29T15:44:31.806053mail.standpoint.com.ua sshd[29123]: Invalid user liuying from 106.75.234.88 port 60194 2020-07-29T15:44:34.267300mail.standpoint.com.ua sshd[29123]: Failed password for invalid user liuying from 106.75.234.88 port 60194 ssh2 2020-07-29T15:48:04.089162mail.standpoint.com.ua sshd[29639]: Invalid user huangjiefeng from 106.75.234.88 port 44624 ... |
2020-07-29 20:53:23 |