City: unknown
Region: unknown
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 77.19.93.43
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60612
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;77.19.93.43. IN A
;; AUTHORITY SECTION:
. 267 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022010801 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 09 09:37:04 CST 2022
;; MSG SIZE rcvd: 10443.93.19.77.in-addr.arpa domain name pointer 77.19.93.43.tmi.telenormobil.no.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
43.93.19.77.in-addr.arpa name = 77.19.93.43.tmi.telenormobil.no.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.118.160.13 | attackbotsspam | Portscan or hack attempt detected by psad/fwsnort |
2019-11-04 00:10:16 |
| 51.75.22.154 | attack | $f2bV_matches |
2019-11-04 00:13:16 |
| 159.89.10.77 | attackspambots | Nov 3 16:55:01 ns41 sshd[22913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.10.77 |
2019-11-04 00:27:24 |
| 118.25.196.31 | attackbotsspam | Nov 3 05:06:37 kapalua sshd\[3583\]: Invalid user 100 from 118.25.196.31 Nov 3 05:06:37 kapalua sshd\[3583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.196.31 Nov 3 05:06:38 kapalua sshd\[3583\]: Failed password for invalid user 100 from 118.25.196.31 port 39974 ssh2 Nov 3 05:11:40 kapalua sshd\[4090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.196.31 user=root Nov 3 05:11:42 kapalua sshd\[4090\]: Failed password for root from 118.25.196.31 port 45506 ssh2 |
2019-11-03 23:50:54 |
| 106.53.66.91 | attack | port scan and connect, tcp 80 (http) |
2019-11-04 00:12:42 |
| 52.233.166.76 | attackbotsspam | Nov 3 06:02:16 tdfoods sshd\[27163\]: Invalid user Win_2008 from 52.233.166.76 Nov 3 06:02:16 tdfoods sshd\[27163\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.233.166.76 Nov 3 06:02:18 tdfoods sshd\[27163\]: Failed password for invalid user Win_2008 from 52.233.166.76 port 54520 ssh2 Nov 3 06:06:49 tdfoods sshd\[27532\]: Invalid user hnip168 from 52.233.166.76 Nov 3 06:06:49 tdfoods sshd\[27532\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.233.166.76 |
2019-11-04 00:22:16 |
| 80.82.65.74 | attackbotsspam | ET CINS Active Threat Intelligence Poor Reputation IP group 74 - port: 7300 proto: TCP cat: Misc Attack |
2019-11-04 00:20:53 |
| 205.185.120.190 | attackspam | Nov 3 17:23:39 piServer sshd[21176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.185.120.190 Nov 3 17:23:41 piServer sshd[21176]: Failed password for invalid user et123456 from 205.185.120.190 port 60558 ssh2 Nov 3 17:27:27 piServer sshd[21422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.185.120.190 ... |
2019-11-04 00:28:06 |
| 103.219.112.1 | attackbots | Nov 3 20:56:08 gw1 sshd[959]: Failed password for root from 103.219.112.1 port 33826 ssh2 ... |
2019-11-04 00:09:12 |
| 5.196.217.177 | attackspambots | Nov 3 15:51:42 postfix/smtpd: warning: unknown[5.196.217.177]: SASL LOGIN authentication failed |
2019-11-03 23:52:04 |
| 106.53.6.244 | attackbotsspam | Nov 3 05:43:15 php1 sshd\[31484\]: Invalid user privatew from 106.53.6.244 Nov 3 05:43:15 php1 sshd\[31484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.6.244 Nov 3 05:43:17 php1 sshd\[31484\]: Failed password for invalid user privatew from 106.53.6.244 port 47042 ssh2 Nov 3 05:52:34 php1 sshd\[32585\]: Invalid user Admin4 from 106.53.6.244 Nov 3 05:52:34 php1 sshd\[32585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.6.244 |
2019-11-03 23:59:02 |
| 104.2.211.240 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/104.2.211.240/ US - 1H : (254) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN7018 IP : 104.2.211.240 CIDR : 104.0.0.0/12 PREFIX COUNT : 9621 UNIQUE IP COUNT : 81496832 ATTACKS DETECTED ASN7018 : 1H - 2 3H - 2 6H - 2 12H - 7 24H - 11 DateTime : 2019-11-03 15:36:32 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-04 00:08:56 |
| 45.136.110.27 | attackbots | Nov 3 16:56:57 h2177944 kernel: \[5672295.718505\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.27 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=57052 PROTO=TCP SPT=48297 DPT=13133 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 3 16:57:13 h2177944 kernel: \[5672311.849269\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.27 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=5282 PROTO=TCP SPT=48297 DPT=40333 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 3 17:00:10 h2177944 kernel: \[5672489.263002\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.27 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=60707 PROTO=TCP SPT=48297 DPT=21533 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 3 17:00:46 h2177944 kernel: \[5672525.158095\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.27 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=42588 PROTO=TCP SPT=48297 DPT=20733 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 3 17:20:02 h2177944 kernel: \[5673681.207572\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.27 DST=85.214.11 |
2019-11-04 00:32:14 |
| 124.160.83.138 | attackbotsspam | Nov 3 10:56:34 TORMINT sshd\[3104\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.160.83.138 user=root Nov 3 10:56:36 TORMINT sshd\[3104\]: Failed password for root from 124.160.83.138 port 39473 ssh2 Nov 3 11:01:43 TORMINT sshd\[3289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.160.83.138 user=root ... |
2019-11-04 00:06:00 |
| 104.168.145.77 | attackbots | Nov 3 16:55:32 vps691689 sshd[6525]: Failed password for root from 104.168.145.77 port 41790 ssh2 Nov 3 17:01:07 vps691689 sshd[6593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.145.77 ... |
2019-11-04 00:17:46 |