79.160.8.130 - IPInfo

Basic Info

City: Notodden

Region: Telemark

Country: Norway

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
79.160.85.76	attack	[27/Mar/2020:15:37:36 -0400] "GET / HTTP/1.1" Blank UA	2020-03-29 04:46:08

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 79.160.8.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39575
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;79.160.8.130.			IN	A

;; AUTHORITY SECTION:
.			409	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121301 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 14 03:09:42 CST 2019
;; MSG SIZE  rcvd: 116

Host info

130.8.160.79.in-addr.arpa domain name pointer 130.79-160-8.customer.lyse.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
130.8.160.79.in-addr.arpa	name = 130.79-160-8.customer.lyse.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
159.65.131.134	attackspambots	$f2bV_matches	2019-07-06 01:07:34
211.228.246.140	attackspam	Jul 5 14:42:21 host proftpd\[1674\]: 0.0.0.0 $211.228.246.140\[211.228.246.140\]$ - USER anonymous: no such user found from 211.228.246.140 \[211.228.246.140\] to 62.210.146.38:21 ...	2019-07-06 01:18:18
220.126.222.53	attack	Multiple failed FTP logins	2019-07-06 01:17:52
64.31.33.70	attackspam	\[2019-07-05 12:59:01\] NOTICE\[13443\] chan_sip.c: Registration from '"5050" \' failed for '64.31.33.70:5074' - Wrong password \[2019-07-05 12:59:01\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-05T12:59:01.115-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5050",SessionID="0x7f02f8335788",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/64.31.33.70/5074",Challenge="33476610",ReceivedChallenge="33476610",ReceivedHash="6ba670d9ba427a3251360fae5ab23015" \[2019-07-05 12:59:01\] NOTICE\[13443\] chan_sip.c: Registration from '"5050" \' failed for '64.31.33.70:5074' - Wrong password \[2019-07-05 12:59:01\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-05T12:59:01.211-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5050",SessionID="0x7f02f81ae088",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/	2019-07-06 01:12:28
180.241.149.30	attack	Repeated attempts against wp-login	2019-07-06 00:49:40
200.23.230.98	attack	mail.log:Jun 19 22:57:39 mail postfix/smtpd[29580]: warning: unknown[200.23.230.98]: SASL PLAIN authentication failed: authentication failure	2019-07-06 01:34:56
122.93.235.10	attack	Jul 5 22:24:53 tanzim-HP-Z238-Microtower-Workstation sshd\[5526\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.93.235.10 user=root Jul 5 22:24:55 tanzim-HP-Z238-Microtower-Workstation sshd\[5526\]: Failed password for root from 122.93.235.10 port 62289 ssh2 Jul 5 22:25:02 tanzim-HP-Z238-Microtower-Workstation sshd\[5526\]: Failed password for root from 122.93.235.10 port 62289 ssh2 ...	2019-07-06 01:09:16
54.213.218.103	attack	[munged]::443 54.213.218.103 - - [05/Jul/2019:16:58:20 +0200] "POST /[munged]: HTTP/1.1" 200 9078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 54.213.218.103 - - [05/Jul/2019:16:58:30 +0200] "POST /[munged]: HTTP/1.1" 200 9078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 54.213.218.103 - - [05/Jul/2019:16:58:30 +0200] "POST /[munged]: HTTP/1.1" 200 9078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 54.213.218.103 - - [05/Jul/2019:16:58:41 +0200] "POST /[munged]: HTTP/1.1" 200 9078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 54.213.218.103 - - [05/Jul/2019:16:58:41 +0200] "POST /[munged]: HTTP/1.1" 200 9078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 54.213.218.103 - - [05/Jul/2019:16:58:56 +0200] "POST /[munged]: HTTP/1.1" 200 9078 "-" "Mozilla/5.0 (X11	2019-07-06 01:13:15
103.119.153.176	attackspam	Spam mails sent to address hacked/leaked from Nexus Mods in July 2013	2019-07-06 00:55:40
218.56.138.164	attack	Jul 5 20:03:02 itv-usvr-02 sshd[15442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.56.138.164 user=www-data Jul 5 20:03:03 itv-usvr-02 sshd[15442]: Failed password for www-data from 218.56.138.164 port 60820 ssh2 Jul 5 20:10:00 itv-usvr-02 sshd[15537]: Invalid user xing from 218.56.138.164 port 60258 Jul 5 20:10:00 itv-usvr-02 sshd[15537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.56.138.164 Jul 5 20:10:00 itv-usvr-02 sshd[15537]: Invalid user xing from 218.56.138.164 port 60258 Jul 5 20:10:02 itv-usvr-02 sshd[15537]: Failed password for invalid user xing from 218.56.138.164 port 60258 ssh2	2019-07-06 00:59:12
23.126.140.33	attack	$f2bV_matches	2019-07-06 01:14:32
222.127.135.244	attackbots	2019-07-05 02:34:27 H=(vmexunoh.cn) [222.127.135.244]:61102 I=[192.147.25.65]:25 F=<1972695338@qq.com> rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-07-05 02:50:26 H=(buf.cn) [222.127.135.244]:5406 I=[192.147.25.65]:25 F=<1982824309@qq.com> rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-07-05 02:51:57 H=(hbbhnvo.net) [222.127.135.244]:15628 I=[192.147.25.65]:25 F=<2263814933@qq.com> rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/222.127.135.244) ...	2019-07-06 00:58:22
137.135.118.248	attackbotsspam	"to=UN	2019-07-06 01:25:04
178.128.125.131	attackbots	ssh failed login	2019-07-06 00:35:41
40.121.95.87	attackspam	Jul 5 11:11:14 vps691689 sshd[29278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.121.95.87 Jul 5 11:11:16 vps691689 sshd[29278]: Failed password for invalid user postgres from 40.121.95.87 port 39692 ssh2 Jul 5 11:13:36 vps691689 sshd[29294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.121.95.87 ...	2019-07-06 01:32:58

Recently Reported IPs

201.162.81.198	45.130.96.42	200.54.57.216	186.26.249.41
65.188.177.252	136.49.118.249	78.125.202.228	79.248.157.193
97.148.163.144	195.22.239.238	204.25.166.123	185.201.188.26
178.68.175.143	191.6.4.121	49.76.223.97	200.7.88.19
70.124.174.9	110.184.89.145	97.196.177.167	35.177.167.59