City: unknown
Region: unknown
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.200.246.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60448
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;85.200.246.214. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012900 1800 900 604800 86400
;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 15:36:50 CST 2025
;; MSG SIZE rcvd: 107
214.246.200.85.in-addr.arpa domain name pointer 214.85-200-246.bkkb.no.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
214.246.200.85.in-addr.arpa name = 214.85-200-246.bkkb.no.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 171.103.163.238 | attack | f2b trigger Multiple SASL failures |
2020-04-06 23:06:32 |
| 167.172.190.187 | attackspam | Apr 6 11:57:22 XXX sshd[21934]: User r.r from 167.172.190.187 not allowed because none of user's groups are listed in AllowGroups Apr 6 11:57:22 XXX sshd[21934]: Received disconnect from 167.172.190.187: 11: Bye Bye [preauth] Apr 6 11:57:23 XXX sshd[21936]: User r.r from 167.172.190.187 not allowed because none of user's groups are listed in AllowGroups Apr 6 11:57:23 XXX sshd[21936]: Received disconnect from 167.172.190.187: 11: Bye Bye [preauth] Apr 6 11:57:23 XXX sshd[21938]: User r.r from 167.172.190.187 not allowed because none of user's groups are listed in AllowGroups Apr 6 11:57:23 XXX sshd[21938]: Received disconnect from 167.172.190.187: 11: Bye Bye [preauth] Apr 6 11:57:24 XXX sshd[21940]: Invalid user adminixxxr from 167.172.190.187 Apr 6 11:57:24 XXX sshd[21940]: Received disconnect from 167.172.190.187: 11: Bye Bye [preauth] Apr 6 11:57:24 XXX sshd[21942]: Invalid user NetLinx from 167.172.190.187 Apr 6 11:57:24 XXX sshd[21942]: Received disconne........ ------------------------------- |
2020-04-06 23:06:54 |
| 123.143.203.67 | attack | Apr 6 06:42:23 server1 sshd\[6654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.143.203.67 user=root Apr 6 06:42:25 server1 sshd\[6654\]: Failed password for root from 123.143.203.67 port 34554 ssh2 Apr 6 06:46:42 server1 sshd\[6294\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.143.203.67 user=root Apr 6 06:46:44 server1 sshd\[6294\]: Failed password for root from 123.143.203.67 port 45890 ssh2 Apr 6 06:50:59 server1 sshd\[8293\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.143.203.67 user=root ... |
2020-04-06 23:03:03 |
| 178.62.99.41 | attackspam | Apr 6 17:18:30 icinga sshd[41289]: Failed password for nagios from 178.62.99.41 port 54878 ssh2 Apr 6 17:20:15 icinga sshd[43571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.99.41 Apr 6 17:20:16 icinga sshd[43571]: Failed password for invalid user ubuntu from 178.62.99.41 port 36646 ssh2 ... |
2020-04-06 23:31:45 |
| 47.240.68.136 | attackspam | Automatic report - XMLRPC Attack |
2020-04-06 23:25:54 |
| 222.186.173.154 | attack | $f2bV_matches |
2020-04-06 23:49:23 |
| 213.182.84.153 | attackspam | Apr 6 17:03:09 haigwepa sshd[11210]: Failed password for root from 213.182.84.153 port 55640 ssh2 ... |
2020-04-06 23:22:46 |
| 195.254.176.143 | attackbots | Apr 6 17:37:12 wordpress wordpress(blog.ruhnke.cloud)[10608]: Blocked authentication attempt for admin from ::ffff:195.254.176.143 |
2020-04-06 23:47:37 |
| 111.231.205.100 | attackspambots | (sshd) Failed SSH login from 111.231.205.100 (JP/Japan/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 6 14:44:26 ubnt-55d23 sshd[32065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.205.100 user=root Apr 6 14:44:27 ubnt-55d23 sshd[32065]: Failed password for root from 111.231.205.100 port 35544 ssh2 |
2020-04-06 23:10:16 |
| 98.157.210.246 | attack | Brute-force attempt banned |
2020-04-06 22:59:32 |
| 156.238.160.137 | attack | 2020-04-06T15:30:17.183339shield sshd\[10623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.238.160.137 user=root 2020-04-06T15:30:18.850998shield sshd\[10623\]: Failed password for root from 156.238.160.137 port 42580 ssh2 2020-04-06T15:32:06.206380shield sshd\[10912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.238.160.137 user=root 2020-04-06T15:32:07.838733shield sshd\[10912\]: Failed password for root from 156.238.160.137 port 43374 ssh2 2020-04-06T15:33:56.021933shield sshd\[11201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.238.160.137 user=root |
2020-04-06 23:34:26 |
| 188.166.117.213 | attack | Apr 6 08:55:57 NPSTNNYC01T sshd[7892]: Failed password for root from 188.166.117.213 port 39402 ssh2 Apr 6 08:59:47 NPSTNNYC01T sshd[8085]: Failed password for root from 188.166.117.213 port 56952 ssh2 ... |
2020-04-06 23:14:24 |
| 109.169.65.194 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-04-06 23:37:27 |
| 27.78.14.83 | attack | Apr 6 16:38:57 ift sshd\[62487\]: Failed password for root from 27.78.14.83 port 48466 ssh2Apr 6 16:39:07 ift sshd\[62507\]: Invalid user ubnt from 27.78.14.83Apr 6 16:39:10 ift sshd\[62507\]: Failed password for invalid user ubnt from 27.78.14.83 port 53684 ssh2Apr 6 16:39:14 ift sshd\[62512\]: Failed password for invalid user admin from 27.78.14.83 port 56754 ssh2Apr 6 16:39:29 ift sshd\[62570\]: Invalid user support from 27.78.14.83 ... |
2020-04-06 22:58:46 |
| 49.231.166.197 | attackbotsspam | Apr 6 11:02:11 firewall sshd[9212]: Failed password for root from 49.231.166.197 port 51372 ssh2 Apr 6 11:06:47 firewall sshd[9329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.231.166.197 user=root Apr 6 11:06:49 firewall sshd[9329]: Failed password for root from 49.231.166.197 port 34198 ssh2 ... |
2020-04-06 22:46:57 |