City: Jessheim
Region: Viken
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.252.71.95
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34949
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;85.252.71.95. IN A
;; AUTHORITY SECTION:
. 112 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022120800 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 09 02:51:52 CST 2022
;; MSG SIZE rcvd: 10595.71.252.85.in-addr.arpa domain name pointer static95.banetele-cust.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
95.71.252.85.in-addr.arpa name = static95.banetele-cust.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 118.25.14.19 | attack | srv02 Mass scanning activity detected Target: 28971 .. |
2020-08-23 02:42:10 |
| 162.214.55.226 | attack | failed root login |
2020-08-23 02:17:02 |
| 206.189.47.166 | attack | (sshd) Failed SSH login from 206.189.47.166 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 22 17:33:14 amsweb01 sshd[26601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.47.166 user=root Aug 22 17:33:16 amsweb01 sshd[26601]: Failed password for root from 206.189.47.166 port 40998 ssh2 Aug 22 17:40:47 amsweb01 sshd[27552]: Invalid user lft from 206.189.47.166 port 39912 Aug 22 17:40:49 amsweb01 sshd[27552]: Failed password for invalid user lft from 206.189.47.166 port 39912 ssh2 Aug 22 17:44:36 amsweb01 sshd[28099]: Invalid user fit from 206.189.47.166 port 35654 |
2020-08-23 02:35:24 |
| 112.21.191.54 | attack | Aug 22 19:56:09 h2646465 sshd[29843]: Invalid user sr from 112.21.191.54 Aug 22 19:56:09 h2646465 sshd[29843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.21.191.54 Aug 22 19:56:09 h2646465 sshd[29843]: Invalid user sr from 112.21.191.54 Aug 22 19:56:10 h2646465 sshd[29843]: Failed password for invalid user sr from 112.21.191.54 port 37643 ssh2 Aug 22 20:07:32 h2646465 sshd[31501]: Invalid user cloud from 112.21.191.54 Aug 22 20:07:32 h2646465 sshd[31501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.21.191.54 Aug 22 20:07:32 h2646465 sshd[31501]: Invalid user cloud from 112.21.191.54 Aug 22 20:07:34 h2646465 sshd[31501]: Failed password for invalid user cloud from 112.21.191.54 port 56240 ssh2 Aug 22 20:10:51 h2646465 sshd[32107]: Invalid user wup from 112.21.191.54 ... |
2020-08-23 02:14:01 |
| 194.55.12.116 | attackbots | SSH brute-force attempt |
2020-08-23 02:27:45 |
| 172.104.112.244 | attackbots | scans once in preceeding hours on the ports (in chronological order) 1080 resulting in total of 8 scans from 172.104.0.0/15 block. |
2020-08-23 02:28:46 |
| 103.238.69.138 | attack | Aug 22 20:09:56 rotator sshd\[30846\]: Invalid user sysbackup from 103.238.69.138Aug 22 20:09:58 rotator sshd\[30846\]: Failed password for invalid user sysbackup from 103.238.69.138 port 36718 ssh2Aug 22 20:16:34 rotator sshd\[32389\]: Invalid user course from 103.238.69.138Aug 22 20:16:36 rotator sshd\[32389\]: Failed password for invalid user course from 103.238.69.138 port 54882 ssh2Aug 22 20:18:13 rotator sshd\[32410\]: Invalid user deployer from 103.238.69.138Aug 22 20:18:15 rotator sshd\[32410\]: Failed password for invalid user deployer from 103.238.69.138 port 50226 ssh2 ... |
2020-08-23 02:33:19 |
| 36.37.201.133 | attack | 2020-08-21 03:43:02 server sshd[98821]: Failed password for invalid user pramod from 36.37.201.133 port 37032 ssh2 |
2020-08-23 02:43:49 |
| 45.145.67.171 | attackspam | Brute forcing RDP port 3389 |
2020-08-23 02:48:08 |
| 223.17.144.174 | attackspambots | SSH login attempts. |
2020-08-23 02:23:56 |
| 223.16.28.102 | attack | SSH login attempts. |
2020-08-23 02:31:10 |
| 14.99.117.194 | attackbotsspam | Invalid user mot from 14.99.117.194 port 44210 |
2020-08-23 02:38:17 |
| 103.84.237.74 | attack | bruteforce detected |
2020-08-23 02:46:09 |
| 200.54.242.46 | attackbotsspam | SSH Brute-Forcing (server1) |
2020-08-23 02:51:59 |
| 193.57.40.9 | attackspam | Repeated RDP login failures. Last user: Administrator |
2020-08-23 02:52:55 |