城市(city): Oslo
省份(region): Oslo County
国家(country): Norway
运营商(isp): Telenor
主机名(hostname): unknown
机构(organization): Telenor Norge AS
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 82.164.180.61
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39903
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;82.164.180.61. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019060900 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jun 10 00:22:39 CST 2019
;; MSG SIZE rcvd: 117
61.180.164.82.in-addr.arpa domain name pointer 61.180.164.82.customer.cdi.no.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
61.180.164.82.in-addr.arpa name = 61.180.164.82.customer.cdi.no.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 124.30.96.14 | attackspam | Sep 8 22:10:08 dedicated sshd[6234]: Invalid user ftptest from 124.30.96.14 port 42382 |
2019-09-09 04:19:43 |
| 192.119.111.12 | attackspambots | DATE:2019-09-08 21:33:21, IP:192.119.111.12, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2019-09-09 04:40:42 |
| 84.121.165.180 | attackspam | Sep 8 22:22:15 microserver sshd[40393]: Invalid user system from 84.121.165.180 port 56628 Sep 8 22:22:15 microserver sshd[40393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.121.165.180 Sep 8 22:22:17 microserver sshd[40393]: Failed password for invalid user system from 84.121.165.180 port 56628 ssh2 Sep 8 22:27:48 microserver sshd[42729]: Invalid user www from 84.121.165.180 port 34456 Sep 8 22:27:48 microserver sshd[42729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.121.165.180 Sep 8 22:38:51 microserver sshd[44018]: Invalid user admin from 84.121.165.180 port 47448 Sep 8 22:38:51 microserver sshd[44018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.121.165.180 Sep 8 22:38:53 microserver sshd[44018]: Failed password for invalid user admin from 84.121.165.180 port 47448 ssh2 Sep 8 22:44:30 microserver sshd[44668]: Invalid user kfserver from 84.121.165.180 port |
2019-09-09 03:53:27 |
| 115.188.28.9 | attack | Sep 8 20:57:23 nexus sshd[19923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.188.28.9 user=r.r Sep 8 20:57:25 nexus sshd[19923]: Failed password for r.r from 115.188.28.9 port 60159 ssh2 Sep 8 20:57:27 nexus sshd[19923]: Failed password for r.r from 115.188.28.9 port 60159 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=115.188.28.9 |
2019-09-09 04:32:27 |
| 85.95.231.44 | attackbotsspam | WordPress XMLRPC scan :: 85.95.231.44 0.132 BYPASS [09/Sep/2019:05:33:17 1000] [censored_1] "POST /xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-09-09 04:43:58 |
| 49.88.112.112 | attack | Sep 8 22:34:36 rpi sshd[21156]: Failed password for root from 49.88.112.112 port 59997 ssh2 Sep 8 22:34:40 rpi sshd[21156]: Failed password for root from 49.88.112.112 port 59997 ssh2 |
2019-09-09 04:43:21 |
| 5.135.101.228 | attack | Sep 8 21:50:53 meumeu sshd[28048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.101.228 Sep 8 21:50:55 meumeu sshd[28048]: Failed password for invalid user uploader from 5.135.101.228 port 48786 ssh2 Sep 8 21:56:16 meumeu sshd[28610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.101.228 ... |
2019-09-09 04:06:33 |
| 200.29.180.133 | attackbots | Automatic report - Port Scan Attack |
2019-09-09 04:28:09 |
| 54.36.150.80 | attack | Automatic report - Banned IP Access |
2019-09-09 04:22:52 |
| 190.145.25.166 | attackspam | Sep 8 15:55:44 ny01 sshd[29644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.25.166 Sep 8 15:55:46 ny01 sshd[29644]: Failed password for invalid user temp from 190.145.25.166 port 46219 ssh2 Sep 8 15:59:55 ny01 sshd[30459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.25.166 |
2019-09-09 04:11:32 |
| 66.117.9.138 | attackspambots | \[2019-09-08 16:23:56\] SECURITY\[1849\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-08T16:23:56.731-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="009441519470549",SessionID="0x7fd9a8123cd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/66.117.9.138/53870",ACLName="no_extension_match" \[2019-09-08 16:25:22\] SECURITY\[1849\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-08T16:25:22.641-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441519470549",SessionID="0x7fd9a88fa448",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/66.117.9.138/53817",ACLName="no_extension_match" \[2019-09-08 16:26:48\] SECURITY\[1849\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-08T16:26:48.220-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441519470549",SessionID="0x7fd9a88fa448",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/66.117.9.138/52414",ACLName="no_exten |
2019-09-09 04:35:42 |
| 79.160.153.182 | attack | Sep 8 20:33:30 h2177944 sshd\[5380\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.160.153.182 Sep 8 20:33:32 h2177944 sshd\[5380\]: Failed password for invalid user oracle from 79.160.153.182 port 48642 ssh2 Sep 8 21:34:29 h2177944 sshd\[8134\]: Invalid user ubuntu from 79.160.153.182 port 35762 Sep 8 21:34:29 h2177944 sshd\[8134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.160.153.182 ... |
2019-09-09 04:03:36 |
| 37.59.224.39 | attackbots | Sep 8 10:02:44 lcdev sshd\[16391\]: Invalid user oracle from 37.59.224.39 Sep 8 10:02:44 lcdev sshd\[16391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.224.39 Sep 8 10:02:46 lcdev sshd\[16391\]: Failed password for invalid user oracle from 37.59.224.39 port 48321 ssh2 Sep 8 10:08:48 lcdev sshd\[16860\]: Invalid user git from 37.59.224.39 Sep 8 10:08:48 lcdev sshd\[16860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.224.39 |
2019-09-09 04:15:11 |
| 119.29.245.158 | attackspambots | Sep 8 21:30:06 tux-35-217 sshd\[24452\]: Invalid user deploy from 119.29.245.158 port 43892 Sep 8 21:30:06 tux-35-217 sshd\[24452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.245.158 Sep 8 21:30:08 tux-35-217 sshd\[24452\]: Failed password for invalid user deploy from 119.29.245.158 port 43892 ssh2 Sep 8 21:34:08 tux-35-217 sshd\[24467\]: Invalid user gpadmin from 119.29.245.158 port 48516 Sep 8 21:34:08 tux-35-217 sshd\[24467\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.245.158 ... |
2019-09-09 04:16:56 |
| 103.112.211.208 | attackspam | namecheap spam |
2019-09-09 04:42:29 |