City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 100.70.34.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43823
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;100.70.34.16. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400
;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 17:26:06 CST 2025
;; MSG SIZE rcvd: 105Host 16.34.70.100.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 16.34.70.100.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 192.99.7.141 | attackspam | [ssh] SSH attack |
2020-02-06 03:03:03 |
| 196.179.246.54 | attackbotsspam | Unauthorized connection attempt from IP address 196.179.246.54 on Port 445(SMB) |
2020-02-06 02:53:01 |
| 67.27.154.126 | attackbots | TCP Port: 80 invalid blocked zen-spamhaus also rbldns-ru Client xx.xx.4.90 (383) |
2020-02-06 03:20:03 |
| 185.106.211.101 | attackspambots | Wordpress_xmlrpc_attack |
2020-02-06 02:55:08 |
| 129.204.93.65 | attackspambots | Feb 5 19:24:42 gw1 sshd[28401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.93.65 Feb 5 19:24:44 gw1 sshd[28401]: Failed password for invalid user weblogic from 129.204.93.65 port 53166 ssh2 ... |
2020-02-06 02:54:00 |
| 70.118.110.194 | attackspambots | Unauthorized connection attempt from IP address 70.118.110.194 on Port 445(SMB) |
2020-02-06 02:52:38 |
| 139.59.135.84 | attackspam | Unauthorized connection attempt detected from IP address 139.59.135.84 to port 2220 [J] |
2020-02-06 02:50:51 |
| 220.156.169.192 | attackspambots | Brute force attempt |
2020-02-06 02:54:19 |
| 177.96.126.66 | attackbotsspam | Feb 4 02:12:36 rudra sshd[288223]: reveeclipse mapping checking getaddrinfo for 177.96.126.66.dynamic.adsl.gvt.net.br [177.96.126.66] failed - POSSIBLE BREAK-IN ATTEMPT! Feb 4 02:12:36 rudra sshd[288223]: Invalid user ronn from 177.96.126.66 Feb 4 02:12:36 rudra sshd[288223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.96.126.66 Feb 4 02:12:38 rudra sshd[288223]: Failed password for invalid user ronn from 177.96.126.66 port 3036 ssh2 Feb 4 02:12:38 rudra sshd[288223]: Received disconnect from 177.96.126.66: 11: Bye Bye [preauth] Feb 4 02:14:53 rudra sshd[288339]: reveeclipse mapping checking getaddrinfo for 177.96.126.66.dynamic.adsl.gvt.net.br [177.96.126.66] failed - POSSIBLE BREAK-IN ATTEMPT! Feb 4 02:14:53 rudra sshd[288339]: Invalid user gpadmin from 177.96.126.66 Feb 4 02:14:53 rudra sshd[288339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.96.126.66 Feb 4 02........ ------------------------------- |
2020-02-06 03:24:13 |
| 103.141.137.39 | attackbots | 2020-02-05 18:26:04 dovecot_login authenticator failed for \(User\) \[103.141.137.39\]: 535 Incorrect authentication data \(set_id=fax6@no-server.de\) 2020-02-05 18:26:11 dovecot_login authenticator failed for \(User\) \[103.141.137.39\]: 535 Incorrect authentication data \(set_id=fax6@no-server.de\) 2020-02-05 18:26:22 dovecot_login authenticator failed for \(User\) \[103.141.137.39\]: 535 Incorrect authentication data \(set_id=fax6@no-server.de\) 2020-02-05 18:26:45 dovecot_login authenticator failed for \(User\) \[103.141.137.39\]: 535 Incorrect authentication data \(set_id=fax6@no-server.de\) 2020-02-05 18:26:55 dovecot_login authenticator failed for \(User\) \[103.141.137.39\]: 535 Incorrect authentication data \(set_id=fax6@no-server.de\) ... |
2020-02-06 02:59:57 |
| 46.38.144.215 | attackspambots | Feb 4 03:22:22 nirvana postfix/smtpd[7866]: connect from unknown[46.38.144.215] Feb 4 03:22:22 nirvana postfix/smtpd[7866]: connect from unknown[46.38.144.215] Feb 4 03:22:24 nirvana postfix/smtpd[7869]: connect from unknown[46.38.144.215] Feb 4 03:22:24 nirvana postfix/smtpd[7869]: connect from unknown[46.38.144.215] Feb 4 03:22:28 nirvana postfix/smtpd[7869]: warning: unknown[46.38.144.215]: SASL LOGIN authentication failed: authentication failure Feb 4 03:22:28 nirvana postfix/smtpd[7869]: warning: unknown[46.38.144.215]: SASL LOGIN authentication failed: authentication failure Feb 4 03:22:28 nirvana postfix/smtpd[7869]: disconnect from unknown[46.38.144.215] Feb 4 03:22:28 nirvana postfix/smtpd[7869]: disconnect from unknown[46.38.144.215] Feb 4 03:22:29 nirvana postfix/smtpd[7869]: connect from unknown[46.38.144.215] Feb 4 03:22:29 nirvana postfix/smtpd[7869]: connect from unknown[46.38.144.215] Feb 4 03:22:31 nirvana postfix/smtpd[7866]: warning: unknow........ ------------------------------- |
2020-02-06 03:27:03 |
| 222.186.30.76 | attack | 05.02.2020 19:00:07 SSH access blocked by firewall |
2020-02-06 02:52:08 |
| 221.231.126.43 | attack | Feb 5 15:46:31 h1745522 sshd[23404]: Invalid user sakoda from 221.231.126.43 port 46642 Feb 5 15:46:31 h1745522 sshd[23404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.231.126.43 Feb 5 15:46:31 h1745522 sshd[23404]: Invalid user sakoda from 221.231.126.43 port 46642 Feb 5 15:46:33 h1745522 sshd[23404]: Failed password for invalid user sakoda from 221.231.126.43 port 46642 ssh2 Feb 5 15:49:17 h1745522 sshd[23506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.231.126.43 user=root Feb 5 15:49:19 h1745522 sshd[23506]: Failed password for root from 221.231.126.43 port 34112 ssh2 Feb 5 15:52:06 h1745522 sshd[23626]: Invalid user amssys from 221.231.126.43 port 49832 Feb 5 15:52:06 h1745522 sshd[23626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.231.126.43 Feb 5 15:52:06 h1745522 sshd[23626]: Invalid user amssys from 221.231.126.43 port 498 ... |
2020-02-06 02:45:22 |
| 180.76.249.74 | attackspambots | Unauthorized connection attempt detected from IP address 180.76.249.74 to port 2220 [J] |
2020-02-06 03:10:18 |
| 104.215.193.68 | attack | Auto reported by IDS |
2020-02-06 03:09:51 |