City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.20.219
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19021
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.18.20.219. IN A
;; AUTHORITY SECTION:
. 260 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021602 1800 900 604800 86400
;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 05:33:07 CST 2022
;; MSG SIZE rcvd: 106Host 219.20.18.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 219.20.18.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 172.81.243.66 | attack | 172.81.243.66 - - [20/Sep/2019:23:32:08 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 172.81.243.66 - - [20/Sep/2019:23:32:09 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 172.81.243.66 - - [20/Sep/2019:23:32:09 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 172.81.243.66 - - [20/Sep/2019:23:32:11 +0200] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 172.81.243.66 - - [20/Sep/2019:23:32:13 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 172.81.243.66 - - [20/Sep/2019:23:32:13 +0200] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-09-21 06:44:43 |
| 49.207.180.197 | attackbots | $f2bV_matches |
2019-09-21 06:45:23 |
| 62.234.156.120 | attack | Sep 20 20:32:00 localhost sshd\[48066\]: Invalid user aurora from 62.234.156.120 port 36026 Sep 20 20:32:00 localhost sshd\[48066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.156.120 Sep 20 20:32:02 localhost sshd\[48066\]: Failed password for invalid user aurora from 62.234.156.120 port 36026 ssh2 Sep 20 20:34:48 localhost sshd\[48148\]: Invalid user git from 62.234.156.120 port 47979 Sep 20 20:34:48 localhost sshd\[48148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.156.120 ... |
2019-09-21 06:21:09 |
| 217.107.198.66 | attackspam | proto=tcp . spt=37737 . dpt=25 . (listed on Blocklist de Sep 20) (1461) |
2019-09-21 07:01:29 |
| 112.219.201.124 | attack | proto=tcp . spt=40828 . dpt=25 . (listed on Blocklist de Sep 20) (1471) |
2019-09-21 06:36:26 |
| 132.232.19.14 | attack | Sep 20 23:37:01 microserver sshd[22873]: Invalid user st2 from 132.232.19.14 port 58392 Sep 20 23:37:01 microserver sshd[22873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.19.14 Sep 20 23:37:02 microserver sshd[22873]: Failed password for invalid user st2 from 132.232.19.14 port 58392 ssh2 Sep 20 23:41:41 microserver sshd[23598]: Invalid user kondor from 132.232.19.14 port 42092 Sep 20 23:41:41 microserver sshd[23598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.19.14 Sep 20 23:56:42 microserver sshd[25796]: Invalid user trendimsa1.0 from 132.232.19.14 port 49762 Sep 20 23:56:42 microserver sshd[25796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.19.14 Sep 20 23:56:43 microserver sshd[25796]: Failed password for invalid user trendimsa1.0 from 132.232.19.14 port 49762 ssh2 Sep 21 00:01:31 microserver sshd[26495]: Invalid user wt from 132.232.19.14 port 334 |
2019-09-21 06:46:04 |
| 51.15.159.7 | attack | Sep 20 18:30:49 plusreed sshd[11879]: Invalid user adamek from 51.15.159.7 ... |
2019-09-21 06:35:30 |
| 182.61.176.105 | attack | Sep 21 00:23:26 MK-Soft-VM3 sshd\[10850\]: Invalid user user from 182.61.176.105 port 44652 Sep 21 00:23:26 MK-Soft-VM3 sshd\[10850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.176.105 Sep 21 00:23:28 MK-Soft-VM3 sshd\[10850\]: Failed password for invalid user user from 182.61.176.105 port 44652 ssh2 ... |
2019-09-21 06:57:10 |
| 213.135.239.146 | attackspam | Sep 21 03:08:14 lcl-usvr-02 sshd[8852]: Invalid user junior from 213.135.239.146 port 60039 Sep 21 03:08:14 lcl-usvr-02 sshd[8852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.135.239.146 Sep 21 03:08:14 lcl-usvr-02 sshd[8852]: Invalid user junior from 213.135.239.146 port 60039 Sep 21 03:08:16 lcl-usvr-02 sshd[8852]: Failed password for invalid user junior from 213.135.239.146 port 60039 ssh2 Sep 21 03:12:06 lcl-usvr-02 sshd[9855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.135.239.146 user=root Sep 21 03:12:09 lcl-usvr-02 sshd[9855]: Failed password for root from 213.135.239.146 port 47225 ssh2 ... |
2019-09-21 06:23:05 |
| 103.129.220.214 | attackspambots | Sep 21 00:15:35 plex sshd[13923]: Invalid user office from 103.129.220.214 port 42324 |
2019-09-21 06:47:32 |
| 222.186.15.33 | attackspam | Sep 20 18:14:16 ny01 sshd[14747]: Failed password for root from 222.186.15.33 port 41478 ssh2 Sep 20 18:14:18 ny01 sshd[14747]: Failed password for root from 222.186.15.33 port 41478 ssh2 Sep 20 18:14:20 ny01 sshd[14747]: Failed password for root from 222.186.15.33 port 41478 ssh2 |
2019-09-21 06:25:51 |
| 178.128.238.248 | attackspam | Sep 20 23:52:18 h2177944 sshd\[23379\]: Failed password for invalid user wiki from 178.128.238.248 port 54926 ssh2 Sep 21 00:52:34 h2177944 sshd\[25435\]: Invalid user ba from 178.128.238.248 port 38758 Sep 21 00:52:34 h2177944 sshd\[25435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.238.248 Sep 21 00:52:36 h2177944 sshd\[25435\]: Failed password for invalid user ba from 178.128.238.248 port 38758 ssh2 ... |
2019-09-21 07:02:03 |
| 102.184.158.11 | attackbots | php WP PHPmyadamin ABUSE blocked for 12h |
2019-09-21 06:39:14 |
| 103.36.84.100 | attackbots | Sep 20 19:06:18 game-panel sshd[29671]: Failed password for root from 103.36.84.100 port 47054 ssh2 Sep 20 19:10:52 game-panel sshd[29900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.36.84.100 Sep 20 19:10:55 game-panel sshd[29900]: Failed password for invalid user test2 from 103.36.84.100 port 59306 ssh2 |
2019-09-21 06:58:36 |
| 180.250.115.98 | attackbots | Sep 20 18:34:49 TORMINT sshd\[22357\]: Invalid user tony from 180.250.115.98 Sep 20 18:34:49 TORMINT sshd\[22357\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.115.98 Sep 20 18:34:51 TORMINT sshd\[22357\]: Failed password for invalid user tony from 180.250.115.98 port 55190 ssh2 ... |
2019-09-21 06:46:47 |