City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.70.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23666
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.70.29. IN A
;; AUTHORITY SECTION:
. 240 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400
;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 10:18:05 CST 2022
;; MSG SIZE rcvd: 105Host 29.70.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 29.70.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 101.231.146.34 | attackspam | May 22 15:04:36 meumeu sshd[59316]: Invalid user szs from 101.231.146.34 port 43193 May 22 15:04:36 meumeu sshd[59316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.231.146.34 May 22 15:04:36 meumeu sshd[59316]: Invalid user szs from 101.231.146.34 port 43193 May 22 15:04:38 meumeu sshd[59316]: Failed password for invalid user szs from 101.231.146.34 port 43193 ssh2 May 22 15:09:29 meumeu sshd[60170]: Invalid user jmc from 101.231.146.34 port 41894 May 22 15:09:29 meumeu sshd[60170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.231.146.34 May 22 15:09:29 meumeu sshd[60170]: Invalid user jmc from 101.231.146.34 port 41894 May 22 15:09:31 meumeu sshd[60170]: Failed password for invalid user jmc from 101.231.146.34 port 41894 ssh2 May 22 15:14:21 meumeu sshd[60661]: Invalid user bqe from 101.231.146.34 port 40594 ... |
2020-05-22 23:25:55 |
| 52.130.74.186 | attack | May 22 15:13:03 abendstille sshd\[14474\]: Invalid user tok from 52.130.74.186 May 22 15:13:03 abendstille sshd\[14474\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.130.74.186 May 22 15:13:05 abendstille sshd\[14474\]: Failed password for invalid user tok from 52.130.74.186 port 52280 ssh2 May 22 15:17:06 abendstille sshd\[18563\]: Invalid user znyjjszx from 52.130.74.186 May 22 15:17:06 abendstille sshd\[18563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.130.74.186 ... |
2020-05-22 23:53:19 |
| 178.128.72.80 | attackbots | May 22 16:53:52 mellenthin sshd[23145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.72.80 May 22 16:53:53 mellenthin sshd[23145]: Failed password for invalid user wsq from 178.128.72.80 port 37096 ssh2 |
2020-05-22 23:44:44 |
| 111.67.195.165 | attack | May 22 14:48:02 scw-6657dc sshd[4584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.195.165 May 22 14:48:02 scw-6657dc sshd[4584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.195.165 May 22 14:48:04 scw-6657dc sshd[4584]: Failed password for invalid user lk from 111.67.195.165 port 40986 ssh2 ... |
2020-05-22 23:42:12 |
| 49.88.112.70 | attackspambots | 2020-05-22T15:56:58.514923shield sshd\[8933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.70 user=root 2020-05-22T15:57:00.206787shield sshd\[8933\]: Failed password for root from 49.88.112.70 port 61176 ssh2 2020-05-22T15:57:03.267180shield sshd\[8933\]: Failed password for root from 49.88.112.70 port 61176 ssh2 2020-05-22T15:57:05.882488shield sshd\[8933\]: Failed password for root from 49.88.112.70 port 61176 ssh2 2020-05-22T15:59:18.228865shield sshd\[9323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.70 user=root |
2020-05-23 00:06:32 |
| 77.42.118.203 | attackbots | Port probing on unauthorized port 23 |
2020-05-22 23:45:10 |
| 5.153.134.23 | attackbots | Tried sshing with brute force. |
2020-05-22 23:50:12 |
| 190.182.179.12 | attackbotsspam | Dovecot Invalid User Login Attempt. |
2020-05-22 23:43:12 |
| 175.207.29.235 | attackbots | May 22 21:02:24 dhoomketu sshd[109988]: Invalid user mzv from 175.207.29.235 port 48776 May 22 21:02:24 dhoomketu sshd[109988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.207.29.235 May 22 21:02:24 dhoomketu sshd[109988]: Invalid user mzv from 175.207.29.235 port 48776 May 22 21:02:26 dhoomketu sshd[109988]: Failed password for invalid user mzv from 175.207.29.235 port 48776 ssh2 May 22 21:07:10 dhoomketu sshd[110045]: Invalid user xps from 175.207.29.235 port 54756 ... |
2020-05-23 00:03:02 |
| 195.54.166.180 | attack | Port scan on 51 port(s): 10 28 46 47 53 85 112 114 192 206 252 290 296 320 324 334 348 405 415 420 435 462 485 504 530 564 597 606 624 645 648 659 664 683 720 745 750 755 797 821 829 863 883 958 988 5563 5692 5766 5786 5788 5818 |
2020-05-22 23:45:32 |
| 211.253.10.96 | attack | May 22 14:28:34 electroncash sshd[12552]: Invalid user evb from 211.253.10.96 port 37036 May 22 14:28:34 electroncash sshd[12552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.10.96 May 22 14:28:34 electroncash sshd[12552]: Invalid user evb from 211.253.10.96 port 37036 May 22 14:28:36 electroncash sshd[12552]: Failed password for invalid user evb from 211.253.10.96 port 37036 ssh2 May 22 14:32:34 electroncash sshd[13608]: Invalid user lqo from 211.253.10.96 port 42134 ... |
2020-05-22 23:55:24 |
| 77.247.108.119 | attackspam | 05/22/2020-10:39:30.325410 77.247.108.119 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 74 |
2020-05-22 23:41:57 |
| 179.124.34.8 | attackbots | May 22 16:23:46 ourumov-web sshd\[30494\]: Invalid user bbl from 179.124.34.8 port 60198 May 22 16:23:46 ourumov-web sshd\[30494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.124.34.8 May 22 16:23:47 ourumov-web sshd\[30494\]: Failed password for invalid user bbl from 179.124.34.8 port 60198 ssh2 ... |
2020-05-22 23:24:42 |
| 188.165.251.196 | attackspambots | 188.165.251.196 - - [22/May/2020:15:02:26 +0200] "GET /wp-login.php HTTP/1.1" 200 6614 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 188.165.251.196 - - [22/May/2020:15:02:28 +0200] "POST /wp-login.php HTTP/1.1" 200 6865 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 188.165.251.196 - - [22/May/2020:15:02:28 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-05-23 00:10:21 |
| 139.59.13.53 | attack | May 22 16:48:17 ArkNodeAT sshd\[17795\]: Invalid user kmj from 139.59.13.53 May 22 16:48:17 ArkNodeAT sshd\[17795\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.53 May 22 16:48:20 ArkNodeAT sshd\[17795\]: Failed password for invalid user kmj from 139.59.13.53 port 46356 ssh2 |
2020-05-22 23:38:10 |