City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 129.30.214.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23266
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;129.30.214.91. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 23:22:46 CST 2025
;; MSG SIZE rcvd: 106Host 91.214.30.129.in-addr.arpa not found: 2(SERVFAIL)
server can't find 129.30.214.91.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.163.126.134 | attack | Jun 6 09:51:08 NPSTNNYC01T sshd[9718]: Failed password for root from 202.163.126.134 port 57605 ssh2 Jun 6 09:55:21 NPSTNNYC01T sshd[10187]: Failed password for root from 202.163.126.134 port 59309 ssh2 ... |
2020-06-06 22:15:27 |
| 122.51.39.232 | attackspam | DATE:2020-06-06 14:34:14, IP:122.51.39.232, PORT:ssh SSH brute force auth (docker-dc) |
2020-06-06 21:36:22 |
| 198.27.80.123 | attackbotsspam | 198.27.80.123 - - [06/Jun/2020:15:35:03 +0200] "POST /wp-login.php HTTP/1.1" 200 5369 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 198.27.80.123 - - [06/Jun/2020:15:35:09 +0200] "POST /wp-login.php HTTP/1.1" 200 5369 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 198.27.80.123 - - [06/Jun/2020:15:35:16 +0200] "POST /wp-login.php HTTP/1.1" 200 5369 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 198.27.80.123 - - [06/Jun/2020:15:35:24 +0200] "POST /wp-login.php HTTP/1.1" 200 5369 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 198.27.80.123 - - [06/Jun/2020:15:35:30 +0200] "POST /wp-login.php HTTP/1.1" 200 5369 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safar ... |
2020-06-06 21:50:15 |
| 222.186.31.166 | attack | 2020-06-06T15:52:50.958389sd-86998 sshd[25323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166 user=root 2020-06-06T15:52:52.396419sd-86998 sshd[25323]: Failed password for root from 222.186.31.166 port 50656 ssh2 2020-06-06T15:52:54.431843sd-86998 sshd[25323]: Failed password for root from 222.186.31.166 port 50656 ssh2 2020-06-06T15:52:50.958389sd-86998 sshd[25323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166 user=root 2020-06-06T15:52:52.396419sd-86998 sshd[25323]: Failed password for root from 222.186.31.166 port 50656 ssh2 2020-06-06T15:52:54.431843sd-86998 sshd[25323]: Failed password for root from 222.186.31.166 port 50656 ssh2 2020-06-06T15:52:50.958389sd-86998 sshd[25323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166 user=root 2020-06-06T15:52:52.396419sd-86998 sshd[25323]: Failed password for root from ... |
2020-06-06 21:59:20 |
| 221.225.127.69 | attackspam | Jun 6 15:00:18 eventyay sshd[15347]: Failed password for root from 221.225.127.69 port 19447 ssh2 Jun 6 15:04:07 eventyay sshd[15432]: Failed password for root from 221.225.127.69 port 11513 ssh2 ... |
2020-06-06 22:10:38 |
| 222.186.173.142 | attackbotsspam | Jun 6 10:03:37 NPSTNNYC01T sshd[11129]: Failed password for root from 222.186.173.142 port 16436 ssh2 Jun 6 10:03:41 NPSTNNYC01T sshd[11129]: Failed password for root from 222.186.173.142 port 16436 ssh2 Jun 6 10:03:45 NPSTNNYC01T sshd[11129]: Failed password for root from 222.186.173.142 port 16436 ssh2 Jun 6 10:03:51 NPSTNNYC01T sshd[11129]: error: maximum authentication attempts exceeded for root from 222.186.173.142 port 16436 ssh2 [preauth] ... |
2020-06-06 22:08:00 |
| 148.153.65.58 | attack | 2020-06-06T19:41:02.721186billing sshd[16237]: Failed password for root from 148.153.65.58 port 43398 ssh2 2020-06-06T19:44:48.071550billing sshd[24169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.153.65.58 user=root 2020-06-06T19:44:50.790208billing sshd[24169]: Failed password for root from 148.153.65.58 port 46994 ssh2 ... |
2020-06-06 21:33:02 |
| 78.128.113.114 | attackbots | Jun 6 15:15:19 mail postfix/smtpd\[19112\]: warning: unknown\[78.128.113.114\]: SASL PLAIN authentication failed: \ Jun 6 15:15:37 mail postfix/smtpd\[19113\]: warning: unknown\[78.128.113.114\]: SASL PLAIN authentication failed: \ Jun 6 15:30:19 mail postfix/smtpd\[19695\]: warning: unknown\[78.128.113.114\]: SASL PLAIN authentication failed: \ Jun 6 16:05:20 mail postfix/smtpd\[20757\]: warning: unknown\[78.128.113.114\]: SASL PLAIN authentication failed: \ |
2020-06-06 22:08:15 |
| 49.233.189.161 | attackspam | Jun 6 15:20:37 abendstille sshd\[22369\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.189.161 user=root Jun 6 15:20:39 abendstille sshd\[22369\]: Failed password for root from 49.233.189.161 port 56114 ssh2 Jun 6 15:23:07 abendstille sshd\[25021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.189.161 user=root Jun 6 15:23:10 abendstille sshd\[25021\]: Failed password for root from 49.233.189.161 port 60654 ssh2 Jun 6 15:25:48 abendstille sshd\[27671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.189.161 user=root ... |
2020-06-06 21:38:15 |
| 202.162.208.98 | attackbotsspam | Automatic report - XMLRPC Attack |
2020-06-06 22:13:55 |
| 89.40.70.134 | attackspam | Unauthorized SSH login attempts |
2020-06-06 21:44:01 |
| 51.75.140.153 | attackspambots | Jun 6 06:54:35 Tower sshd[41286]: refused connect from 112.64.32.118 (112.64.32.118) Jun 6 09:52:26 Tower sshd[41286]: Connection from 51.75.140.153 port 51332 on 192.168.10.220 port 22 rdomain "" Jun 6 09:52:26 Tower sshd[41286]: Failed password for root from 51.75.140.153 port 51332 ssh2 Jun 6 09:52:26 Tower sshd[41286]: Received disconnect from 51.75.140.153 port 51332:11: Bye Bye [preauth] Jun 6 09:52:26 Tower sshd[41286]: Disconnected from authenticating user root 51.75.140.153 port 51332 [preauth] |
2020-06-06 22:14:56 |
| 54.38.253.1 | attack | xmlrpc attack |
2020-06-06 21:44:21 |
| 108.190.59.129 | attackbots | 1591446811 - 06/06/2020 14:33:31 Host: 108.190.59.129/108.190.59.129 Port: 445 TCP Blocked |
2020-06-06 21:57:55 |
| 192.144.230.221 | attackbots | Jun 6 15:37:35 fhem-rasp sshd[31125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.230.221 user=root Jun 6 15:37:37 fhem-rasp sshd[31125]: Failed password for root from 192.144.230.221 port 36084 ssh2 ... |
2020-06-06 22:14:36 |