City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 135.94.64.73
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25795
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;135.94.64.73. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 04:49:28 CST 2025
;; MSG SIZE rcvd: 10573.64.94.135.in-addr.arpa domain name pointer nothing.attdns.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
73.64.94.135.in-addr.arpa name = nothing.attdns.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 85.209.0.100 | attackbots | Aug 9 00:36:09 cdc sshd[1853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.0.100 user=root Aug 9 00:36:09 cdc sshd[1854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.0.100 user=root |
2020-08-09 07:46:11 |
| 212.227.216.50 | attackspambots | 08.08.2020 22:25:20 - Wordpress fail Detected by ELinOX-ALM |
2020-08-09 07:23:02 |
| 51.77.147.5 | attackspam | Aug 9 01:24:58 amit sshd\[10498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.147.5 user=root Aug 9 01:24:59 amit sshd\[10498\]: Failed password for root from 51.77.147.5 port 59626 ssh2 Aug 9 01:33:13 amit sshd\[31812\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.147.5 user=root ... |
2020-08-09 07:37:24 |
| 120.244.110.25 | attackspam | Aug 5 16:31:47 cumulus sshd[8879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.244.110.25 user=r.r Aug 5 16:31:49 cumulus sshd[8879]: Failed password for r.r from 120.244.110.25 port 3467 ssh2 Aug 5 16:31:49 cumulus sshd[8879]: Received disconnect from 120.244.110.25 port 3467:11: Bye Bye [preauth] Aug 5 16:31:49 cumulus sshd[8879]: Disconnected from 120.244.110.25 port 3467 [preauth] Aug 5 16:35:49 cumulus sshd[9150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.244.110.25 user=r.r Aug 5 16:35:51 cumulus sshd[9150]: Failed password for r.r from 120.244.110.25 port 3174 ssh2 Aug 5 16:35:51 cumulus sshd[9150]: Received disconnect from 120.244.110.25 port 3174:11: Bye Bye [preauth] Aug 5 16:35:51 cumulus sshd[9150]: Disconnected from 120.244.110.25 port 3174 [preauth] Aug 5 16:39:49 cumulus sshd[9629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0........ ------------------------------- |
2020-08-09 07:11:59 |
| 51.77.210.17 | attackbotsspam | Aug 8 18:36:22 ny01 sshd[7826]: Failed password for root from 51.77.210.17 port 56308 ssh2 Aug 8 18:40:21 ny01 sshd[8342]: Failed password for root from 51.77.210.17 port 39620 ssh2 |
2020-08-09 07:27:09 |
| 124.251.110.147 | attackbots | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-08T20:18:32Z and 2020-08-08T20:25:16Z |
2020-08-09 07:24:40 |
| 152.136.223.231 | attack | Aug 9 06:05:26 web1 sshd[19598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.223.231 user=root Aug 9 06:05:29 web1 sshd[19598]: Failed password for root from 152.136.223.231 port 52418 ssh2 Aug 9 06:05:28 web1 sshd[19639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.223.231 user=root Aug 9 06:05:30 web1 sshd[19639]: Failed password for root from 152.136.223.231 port 47600 ssh2 Aug 9 06:12:06 web1 sshd[21900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.223.231 user=root Aug 9 06:12:08 web1 sshd[21900]: Failed password for root from 152.136.223.231 port 39530 ssh2 Aug 9 06:12:07 web1 sshd[21892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.223.231 user=root Aug 9 06:12:09 web1 sshd[21892]: Failed password for root from 152.136.223.231 port 34722 ssh2 Aug 9 06:25:09 web1 ... |
2020-08-09 07:29:17 |
| 49.89.252.251 | attackspambots | POST /inc/md5.asp HTTP/1.1 |
2020-08-09 07:21:01 |
| 203.135.20.36 | attackbotsspam | Banned for a week because repeated abuses, for example SSH, but not only |
2020-08-09 07:38:05 |
| 187.189.15.119 | attackbots | *Port Scan* detected from 187.189.15.119 (MX/Mexico/Mexico City/Mexico City (Jardines del Pedregal)/fixed-187-189-15-119.totalplay.net). 4 hits in the last 80 seconds |
2020-08-09 07:26:28 |
| 106.13.13.188 | attackbotsspam | 2020-08-08T15:25:05.922092morrigan.ad5gb.com sshd[430310]: Failed password for root from 106.13.13.188 port 51042 ssh2 2020-08-08T15:25:06.458095morrigan.ad5gb.com sshd[430310]: Disconnected from authenticating user root 106.13.13.188 port 51042 [preauth] |
2020-08-09 07:35:49 |
| 123.207.121.169 | attackbots | Aug 8 17:20:31 firewall sshd[13332]: Failed password for root from 123.207.121.169 port 49504 ssh2 Aug 8 17:25:15 firewall sshd[13487]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.121.169 user=root Aug 8 17:25:17 firewall sshd[13487]: Failed password for root from 123.207.121.169 port 47628 ssh2 ... |
2020-08-09 07:22:13 |
| 153.127.52.17 | attack | Lines containing failures of 153.127.52.17 Aug 5 19:13:46 neweola sshd[13793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.127.52.17 user=r.r Aug 5 19:13:48 neweola sshd[13793]: Failed password for r.r from 153.127.52.17 port 39616 ssh2 Aug 5 19:13:50 neweola sshd[13793]: Received disconnect from 153.127.52.17 port 39616:11: Bye Bye [preauth] Aug 5 19:13:50 neweola sshd[13793]: Disconnected from authenticating user r.r 153.127.52.17 port 39616 [preauth] Aug 5 19:19:49 neweola sshd[14012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.127.52.17 user=r.r Aug 5 19:19:50 neweola sshd[14012]: Failed password for r.r from 153.127.52.17 port 43534 ssh2 Aug 5 19:19:51 neweola sshd[14012]: Received disconnect from 153.127.52.17 port 43534:11: Bye Bye [preauth] Aug 5 19:19:51 neweola sshd[14012]: Disconnected from authenticating user r.r 153.127.52.17 port 43534 [preauth] Aug 5........ ------------------------------ |
2020-08-09 07:20:26 |
| 2001:41d0:a:446f:: | attack | 2001:41d0:a:446f:: - - [08/Aug/2020:18:17:33 +1000] "POST /wp-login.php HTTP/1.1" 200 1925 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2001:41d0:a:446f:: - - [08/Aug/2020:18:17:36 +1000] "POST /wp-login.php HTTP/1.1" 200 1880 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2001:41d0:a:446f:: - - [09/Aug/2020:03:58:31 +1000] "POST /wp-login.php HTTP/1.0" 200 6620 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2001:41d0:a:446f:: - - [09/Aug/2020:06:25:33 +1000] "POST /wp-login.php HTTP/1.1" 200 1925 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2001:41d0:a:446f:: - - [09/Aug/2020:06:25:35 +1000] "POST /wp-login.php HTTP/1.1" 200 1908 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-09 07:08:02 |
| 72.179.104.83 | attackspam | SSH User Authentication Brute Force Attempt , PTR: 072-179-104-083.res.spectrum.com. |
2020-08-09 07:32:21 |