City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.29.216.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11112
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.29.216.3. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025081902 1800 900 604800 86400
;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Aug 20 13:08:53 CST 2025
;; MSG SIZE rcvd: 105b'Host 3.216.29.138.in-addr.arpa. not found: 3(NXDOMAIN)
'server can't find 138.29.216.3.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 170.210.221.48 | attack | Banned for a week because repeated abuses, for example SSH, but not only |
2020-10-02 06:32:00 |
| 194.87.138.211 | attackbotsspam | frenzy |
2020-10-02 06:21:27 |
| 188.93.231.68 | attackspambots | Received: from grupomichels.ibername.com (188.93.231.68) |
2020-10-02 06:37:24 |
| 85.209.0.103 | attackbotsspam | Multiple SSH login attempts. |
2020-10-02 06:35:22 |
| 167.71.140.30 | attackspambots | 167.71.140.30 - - [01/Oct/2020:13:17:52 +0200] "GET /wp-login.php HTTP/1.1" 200 8558 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.140.30 - - [01/Oct/2020:13:17:52 +0200] "POST /wp-login.php HTTP/1.1" 200 8875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.140.30 - - [01/Oct/2020:13:17:53 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-10-02 06:28:19 |
| 51.254.156.114 | attackspam | Found on Dark List de / proto=6 . srcport=48243 . dstport=7374 . (3831) |
2020-10-02 06:12:34 |
| 177.207.251.18 | attackbots | SSH Invalid Login |
2020-10-02 06:45:13 |
| 190.128.230.206 | attack | SSH login attempts. |
2020-10-02 06:44:06 |
| 37.247.209.180 | attack | 2020-10-01T20:59:02.655751amanda2.illicoweb.com sshd\[19529\]: Invalid user charlie from 37.247.209.180 port 47330 2020-10-01T20:59:02.662331amanda2.illicoweb.com sshd\[19529\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=apn-37-247-209-180.dynamic.gprs.plus.pl 2020-10-01T20:59:04.436286amanda2.illicoweb.com sshd\[19529\]: Failed password for invalid user charlie from 37.247.209.180 port 47330 ssh2 2020-10-01T21:08:52.699048amanda2.illicoweb.com sshd\[20099\]: Invalid user admin from 37.247.209.180 port 33514 2020-10-01T21:08:52.704609amanda2.illicoweb.com sshd\[20099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=apn-37-247-209-180.dynamic.gprs.plus.pl ... |
2020-10-02 06:19:29 |
| 119.28.93.152 | attackbotsspam | Oct 1 22:38:21 plex-server sshd[1862329]: Invalid user teamspeak from 119.28.93.152 port 34660 Oct 1 22:38:21 plex-server sshd[1862329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.93.152 Oct 1 22:38:21 plex-server sshd[1862329]: Invalid user teamspeak from 119.28.93.152 port 34660 Oct 1 22:38:24 plex-server sshd[1862329]: Failed password for invalid user teamspeak from 119.28.93.152 port 34660 ssh2 Oct 1 22:40:52 plex-server sshd[1863330]: Invalid user frappe from 119.28.93.152 port 18410 ... |
2020-10-02 06:44:38 |
| 154.8.234.34 | attackbots | fail2ban -- 154.8.234.34 ... |
2020-10-02 06:18:25 |
| 164.68.112.178 | attack | Failed password for invalid user from 164.68.112.178 port 48267 ssh2 |
2020-10-02 06:24:52 |
| 212.70.149.68 | attackspam | Oct 1 23:23:51 s1 postfix/smtps/smtpd\[22512\]: warning: unknown\[212.70.149.68\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 1 23:25:46 s1 postfix/smtps/smtpd\[22512\]: warning: unknown\[212.70.149.68\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 1 23:27:42 s1 postfix/smtps/smtpd\[22512\]: warning: unknown\[212.70.149.68\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 1 23:29:37 s1 postfix/smtps/smtpd\[23528\]: warning: unknown\[212.70.149.68\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 1 23:31:32 s1 postfix/smtps/smtpd\[23528\]: warning: unknown\[212.70.149.68\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 1 23:33:28 s1 postfix/smtps/smtpd\[23528\]: warning: unknown\[212.70.149.68\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 1 23:35:23 s1 postfix/smtps/smtpd\[23528\]: warning: unknown\[212.70.149.68\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 1 23:37:19 s1 postfix/smtps/smtpd\[23528\]: warning: unknown\[212.70.149.68\]: SASL LOGIN authenticati |
2020-10-02 06:31:19 |
| 115.159.53.71 | attack | SSH brute-force attempt |
2020-10-02 06:28:39 |
| 94.45.192.49 | attackspam | 20/9/30@16:39:26: FAIL: Alarm-Network address from=94.45.192.49 20/9/30@16:39:26: FAIL: Alarm-Network address from=94.45.192.49 ... |
2020-10-02 06:20:30 |