City: unknown
Region: unknown
Country: Norway
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 160.68.54.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53665
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;160.68.54.29. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 11:28:22 CST 2025
;; MSG SIZE rcvd: 105Host 29.54.68.160.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 29.54.68.160.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.92.0.248 | attack | Failed password for invalid user from 218.92.0.248 port 3015 ssh2 |
2020-07-10 05:11:16 |
| 121.135.10.90 | attackspambots | SSH fail RA |
2020-07-10 05:05:13 |
| 63.82.54.214 | attackbotsspam | Postfix RBL failed |
2020-07-10 04:50:52 |
| 159.203.30.50 | attack | 20 attempts against mh-ssh on cloud |
2020-07-10 04:52:45 |
| 118.100.176.138 | attackbotsspam | Jul 9 22:11:55 nbi-636 sshd[26912]: Bad protocol version identification '' from 118.100.176.138 port 39133 Jul 9 22:11:57 nbi-636 sshd[26922]: Invalid user pi from 118.100.176.138 port 39299 Jul 9 22:11:57 nbi-636 sshd[26922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.100.176.138 Jul 9 22:11:58 nbi-636 sshd[26922]: Failed password for invalid user pi from 118.100.176.138 port 39299 ssh2 Jul 9 22:11:59 nbi-636 sshd[26922]: Connection closed by invalid user pi 118.100.176.138 port 39299 [preauth] Jul 9 22:12:01 nbi-636 sshd[26944]: Invalid user pi from 118.100.176.138 port 40297 Jul 9 22:12:01 nbi-636 sshd[26944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.100.176.138 Jul 9 22:12:03 nbi-636 sshd[26944]: Failed password for invalid user pi from 118.100.176.138 port 40297 ssh2 Jul 9 22:12:03 nbi-636 sshd[26944]: Connection closed by invalid user pi 118.100.176.138 p........ ------------------------------- |
2020-07-10 04:53:07 |
| 94.102.56.231 | attackspam | Automatic report - Port Scan |
2020-07-10 05:03:38 |
| 222.107.73.200 | attack | SSH fail RA |
2020-07-10 04:56:48 |
| 96.54.228.119 | attackspambots | Jul 9 23:16:06 lukav-desktop sshd\[8144\]: Invalid user christoph from 96.54.228.119 Jul 9 23:16:06 lukav-desktop sshd\[8144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.54.228.119 Jul 9 23:16:08 lukav-desktop sshd\[8144\]: Failed password for invalid user christoph from 96.54.228.119 port 46037 ssh2 Jul 9 23:21:28 lukav-desktop sshd\[8210\]: Invalid user test9 from 96.54.228.119 Jul 9 23:21:28 lukav-desktop sshd\[8210\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.54.228.119 |
2020-07-10 04:39:17 |
| 185.176.27.250 | attackspam | 07/09/2020-16:24:26.188472 185.176.27.250 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-07-10 04:34:56 |
| 187.170.235.204 | attackspam | Jul 9 22:05:43 xxxxxxx8434580 sshd[17711]: reveeclipse mapping checking getaddrinfo for dsl-187-170-235-204-dyn.prod-infinhostnameum.com.mx [187.170.235.204] failed - POSSIBLE BREAK-IN ATTEMPT! Jul 9 22:05:43 xxxxxxx8434580 sshd[17711]: Invalid user patsy from 187.170.235.204 Jul 9 22:05:43 xxxxxxx8434580 sshd[17711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.170.235.204 Jul 9 22:05:45 xxxxxxx8434580 sshd[17711]: Failed password for invalid user patsy from 187.170.235.204 port 52794 ssh2 Jul 9 22:05:45 xxxxxxx8434580 sshd[17711]: Received disconnect from 187.170.235.204: 11: Bye Bye [preauth] Jul 9 22:06:50 xxxxxxx8434580 sshd[17733]: reveeclipse mapping checking getaddrinfo for dsl-187-170-235-204-dyn.prod-infinhostnameum.com.mx [187.170.235.204] failed - POSSIBLE BREAK-IN ATTEMPT! Jul 9 22:06:50 xxxxxxx8434580 sshd[17733]: Invalid user florrie from 187.170.235.204 Jul 9 22:06:50 xxxxxxx8434580 sshd[17733]: pam........ ------------------------------- |
2020-07-10 04:37:18 |
| 62.168.15.239 | attack | 62.168.15.239 - - [09/Jul/2020:21:21:12 +0100] "POST /wp-login.php HTTP/1.1" 302 5 "http://lifestylegates.co.uk/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" 62.168.15.239 - - [09/Jul/2020:21:21:13 +0100] "POST /wp-login.php HTTP/1.1" 302 5 "http://lifestylegates.co.uk/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" 62.168.15.239 - - [09/Jul/2020:21:21:15 +0100] "POST /wp-login.php HTTP/1.1" 302 5 "http://lifestylegates.co.uk/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" ... |
2020-07-10 04:53:22 |
| 217.27.117.136 | attack | 2020-07-09T20:12:43.809599upcloud.m0sh1x2.com sshd[31126]: Invalid user db2inst from 217.27.117.136 port 58830 |
2020-07-10 04:45:57 |
| 185.143.72.27 | attackbotsspam | Jul 9 22:46:20 relay postfix/smtpd\[4544\]: warning: unknown\[185.143.72.27\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 22:46:46 relay postfix/smtpd\[4542\]: warning: unknown\[185.143.72.27\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 22:47:14 relay postfix/smtpd\[2794\]: warning: unknown\[185.143.72.27\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 22:47:41 relay postfix/smtpd\[2794\]: warning: unknown\[185.143.72.27\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 22:48:08 relay postfix/smtpd\[4130\]: warning: unknown\[185.143.72.27\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-07-10 04:51:27 |
| 46.38.150.188 | attackbots | 2020-07-09T14:32:33.714200linuxbox-skyline auth[784404]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=hestia rhost=46.38.150.188 ... |
2020-07-10 04:46:47 |
| 90.103.42.193 | attackbotsspam | SSH fail RA |
2020-07-10 05:00:19 |