City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 199.34.138.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29809
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;199.34.138.71. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 23:31:04 CST 2025
;; MSG SIZE rcvd: 106Host 71.138.34.199.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 71.138.34.199.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 125.94.151.182 | attackbotsspam | Unauthorised access (Jun 29) SRC=125.94.151.182 LEN=52 TOS=0x02 TTL=112 ID=610 DF TCP DPT=445 WINDOW=8192 CWR ECE SYN |
2020-06-29 21:54:21 |
| 37.187.75.16 | attack | 37.187.75.16 - - [29/Jun/2020:15:48:00 +0100] "POST /wp-login.php HTTP/1.1" 200 5389 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 37.187.75.16 - - [29/Jun/2020:15:50:06 +0100] "POST /wp-login.php HTTP/1.1" 200 5389 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 37.187.75.16 - - [29/Jun/2020:15:52:11 +0100] "POST /wp-login.php HTTP/1.1" 200 5389 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" ... |
2020-06-29 23:02:21 |
| 3.235.129.67 | attackspam | Jun 29 13:42:49 ns381471 sshd[20620]: Failed password for root from 3.235.129.67 port 36908 ssh2 |
2020-06-29 23:03:26 |
| 222.186.15.115 | attack | 2020-06-29T15:43:17.885123sd-86998 sshd[24113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.115 user=root 2020-06-29T15:43:20.279336sd-86998 sshd[24113]: Failed password for root from 222.186.15.115 port 30783 ssh2 2020-06-29T15:43:22.757191sd-86998 sshd[24113]: Failed password for root from 222.186.15.115 port 30783 ssh2 2020-06-29T15:43:17.885123sd-86998 sshd[24113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.115 user=root 2020-06-29T15:43:20.279336sd-86998 sshd[24113]: Failed password for root from 222.186.15.115 port 30783 ssh2 2020-06-29T15:43:22.757191sd-86998 sshd[24113]: Failed password for root from 222.186.15.115 port 30783 ssh2 2020-06-29T15:43:17.885123sd-86998 sshd[24113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.115 user=root 2020-06-29T15:43:20.279336sd-86998 sshd[24113]: Failed password for root from ... |
2020-06-29 21:48:27 |
| 222.186.31.83 | attack | Jun 29 16:33:24 * sshd[25051]: Failed password for root from 222.186.31.83 port 51744 ssh2 |
2020-06-29 22:45:55 |
| 51.105.248.112 | attackspam | failed root login |
2020-06-29 22:54:25 |
| 197.49.146.202 | attackspambots | 2020-06-29 13:03:58,161 fail2ban.filter [2207]: INFO [plesk-postfix] Found 197.49.146.202 - 2020-06-29 13:03:58 2020-06-29 13:03:58,162 fail2ban.filter [2207]: INFO [plesk-postfix] Found 197.49.146.202 - 2020-06-29 13:03:58 2020-06-29 13:03:58,487 fail2ban.filter [2207]: INFO [plesk-postfix] Found 197.49.146.202 - 2020-06-29 13:03:58 2020-06-29 13:03:58,488 fail2ban.filter [2207]: INFO [plesk-postfix] Found 197.49.146.202 - 2020-06-29 13:03:58 2020-06-29 13:03:59,440 fail2ban.filter [2207]: INFO [plesk-postfix] Found 197.49.146.202 - 2020-06-29 13:03:59 2020-06-29 13:03:59,441 fail2ban.filter [2207]: INFO [plesk-postfix] Found 197.49.146.202 - 2020-06-29 13:03:59 2020-06-29 13:04:00,427 fail2ban.filter [2207]: INFO [plesk-postfix] Found 197.49.146.202 - 2020-06-29 13:04:00 2020-06-29 13:04:00,429 fail2ban.filter [2207]: INFO [plesk-postfix] Found 197.49.146.202 - 2020-06-29 13:04:00 ........ ------------------------------- |
2020-06-29 21:46:51 |
| 59.103.167.215 | attack | xmlrpc attack |
2020-06-29 22:32:44 |
| 13.79.228.163 | attackspam | Time: Mon Jun 29 19:23:50 2020 +0800 IP: 13.79.228.163 (IE/Ireland/-) Failures: 10 (smtpauth) Interval: 600 seconds Blocked: Permanent Block [LF_SMTPAUTH] |
2020-06-29 21:47:59 |
| 222.186.30.76 | attackspam | Jun 29 16:55:51 vps639187 sshd\[11666\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76 user=root Jun 29 16:55:53 vps639187 sshd\[11666\]: Failed password for root from 222.186.30.76 port 39902 ssh2 Jun 29 16:55:55 vps639187 sshd\[11666\]: Failed password for root from 222.186.30.76 port 39902 ssh2 ... |
2020-06-29 22:56:38 |
| 78.81.136.249 | attackspam | Email rejected due to spam filtering |
2020-06-29 22:59:24 |
| 61.221.66.49 | attackbotsspam | timhelmke.de 61.221.66.49 [29/Jun/2020:13:11:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4260 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" timhelmke.de 61.221.66.49 [29/Jun/2020:13:11:24 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4260 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" |
2020-06-29 22:53:51 |
| 110.93.200.118 | attackbotsspam | Jun 29 12:39:30 django-0 sshd[18538]: Invalid user wutong from 110.93.200.118 ... |
2020-06-29 21:52:24 |
| 176.9.183.143 | attackbots | TCP src-port=43581 dst-port=25 Listed on manitu-net (138) |
2020-06-29 22:27:12 |
| 106.39.15.168 | attackspam | Jun 29 14:54:18 pornomens sshd\[25052\]: Invalid user phpmy from 106.39.15.168 port 51429 Jun 29 14:54:18 pornomens sshd\[25052\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.39.15.168 Jun 29 14:54:19 pornomens sshd\[25052\]: Failed password for invalid user phpmy from 106.39.15.168 port 51429 ssh2 ... |
2020-06-29 22:30:31 |