City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 204.21.29.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20616
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;204.21.29.80. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021601 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 10:37:31 CST 2025
;; MSG SIZE rcvd: 105Host 80.29.21.204.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 80.29.21.204.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.233.180.123 | attackbots | detected by Fail2Ban |
2020-08-17 06:34:34 |
| 123.20.59.11 | attackbotsspam | php WP PHPmyadamin ABUSE blocked for 12h |
2020-08-17 06:41:23 |
| 218.92.0.247 | attackbots | Aug 17 00:20:06 nextcloud sshd\[7251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.247 user=root Aug 17 00:20:07 nextcloud sshd\[7251\]: Failed password for root from 218.92.0.247 port 47879 ssh2 Aug 17 00:20:20 nextcloud sshd\[7251\]: Failed password for root from 218.92.0.247 port 47879 ssh2 |
2020-08-17 06:31:41 |
| 34.105.135.67 | attackbotsspam | 34.105.135.67 - - [16/Aug/2020:21:32:40 +0100] "POST /wp-login.php HTTP/1.1" 200 1856 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.105.135.67 - - [16/Aug/2020:21:32:41 +0100] "POST /wp-login.php HTTP/1.1" 200 1835 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 34.105.135.67 - - [16/Aug/2020:21:32:41 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-17 06:09:58 |
| 183.103.115.2 | attackbots | Banned for a week because repeated abuses, for example SSH, but not only |
2020-08-17 06:18:18 |
| 193.112.16.224 | attack | 2020-08-16T21:29:02.386910dmca.cloudsearch.cf sshd[27176]: Invalid user zb from 193.112.16.224 port 50820 2020-08-16T21:29:02.393036dmca.cloudsearch.cf sshd[27176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.16.224 2020-08-16T21:29:02.386910dmca.cloudsearch.cf sshd[27176]: Invalid user zb from 193.112.16.224 port 50820 2020-08-16T21:29:04.145098dmca.cloudsearch.cf sshd[27176]: Failed password for invalid user zb from 193.112.16.224 port 50820 ssh2 2020-08-16T21:32:57.013225dmca.cloudsearch.cf sshd[27322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.16.224 user=root 2020-08-16T21:32:59.357824dmca.cloudsearch.cf sshd[27322]: Failed password for root from 193.112.16.224 port 59166 ssh2 2020-08-16T21:36:46.476921dmca.cloudsearch.cf sshd[27487]: Invalid user sandi from 193.112.16.224 port 39272 ... |
2020-08-17 06:17:53 |
| 139.155.26.79 | attackbotsspam | Aug 16 23:28:30 minden010 sshd[8591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.26.79 Aug 16 23:28:32 minden010 sshd[8591]: Failed password for invalid user krishna from 139.155.26.79 port 45808 ssh2 Aug 16 23:32:45 minden010 sshd[9993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.26.79 ... |
2020-08-17 06:13:38 |
| 115.159.53.215 | attackbots | Aug 16 23:29:36 host sshd[25477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.53.215 user=root Aug 16 23:29:38 host sshd[25477]: Failed password for root from 115.159.53.215 port 38776 ssh2 ... |
2020-08-17 06:27:50 |
| 148.72.209.9 | attackspambots | 148.72.209.9 - - [16/Aug/2020:21:32:06 +0100] "POST /wp-login.php HTTP/1.1" 200 2121 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.72.209.9 - - [16/Aug/2020:21:32:09 +0100] "POST /wp-login.php HTTP/1.1" 200 2116 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.72.209.9 - - [16/Aug/2020:21:32:11 +0100] "POST /wp-login.php HTTP/1.1" 200 2086 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-17 06:32:23 |
| 118.194.132.112 | attackbots | Aug 16 23:18:29 debian64 sshd[502]: Failed password for root from 118.194.132.112 port 33359 ssh2 Aug 16 23:18:32 debian64 sshd[502]: Failed password for root from 118.194.132.112 port 33359 ssh2 ... |
2020-08-17 06:15:32 |
| 51.254.141.18 | attack | Aug 17 00:49:27 root sshd[22615]: Invalid user masako from 51.254.141.18 ... |
2020-08-17 06:21:46 |
| 80.252.136.182 | attackspambots | 80.252.136.182 - - [17/Aug/2020:00:04:03 +0200] "GET /wp-login.php HTTP/1.1" 200 8691 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 80.252.136.182 - - [17/Aug/2020:00:04:05 +0200] "POST /wp-login.php HTTP/1.1" 200 8921 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 80.252.136.182 - - [17/Aug/2020:00:04:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-17 06:10:47 |
| 52.187.4.172 | attackbotsspam | Aug 16 22:27:39 electroncash sshd[48707]: Invalid user test from 52.187.4.172 port 47462 Aug 16 22:27:39 electroncash sshd[48707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.187.4.172 Aug 16 22:27:39 electroncash sshd[48707]: Invalid user test from 52.187.4.172 port 47462 Aug 16 22:27:42 electroncash sshd[48707]: Failed password for invalid user test from 52.187.4.172 port 47462 ssh2 Aug 16 22:32:22 electroncash sshd[50033]: Invalid user dummy from 52.187.4.172 port 58216 ... |
2020-08-17 06:24:48 |
| 15.223.33.103 | attackspambots | Trolling for resource vulnerabilities |
2020-08-17 06:10:23 |
| 116.255.245.208 | attack | 116.255.245.208 - - [16/Aug/2020:21:32:15 +0100] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 116.255.245.208 - - [16/Aug/2020:21:32:18 +0100] "POST /wp-login.php HTTP/1.1" 200 1706 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 116.255.245.208 - - [16/Aug/2020:21:32:20 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-17 06:27:30 |