City: unknown
Region: unknown
Country: Multicast Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 229.170.29.221
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1766
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;229.170.29.221. IN A
;; AUTHORITY SECTION:
. 354 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024060400 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 04 22:34:29 CST 2024
;; MSG SIZE rcvd: 107Host 221.29.170.229.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 221.29.170.229.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.58.50.135 | attackspam | (From keithhoff@imail.party) Hello, I have not received an update regarding measures you're taking to combat COVID-19. I hope you'll assure us that you are following all recently released guidelines and taking every precaution to protect our community? I'm very concerned that countless young people are not taking COVID-19 seriously (ex. the Spring Break beaches are still packed). I think the only way to combat this 'whatever attitude' is by sharing as much information as possible. I hope you will add an alert banner with a link to the CDC's coronavirus page (https://www.cdc.gov/coronavirus/2019-ncov/index.html) or the WHO's page. More importantly, please consider copy & pasting this Creative Commons 4.0 (free to re-publish) article to your site (https://covidblog.info). Without strict measures and an *educated community*, the number of cases will increase exponentially throughout the global population! Stay safe, Keith |
2020-03-20 06:11:43 |
| 210.14.77.102 | attackspam | Mar 19 21:54:40 l03 sshd[18967]: Invalid user solr from 210.14.77.102 port 26081 ... |
2020-03-20 06:03:42 |
| 139.59.59.75 | attackspambots | WordPress login Brute force / Web App Attack on client site. |
2020-03-20 05:59:13 |
| 35.241.120.198 | attackspam | Invalid user bserver from 35.241.120.198 port 40218 |
2020-03-20 05:41:28 |
| 115.236.24.10 | attackspambots | CMS (WordPress or Joomla) login attempt. |
2020-03-20 05:57:32 |
| 157.230.190.1 | attackspam | frenzy |
2020-03-20 06:09:04 |
| 49.51.162.170 | attackspam | Mar 19 18:09:41 sd-53420 sshd\[10532\]: Invalid user shiyang from 49.51.162.170 Mar 19 18:09:41 sd-53420 sshd\[10532\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.162.170 Mar 19 18:09:44 sd-53420 sshd\[10532\]: Failed password for invalid user shiyang from 49.51.162.170 port 39294 ssh2 Mar 19 18:15:57 sd-53420 sshd\[12435\]: Invalid user ts7 from 49.51.162.170 Mar 19 18:15:57 sd-53420 sshd\[12435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.162.170 ... |
2020-03-20 05:40:39 |
| 164.132.48.204 | attackspam | Mar 19 22:38:43 nextcloud sshd\[9040\]: Invalid user uno85 from 164.132.48.204 Mar 19 22:38:43 nextcloud sshd\[9040\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.48.204 Mar 19 22:38:46 nextcloud sshd\[9040\]: Failed password for invalid user uno85 from 164.132.48.204 port 58774 ssh2 |
2020-03-20 05:51:56 |
| 187.167.194.79 | attackbots | Automatic report - Port Scan Attack |
2020-03-20 06:02:21 |
| 190.64.68.178 | attackspambots | Mar 19 22:31:11 ns382633 sshd\[10345\]: Invalid user redmine from 190.64.68.178 port 39425 Mar 19 22:31:11 ns382633 sshd\[10345\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.64.68.178 Mar 19 22:31:13 ns382633 sshd\[10345\]: Failed password for invalid user redmine from 190.64.68.178 port 39425 ssh2 Mar 19 22:45:47 ns382633 sshd\[13312\]: Invalid user starmade from 190.64.68.178 port 43201 Mar 19 22:45:47 ns382633 sshd\[13312\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.64.68.178 |
2020-03-20 05:46:28 |
| 222.186.42.75 | attackspam | 19.03.2020 21:55:34 SSH access blocked by firewall |
2020-03-20 05:58:04 |
| 185.44.66.99 | attack | Mar 19 22:03:26 ns382633 sshd\[4476\]: Invalid user centos from 185.44.66.99 port 51445 Mar 19 22:03:26 ns382633 sshd\[4476\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.44.66.99 Mar 19 22:03:28 ns382633 sshd\[4476\]: Failed password for invalid user centos from 185.44.66.99 port 51445 ssh2 Mar 19 22:14:36 ns382633 sshd\[6685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.44.66.99 user=root Mar 19 22:14:37 ns382633 sshd\[6685\]: Failed password for root from 185.44.66.99 port 60895 ssh2 |
2020-03-20 05:48:20 |
| 141.8.183.102 | attack | [Fri Mar 20 04:54:23.144502 2020] [:error] [pid 26247:tid 140596796794624] [client 141.8.183.102:52393] [client 141.8.183.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XnPqDwDHKyRZYePqYJvIXgAAAC4"] ... |
2020-03-20 06:15:19 |
| 154.160.66.42 | attackspambots | Mar 19 21:36:03 game-panel sshd[10011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.160.66.42 Mar 19 21:36:05 game-panel sshd[10011]: Failed password for invalid user wocloud from 154.160.66.42 port 51690 ssh2 Mar 19 21:41:51 game-panel sshd[10355]: Failed password for root from 154.160.66.42 port 41898 ssh2 |
2020-03-20 05:52:41 |
| 49.235.137.201 | attackspambots | Mar 19 22:15:36 hosting180 sshd[29612]: Invalid user systest from 49.235.137.201 port 36840 ... |
2020-03-20 05:38:14 |