City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 29.249.72.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23031
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;29.249.72.166. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021101 1800 900 604800 86400
;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 04:49:23 CST 2025
;; MSG SIZE rcvd: 106Host 166.72.249.29.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 166.72.249.29.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.59.136.64 | attackspambots | 139.59.136.64 - - \[27/Dec/2019:23:54:58 +0100\] "POST /wp-login.php HTTP/1.0" 200 3080 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 139.59.136.64 - - \[27/Dec/2019:23:55:00 +0100\] "POST /wp-login.php HTTP/1.0" 200 3039 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 139.59.136.64 - - \[27/Dec/2019:23:55:02 +0100\] "POST /wp-login.php HTTP/1.0" 200 3048 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-12-28 08:18:50 |
| 145.255.31.52 | attack | Dec 27 19:01:54 plusreed sshd[11336]: Invalid user uf from 145.255.31.52 ... |
2019-12-28 08:09:50 |
| 45.76.232.166 | attackbots | 45.76.232.166 was recorded 5 times by 1 hosts attempting to connect to the following ports: 123. Incident counter (4h, 24h, all-time): 5, 21, 658 |
2019-12-28 07:59:56 |
| 14.174.180.195 | attack | Dec 27 22:46:35 flomail postfix/smtps/smtpd[14124]: warning: unknown[14.174.180.195]: SASL PLAIN authentication failed: Dec 27 22:46:42 flomail postfix/smtps/smtpd[14124]: warning: unknown[14.174.180.195]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 27 22:55:06 flomail postfix/smtps/smtpd[14796]: warning: unknown[14.174.180.195]: SASL PLAIN authentication failed: |
2019-12-28 08:18:11 |
| 106.13.114.26 | attackbots | Dec 28 05:49:40 itv-usvr-02 sshd[481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.26 user=root Dec 28 05:52:34 itv-usvr-02 sshd[518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.26 user=root Dec 28 05:55:26 itv-usvr-02 sshd[558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.114.26 |
2019-12-28 08:00:57 |
| 198.108.67.105 | attackbots | firewall-block, port(s): 8864/tcp |
2019-12-28 08:19:29 |
| 46.38.144.57 | attack | Dec 28 01:00:36 vmanager6029 postfix/smtpd\[26149\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 28 01:02:07 vmanager6029 postfix/smtpd\[26149\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-12-28 08:02:29 |
| 222.186.175.183 | attackspambots | 2019-12-28T01:08:13.657348vps751288.ovh.net sshd\[10675\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183 user=root 2019-12-28T01:08:15.452241vps751288.ovh.net sshd\[10675\]: Failed password for root from 222.186.175.183 port 37394 ssh2 2019-12-28T01:08:18.230754vps751288.ovh.net sshd\[10675\]: Failed password for root from 222.186.175.183 port 37394 ssh2 2019-12-28T01:08:22.087457vps751288.ovh.net sshd\[10675\]: Failed password for root from 222.186.175.183 port 37394 ssh2 2019-12-28T01:08:25.161925vps751288.ovh.net sshd\[10675\]: Failed password for root from 222.186.175.183 port 37394 ssh2 |
2019-12-28 08:16:23 |
| 50.73.116.43 | attackbotsspam | Web application attack detected by fail2ban |
2019-12-28 07:48:58 |
| 118.24.173.104 | attackspam | Dec 28 01:04:47 markkoudstaal sshd[29531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.173.104 Dec 28 01:04:50 markkoudstaal sshd[29531]: Failed password for invalid user wehara from 118.24.173.104 port 44803 ssh2 Dec 28 01:11:18 markkoudstaal sshd[30172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.173.104 |
2019-12-28 08:14:14 |
| 14.199.28.214 | attackbotsspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-12-28 08:12:16 |
| 139.178.68.119 | attackspam | Unauthorized connection attempt detected from IP address 139.178.68.119 to port 22 |
2019-12-28 08:06:42 |
| 91.134.140.242 | attackbotsspam | Too many connections or unauthorized access detected from Arctic banned ip |
2019-12-28 08:15:46 |
| 181.129.161.28 | attack | Dec 28 00:04:33 odroid64 sshd\[13637\]: Invalid user vcsa from 181.129.161.28 Dec 28 00:04:33 odroid64 sshd\[13637\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.129.161.28 ... |
2019-12-28 07:51:34 |
| 118.89.48.251 | attack | Dec 28 00:27:35 sd-53420 sshd\[18749\]: Invalid user alma from 118.89.48.251 Dec 28 00:27:35 sd-53420 sshd\[18749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.48.251 Dec 28 00:27:37 sd-53420 sshd\[18749\]: Failed password for invalid user alma from 118.89.48.251 port 54394 ssh2 Dec 28 00:32:36 sd-53420 sshd\[20819\]: Invalid user spallin from 118.89.48.251 Dec 28 00:32:36 sd-53420 sshd\[20819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.48.251 ... |
2019-12-28 08:22:14 |