City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 29.4.164.125
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29363
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;29.4.164.125. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 02:14:10 CST 2025
;; MSG SIZE rcvd: 105Host 125.164.4.29.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 125.164.4.29.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 211.159.175.1 | attackbotsspam | Oct 11 13:38:24 fv15 sshd[1340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.175.1 user=r.r Oct 11 13:38:26 fv15 sshd[1340]: Failed password for r.r from 211.159.175.1 port 58640 ssh2 Oct 11 13:38:26 fv15 sshd[1340]: Received disconnect from 211.159.175.1: 11: Bye Bye [preauth] Oct 11 13:43:25 fv15 sshd[9297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.175.1 user=r.r Oct 11 13:43:27 fv15 sshd[9297]: Failed password for r.r from 211.159.175.1 port 40452 ssh2 Oct 11 13:43:27 fv15 sshd[9297]: Received disconnect from 211.159.175.1: 11: Bye Bye [preauth] Oct 11 13:48:52 fv15 sshd[31459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.175.1 user=r.r Oct 11 13:48:53 fv15 sshd[31459]: Failed password for r.r from 211.159.175.1 port 48662 ssh2 Oct 11 13:48:53 fv15 sshd[31459]: Received disconnect from 211.159.175.1: 11: Bye........ ------------------------------- |
2019-10-13 14:34:25 |
| 103.229.126.49 | attack | Port Scan: TCP/443 |
2019-10-13 14:49:58 |
| 106.54.124.250 | attack | Oct 7 03:42:36 cumulus sshd[13164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.124.250 user=r.r Oct 7 03:42:39 cumulus sshd[13164]: Failed password for r.r from 106.54.124.250 port 42170 ssh2 Oct 7 03:42:39 cumulus sshd[13164]: Received disconnect from 106.54.124.250 port 42170:11: Bye Bye [preauth] Oct 7 03:42:39 cumulus sshd[13164]: Disconnected from 106.54.124.250 port 42170 [preauth] Oct 7 04:06:37 cumulus sshd[13917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.124.250 user=r.r Oct 7 04:06:39 cumulus sshd[13917]: Failed password for r.r from 106.54.124.250 port 49010 ssh2 Oct 7 04:06:39 cumulus sshd[13917]: Received disconnect from 106.54.124.250 port 49010:11: Bye Bye [preauth] Oct 7 04:06:39 cumulus sshd[13917]: Disconnected from 106.54.124.250 port 49010 [preauth] Oct 7 04:11:34 cumulus sshd[14200]: pam_unix(sshd:auth): authentication failure; lognam........ ------------------------------- |
2019-10-13 15:00:53 |
| 144.217.83.201 | attackbots | Oct 13 05:46:29 SilenceServices sshd[8962]: Failed password for root from 144.217.83.201 port 33406 ssh2 Oct 13 05:50:29 SilenceServices sshd[10034]: Failed password for root from 144.217.83.201 port 44686 ssh2 |
2019-10-13 14:18:24 |
| 85.113.45.145 | attackbots | [portscan] Port scan |
2019-10-13 14:36:05 |
| 58.213.198.77 | attackbots | 2019-10-13T06:22:06.510487abusebot-5.cloudsearch.cf sshd\[2266\]: Invalid user harold from 58.213.198.77 port 40200 |
2019-10-13 14:41:21 |
| 178.150.175.196 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/178.150.175.196/ UA - 1H : (28) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : UA NAME ASN : ASN13188 IP : 178.150.175.196 CIDR : 178.150.175.0/24 PREFIX COUNT : 1599 UNIQUE IP COUNT : 409344 WYKRYTE ATAKI Z ASN13188 : 1H - 1 3H - 2 6H - 2 12H - 2 24H - 3 DateTime : 2019-10-13 05:53:46 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-13 14:46:40 |
| 177.54.224.245 | attack | Sent mail to target address hacked/leaked from abandonia in 2016 |
2019-10-13 14:18:55 |
| 5.80.59.40 | attack | Oct 13 08:35:25 sso sshd[6090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.80.59.40 Oct 13 08:35:27 sso sshd[6090]: Failed password for invalid user admin from 5.80.59.40 port 40878 ssh2 ... |
2019-10-13 15:02:20 |
| 82.78.33.11 | attackspambots | Unauthorised access (Oct 13) SRC=82.78.33.11 LEN=44 TTL=55 ID=36917 TCP DPT=8080 WINDOW=39633 SYN Unauthorised access (Oct 11) SRC=82.78.33.11 LEN=44 TTL=53 ID=7282 TCP DPT=8080 WINDOW=44803 SYN Unauthorised access (Oct 10) SRC=82.78.33.11 LEN=44 TTL=55 ID=20993 TCP DPT=8080 WINDOW=63067 SYN Unauthorised access (Oct 10) SRC=82.78.33.11 LEN=44 TTL=53 ID=62047 TCP DPT=8080 WINDOW=44803 SYN Unauthorised access (Oct 10) SRC=82.78.33.11 LEN=44 TTL=55 ID=36529 TCP DPT=8080 WINDOW=39633 SYN Unauthorised access (Oct 10) SRC=82.78.33.11 LEN=44 TTL=55 ID=45192 TCP DPT=8080 WINDOW=63067 SYN |
2019-10-13 14:32:42 |
| 111.93.235.210 | attackspam | Oct 6 17:20:17 eola sshd[2441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.235.210 user=r.r Oct 6 17:20:19 eola sshd[2441]: Failed password for r.r from 111.93.235.210 port 36568 ssh2 Oct 6 17:20:19 eola sshd[2441]: Received disconnect from 111.93.235.210 port 36568:11: Bye Bye [preauth] Oct 6 17:20:19 eola sshd[2441]: Disconnected from 111.93.235.210 port 36568 [preauth] Oct 6 17:29:21 eola sshd[2569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.235.210 user=r.r Oct 6 17:29:23 eola sshd[2569]: Failed password for r.r from 111.93.235.210 port 44201 ssh2 Oct 6 17:29:23 eola sshd[2569]: Received disconnect from 111.93.235.210 port 44201:11: Bye Bye [preauth] Oct 6 17:29:23 eola sshd[2569]: Disconnected from 111.93.235.210 port 44201 [preauth] Oct 6 17:33:38 eola sshd[2630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost........ ------------------------------- |
2019-10-13 14:30:13 |
| 211.253.10.96 | attack | Oct 13 08:01:32 vps691689 sshd[27190]: Failed password for root from 211.253.10.96 port 47302 ssh2 Oct 13 08:06:13 vps691689 sshd[27219]: Failed password for root from 211.253.10.96 port 58090 ssh2 ... |
2019-10-13 14:24:43 |
| 129.204.244.2 | attackspam | Oct 12 18:31:12 hanapaa sshd\[22439\]: Invalid user White@2017 from 129.204.244.2 Oct 12 18:31:12 hanapaa sshd\[22439\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.244.2 Oct 12 18:31:14 hanapaa sshd\[22439\]: Failed password for invalid user White@2017 from 129.204.244.2 port 48528 ssh2 Oct 12 18:36:41 hanapaa sshd\[22845\]: Invalid user 123Hello from 129.204.244.2 Oct 12 18:36:41 hanapaa sshd\[22845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.244.2 |
2019-10-13 14:43:25 |
| 121.142.111.242 | attackspam | Oct 13 01:42:05 TORMINT sshd\[22571\]: Invalid user ksh from 121.142.111.242 Oct 13 01:42:05 TORMINT sshd\[22571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.142.111.242 Oct 13 01:42:07 TORMINT sshd\[22571\]: Failed password for invalid user ksh from 121.142.111.242 port 46534 ssh2 ... |
2019-10-13 14:53:56 |
| 191.17.139.235 | attack | Oct 13 06:43:33 eventyay sshd[14945]: Failed password for root from 191.17.139.235 port 41648 ssh2 Oct 13 06:48:32 eventyay sshd[15032]: Failed password for root from 191.17.139.235 port 53056 ssh2 ... |
2019-10-13 14:46:15 |