City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 29.42.239.73
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52344
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;29.42.239.73. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 00:48:16 CST 2025
;; MSG SIZE rcvd: 105Host 73.239.42.29.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 73.239.42.29.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.91.212.81 | attackspambots | 05/01/2020-08:48:02.364054 51.91.212.81 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 52 |
2020-05-01 21:05:09 |
| 183.89.212.162 | attackbotsspam | SSH invalid-user multiple login try |
2020-05-01 21:31:15 |
| 40.114.126.77 | attackbotsspam | 40.114.126.77 - - \[01/May/2020:15:05:29 +0200\] "POST //xmlrpc.php HTTP/1.0" 200 825 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/79.0 Safari/537.36" 40.114.126.77 - - \[01/May/2020:15:05:29 +0200\] "POST //xmlrpc.php HTTP/1.0" 200 825 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/79.0 Safari/537.36" 40.114.126.77 - - \[01/May/2020:15:05:30 +0200\] "POST //xmlrpc.php HTTP/1.0" 200 825 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/79.0 Safari/537.36" |
2020-05-01 21:17:26 |
| 111.67.193.204 | attackbotsspam | Invalid user cyk from 111.67.193.204 port 52548 |
2020-05-01 20:54:12 |
| 59.90.47.72 | attack | 2020-05-01T06:42:21.323388linuxbox-skyline sshd[94652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.90.47.72 user=root 2020-05-01T06:42:22.782148linuxbox-skyline sshd[94652]: Failed password for root from 59.90.47.72 port 45888 ssh2 ... |
2020-05-01 21:33:32 |
| 194.61.27.249 | attack | firewall-block, port(s): 5040/tcp, 5060/tcp |
2020-05-01 21:04:23 |
| 61.177.172.128 | attackbotsspam | (sshd) Failed SSH login from 61.177.172.128 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 1 15:01:28 amsweb01 sshd[11082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root May 1 15:01:28 amsweb01 sshd[11084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root May 1 15:01:29 amsweb01 sshd[11082]: Failed password for root from 61.177.172.128 port 52935 ssh2 May 1 15:01:29 amsweb01 sshd[11084]: Failed password for root from 61.177.172.128 port 55543 ssh2 May 1 15:01:32 amsweb01 sshd[11082]: Failed password for root from 61.177.172.128 port 52935 ssh2 |
2020-05-01 21:11:24 |
| 139.198.122.76 | attackspam | May 1 13:43:31 melroy-server sshd[29406]: Failed password for git from 139.198.122.76 port 44876 ssh2 ... |
2020-05-01 21:13:42 |
| 31.173.26.79 | attack | 1588333816 - 05/01/2020 13:50:16 Host: 31.173.26.79/31.173.26.79 Port: 445 TCP Blocked |
2020-05-01 21:08:42 |
| 206.189.66.91 | attack | scans 2 times in preceeding hours on the ports (in chronological order) 7070 19801 resulting in total of 26 scans from 206.189.0.0/16 block. |
2020-05-01 21:01:55 |
| 202.90.199.116 | attack | Apr 30 08:07:28 mail sshd[10424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.90.199.116 Apr 30 08:07:30 mail sshd[10424]: Failed password for invalid user czy from 202.90.199.116 port 34648 ssh2 ... |
2020-05-01 20:55:25 |
| 92.118.160.1 | attackbots | Port scan(s) denied |
2020-05-01 21:30:25 |
| 157.35.229.200 | attack | SMB Server BruteForce Attack |
2020-05-01 21:16:51 |
| 112.85.42.181 | attackspambots | May 1 15:05:13 inter-technics sshd[29938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.181 user=root May 1 15:05:15 inter-technics sshd[29938]: Failed password for root from 112.85.42.181 port 7502 ssh2 May 1 15:05:18 inter-technics sshd[29938]: Failed password for root from 112.85.42.181 port 7502 ssh2 May 1 15:05:13 inter-technics sshd[29938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.181 user=root May 1 15:05:15 inter-technics sshd[29938]: Failed password for root from 112.85.42.181 port 7502 ssh2 May 1 15:05:18 inter-technics sshd[29938]: Failed password for root from 112.85.42.181 port 7502 ssh2 May 1 15:05:13 inter-technics sshd[29938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.181 user=root May 1 15:05:15 inter-technics sshd[29938]: Failed password for root from 112.85.42.181 port 7502 ssh2 May 1 15:05:1 ... |
2020-05-01 21:07:29 |
| 200.252.68.34 | attack | sshd |
2020-05-01 21:12:04 |