City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: University of California, San Diego
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 44.30.74.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14658
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;44.30.74.29. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019061300 1800 900 604800 86400
;; Query time: 4 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jun 13 21:21:31 CST 2019
;; MSG SIZE rcvd: 115
Host 29.74.30.44.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 29.74.30.44.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.173.142 | attackbotsspam | Fail2Ban - SSH Bruteforce Attempt |
2020-08-14 13:04:04 |
| 49.83.241.73 | attackbotsspam | Lines containing failures of 49.83.241.73 Aug 13 23:35:59 penfold sshd[17214]: Bad protocol version identification '' from 49.83.241.73 port 56868 Aug 13 23:36:08 penfold sshd[17215]: Invalid user NetLinx from 49.83.241.73 port 57479 Aug 13 23:36:10 penfold sshd[17215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.241.73 Aug 13 23:36:11 penfold sshd[17215]: Failed password for invalid user NetLinx from 49.83.241.73 port 57479 ssh2 Aug 13 23:36:13 penfold sshd[17215]: Connection closed by invalid user NetLinx 49.83.241.73 port 57479 [preauth] Aug 13 23:36:20 penfold sshd[17221]: Invalid user netscreen from 49.83.241.73 port 35054 Aug 13 23:36:21 penfold sshd[17221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.83.241.73 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.83.241.73 |
2020-08-14 12:44:54 |
| 202.51.98.226 | attack | Aug 14 05:36:33 ip106 sshd[644]: Failed password for root from 202.51.98.226 port 51496 ssh2 ... |
2020-08-14 12:34:16 |
| 61.145.178.134 | attackbotsspam | $f2bV_matches |
2020-08-14 13:00:27 |
| 45.14.150.103 | attackspambots | Aug 14 00:11:49 ws22vmsma01 sshd[177848]: Failed password for root from 45.14.150.103 port 42408 ssh2 Aug 14 00:25:53 ws22vmsma01 sshd[214380]: Failed password for root from 45.14.150.103 port 48398 ssh2 ... |
2020-08-14 12:45:53 |
| 183.89.215.100 | attackbots | Dovecot Invalid User Login Attempt. |
2020-08-14 13:15:34 |
| 134.122.53.154 | attackbotsspam | Aug 14 07:39:07 hosting sshd[19730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.53.154 user=root Aug 14 07:39:09 hosting sshd[19730]: Failed password for root from 134.122.53.154 port 60480 ssh2 ... |
2020-08-14 13:02:22 |
| 109.196.1.7 | attackbots | 2020-08-14 05:36:29 plain_virtual_exim authenticator failed for ([109.196.1.7]) [109.196.1.7]: 535 Incorrect authentication data ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=109.196.1.7 |
2020-08-14 12:59:03 |
| 107.152.202.66 | attack | (From zachery.whisler46@outlook.com) This Google doc exposes how this scamdemic is part of a bigger plan to crush your business and keep it closed or semi-operational (with heavy rescritions) while big corporations remain open without consequences. This Covid lie has ruined many peoples lives and businesses and is all done on purpose to bring about the One World Order. It goes much deeper than this but the purpose of this doc is to expose the evil and wickedness that works in the background to ruin peoples lives. So feel free to share this message with friends and family. No need to reply to the email i provided above as its not registered. But this information will tell you everything you need to know. https://docs.google.com/document/d/1dAy4vPZrdUXvaCsT0J0dHpQcBiCqXElS8hyOwgN2pr8/edit |
2020-08-14 13:08:21 |
| 220.189.192.2 | attackbotsspam | Aug 14 04:14:43 plex-server sshd[617062]: Invalid user qweasd!@# from 220.189.192.2 port 56364 Aug 14 04:14:43 plex-server sshd[617062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.189.192.2 Aug 14 04:14:43 plex-server sshd[617062]: Invalid user qweasd!@# from 220.189.192.2 port 56364 Aug 14 04:14:45 plex-server sshd[617062]: Failed password for invalid user qweasd!@# from 220.189.192.2 port 56364 ssh2 Aug 14 04:17:18 plex-server sshd[618171]: Invalid user Win)123 from 220.189.192.2 port 58020 ... |
2020-08-14 13:05:57 |
| 51.158.190.54 | attackbots | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-14T03:34:54Z and 2020-08-14T03:42:11Z |
2020-08-14 12:42:49 |
| 179.107.34.178 | attackbotsspam | Aug 14 00:24:20 ny01 sshd[17478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.107.34.178 Aug 14 00:24:23 ny01 sshd[17478]: Failed password for invalid user p@sSw0rd from 179.107.34.178 port 41799 ssh2 Aug 14 00:25:26 ny01 sshd[17967]: Failed password for root from 179.107.34.178 port 64256 ssh2 |
2020-08-14 12:36:54 |
| 37.187.197.113 | attackspambots | CMS (WordPress or Joomla) login attempt. |
2020-08-14 12:55:39 |
| 200.119.112.204 | attackbotsspam | Aug 14 06:43:05 rancher-0 sshd[1076626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.119.112.204 user=root Aug 14 06:43:07 rancher-0 sshd[1076626]: Failed password for root from 200.119.112.204 port 38084 ssh2 ... |
2020-08-14 13:05:13 |
| 222.186.173.201 | attackspambots | Aug 14 04:58:54 localhost sshd\[7736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.201 user=root Aug 14 04:58:57 localhost sshd\[7736\]: Failed password for root from 222.186.173.201 port 26316 ssh2 Aug 14 04:59:00 localhost sshd\[7736\]: Failed password for root from 222.186.173.201 port 26316 ssh2 ... |
2020-08-14 13:05:36 |