City: Saratoga Springs
Region: New York
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.24.63.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58006
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;66.24.63.29. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 18:11:41 CST 2025
;; MSG SIZE rcvd: 104
29.63.24.66.in-addr.arpa domain name pointer syn-066-024-063-029.res.spectrum.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
29.63.24.66.in-addr.arpa name = syn-066-024-063-029.res.spectrum.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.221.221.127 | attackspam | 103.221.221.127 - - [27/Sep/2019:05:53:49 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.221.221.127 - - [27/Sep/2019:05:53:51 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.221.221.127 - - [27/Sep/2019:05:53:52 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.221.221.127 - - [27/Sep/2019:05:53:54 +0200] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.221.221.127 - - [27/Sep/2019:05:53:54 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.221.221.127 - - [27/Sep/2019:05:53:56 +0200] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" . |
2019-09-27 14:06:55 |
| 213.138.73.250 | attackbotsspam | Sep 27 07:51:54 vps647732 sshd[6359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.138.73.250 Sep 27 07:51:57 vps647732 sshd[6359]: Failed password for invalid user admin from 213.138.73.250 port 47304 ssh2 ... |
2019-09-27 14:13:29 |
| 118.25.58.65 | attackspambots | Sep 27 07:05:55 site3 sshd\[90656\]: Invalid user bf3server from 118.25.58.65 Sep 27 07:05:55 site3 sshd\[90656\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.58.65 Sep 27 07:05:56 site3 sshd\[90656\]: Failed password for invalid user bf3server from 118.25.58.65 port 35947 ssh2 Sep 27 07:10:04 site3 sshd\[90806\]: Invalid user opc from 118.25.58.65 Sep 27 07:10:04 site3 sshd\[90806\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.58.65 ... |
2019-09-27 14:11:31 |
| 122.155.223.38 | attack | Sep 27 06:50:06 vtv3 sshd\[22878\]: Invalid user testuser from 122.155.223.38 port 44722 Sep 27 06:50:06 vtv3 sshd\[22878\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.223.38 Sep 27 06:50:08 vtv3 sshd\[22878\]: Failed password for invalid user testuser from 122.155.223.38 port 44722 ssh2 Sep 27 06:54:52 vtv3 sshd\[24929\]: Invalid user mysql from 122.155.223.38 port 43142 Sep 27 06:54:52 vtv3 sshd\[24929\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.223.38 Sep 27 07:59:13 vtv3 sshd\[24055\]: Invalid user hazen from 122.155.223.38 port 36182 Sep 27 07:59:13 vtv3 sshd\[24055\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.223.38 Sep 27 07:59:15 vtv3 sshd\[24055\]: Failed password for invalid user hazen from 122.155.223.38 port 36182 ssh2 Sep 27 08:05:10 vtv3 sshd\[27431\]: Invalid user yuanwd from 122.155.223.38 port 41264 Sep 27 08:05:10 vtv3 sshd |
2019-09-27 13:27:11 |
| 159.89.169.109 | attackspam | Sep 27 06:58:56 vps691689 sshd[31095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.169.109 Sep 27 06:58:58 vps691689 sshd[31095]: Failed password for invalid user desire123 from 159.89.169.109 port 40184 ssh2 Sep 27 07:03:20 vps691689 sshd[31169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.169.109 ... |
2019-09-27 13:18:52 |
| 74.141.89.35 | attackspam | 2019-09-27T01:22:36.1639991495-001 sshd\[10292\]: Invalid user weboperator from 74.141.89.35 port 20001 2019-09-27T01:22:36.1710161495-001 sshd\[10292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-74-141-89-35.neo.res.rr.com 2019-09-27T01:22:38.0649931495-001 sshd\[10292\]: Failed password for invalid user weboperator from 74.141.89.35 port 20001 ssh2 2019-09-27T01:28:23.7843481495-001 sshd\[10663\]: Invalid user ib from 74.141.89.35 port 20001 2019-09-27T01:28:23.7914161495-001 sshd\[10663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-74-141-89-35.neo.res.rr.com 2019-09-27T01:28:25.3197221495-001 sshd\[10663\]: Failed password for invalid user ib from 74.141.89.35 port 20001 ssh2 ... |
2019-09-27 13:56:06 |
| 103.76.87.29 | attack | Sep 27 01:14:07 plusreed sshd[1724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.76.87.29 user=root Sep 27 01:14:09 plusreed sshd[1724]: Failed password for root from 103.76.87.29 port 4147 ssh2 Sep 27 01:14:11 plusreed sshd[1724]: Failed password for root from 103.76.87.29 port 4147 ssh2 Sep 27 01:14:07 plusreed sshd[1724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.76.87.29 user=root Sep 27 01:14:09 plusreed sshd[1724]: Failed password for root from 103.76.87.29 port 4147 ssh2 Sep 27 01:14:11 plusreed sshd[1724]: Failed password for root from 103.76.87.29 port 4147 ssh2 Sep 27 01:14:19 plusreed sshd[1787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.76.87.29 user=root Sep 27 01:14:22 plusreed sshd[1787]: Failed password for root from 103.76.87.29 port 3127 ssh2 ... |
2019-09-27 13:16:54 |
| 173.220.206.162 | attack | Invalid user test from 173.220.206.162 port 4404 |
2019-09-27 13:59:56 |
| 101.231.95.195 | attackspam | Sep 27 07:35:55 markkoudstaal sshd[3597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.231.95.195 Sep 27 07:35:58 markkoudstaal sshd[3597]: Failed password for invalid user placrim@1234 from 101.231.95.195 port 52085 ssh2 Sep 27 07:40:32 markkoudstaal sshd[4130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.231.95.195 |
2019-09-27 13:48:59 |
| 221.132.17.75 | attackspam | Sep 27 07:55:18 pkdns2 sshd\[18278\]: Invalid user ccp from 221.132.17.75Sep 27 07:55:21 pkdns2 sshd\[18278\]: Failed password for invalid user ccp from 221.132.17.75 port 58330 ssh2Sep 27 08:00:07 pkdns2 sshd\[18462\]: Invalid user postgres from 221.132.17.75Sep 27 08:00:09 pkdns2 sshd\[18462\]: Failed password for invalid user postgres from 221.132.17.75 port 42598 ssh2Sep 27 08:05:12 pkdns2 sshd\[18665\]: Invalid user remote from 221.132.17.75Sep 27 08:05:14 pkdns2 sshd\[18665\]: Failed password for invalid user remote from 221.132.17.75 port 55100 ssh2 ... |
2019-09-27 13:51:05 |
| 140.114.27.95 | attack | Sep 26 19:01:54 aiointranet sshd\[9483\]: Invalid user instrume from 140.114.27.95 Sep 26 19:01:54 aiointranet sshd\[9483\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=res27-95.ee.nthu.edu.tw Sep 26 19:01:56 aiointranet sshd\[9483\]: Failed password for invalid user instrume from 140.114.27.95 port 46400 ssh2 Sep 26 19:07:12 aiointranet sshd\[9899\]: Invalid user dante from 140.114.27.95 Sep 26 19:07:12 aiointranet sshd\[9899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=res27-95.ee.nthu.edu.tw |
2019-09-27 13:20:19 |
| 89.163.242.62 | attackspam | Automated report (2019-09-27T03:54:13+00:00). Misbehaving bot detected at this address. |
2019-09-27 13:55:44 |
| 124.95.132.154 | attackbotsspam | 09/26/2019-23:53:53.124760 124.95.132.154 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2019-09-27 14:11:11 |
| 114.237.109.159 | attackspambots | $f2bV_matches |
2019-09-27 14:06:15 |
| 59.10.5.156 | attack | Sep 26 19:27:54 tdfoods sshd\[26148\]: Invalid user happy from 59.10.5.156 Sep 26 19:27:54 tdfoods sshd\[26148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.10.5.156 Sep 26 19:27:56 tdfoods sshd\[26148\]: Failed password for invalid user happy from 59.10.5.156 port 60648 ssh2 Sep 26 19:32:16 tdfoods sshd\[26492\]: Invalid user ftp- from 59.10.5.156 Sep 26 19:32:16 tdfoods sshd\[26492\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.10.5.156 |
2019-09-27 14:01:36 |