City: Uvalde
Region: Texas
Country: United States
Internet Service Provider: AT&T
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 70.241.213.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31015
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;70.241.213.19. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 18:50:52 CST 2025
;; MSG SIZE rcvd: 106Host 19.213.241.70.in-addr.arpa not found: 2(SERVFAIL)
server can't find 70.241.213.19.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 223.215.160.131 | attackspambots | [MK-VM6] Blocked by UFW |
2020-09-11 05:05:12 |
| 221.127.114.214 | attackbots | Sep 10 18:58:42 * sshd[15283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.127.114.214 Sep 10 18:58:44 * sshd[15283]: Failed password for invalid user user from 221.127.114.214 port 41176 ssh2 |
2020-09-11 05:05:38 |
| 85.173.248.51 | attackbots | 20/9/10@12:58:12: FAIL: Alarm-Network address from=85.173.248.51 20/9/10@12:58:12: FAIL: Alarm-Network address from=85.173.248.51 ... |
2020-09-11 05:32:14 |
| 220.134.89.118 | attackbots | Found on CINS badguys / proto=6 . srcport=65507 . dstport=23 . (805) |
2020-09-11 05:19:41 |
| 106.75.16.62 | attackspam | 106.75.16.62 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 10 15:15:00 jbs1 sshd[30039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.16.62 user=root Sep 10 15:12:43 jbs1 sshd[29155]: Failed password for root from 62.234.190.206 port 43768 ssh2 Sep 10 15:12:43 jbs1 sshd[29166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.244.28 user=root Sep 10 15:12:45 jbs1 sshd[29166]: Failed password for root from 118.89.244.28 port 52764 ssh2 Sep 10 15:14:42 jbs1 sshd[29946]: Failed password for root from 51.83.42.212 port 44830 ssh2 Sep 10 15:12:40 jbs1 sshd[29155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.190.206 user=root IP Addresses Blocked: |
2020-09-11 05:22:35 |
| 106.13.99.107 | attackbotsspam | Sep 10 18:54:17 marvibiene sshd[11503]: Failed password for root from 106.13.99.107 port 39592 ssh2 Sep 10 18:56:35 marvibiene sshd[11627]: Failed password for root from 106.13.99.107 port 34220 ssh2 Sep 10 18:58:36 marvibiene sshd[11730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.99.107 |
2020-09-11 05:10:43 |
| 185.235.40.80 | attackbotsspam | 2020-09-10T20:35:56+0200 Failed SSH Authentication/Brute Force Attack.(Server 2) |
2020-09-11 05:08:21 |
| 14.225.238.227 | attack | 14.225.238.227 - - [10/Sep/2020:19:20:28 +0200] "GET /wp-login.php HTTP/1.1" 200 1256 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 14.225.238.227 - - [10/Sep/2020:19:20:30 +0200] "POST /wp-login.php HTTP/1.1" 200 1651 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 14.225.238.227 - - [10/Sep/2020:19:20:31 +0200] "GET /wp-login.php HTTP/1.1" 200 1256 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 14.225.238.227 - - [10/Sep/2020:19:20:33 +0200] "POST /wp-login.php HTTP/1.1" 200 1650 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 14.225.238.227 - - [10/Sep/2020:19:21:25 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 14.225.238.227 - - [10/Sep/2020:19:21:26 +0200] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/201001 ... |
2020-09-11 05:00:11 |
| 78.84.92.218 | attack | Sep 10 18:58:07 * sshd[15024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.84.92.218 Sep 10 18:58:09 * sshd[15024]: Failed password for invalid user admin from 78.84.92.218 port 40840 ssh2 |
2020-09-11 05:33:33 |
| 193.35.51.21 | attackbotsspam | 2020-09-10 23:07:06 dovecot_login authenticator failed for \(\[193.35.51.21\]\) \[193.35.51.21\]: 535 Incorrect authentication data \(set_id=tickets@yt.gl\) 2020-09-10 23:07:13 dovecot_login authenticator failed for \(\[193.35.51.21\]\) \[193.35.51.21\]: 535 Incorrect authentication data 2020-09-10 23:07:22 dovecot_login authenticator failed for \(\[193.35.51.21\]\) \[193.35.51.21\]: 535 Incorrect authentication data 2020-09-10 23:07:27 dovecot_login authenticator failed for \(\[193.35.51.21\]\) \[193.35.51.21\]: 535 Incorrect authentication data 2020-09-10 23:07:39 dovecot_login authenticator failed for \(\[193.35.51.21\]\) \[193.35.51.21\]: 535 Incorrect authentication data 2020-09-10 23:07:44 dovecot_login authenticator failed for \(\[193.35.51.21\]\) \[193.35.51.21\]: 535 Incorrect authentication data 2020-09-10 23:07:49 dovecot_login authenticator failed for \(\[193.35.51.21\]\) \[193.35.51.21\]: 535 Incorrect authentication data 2020-09-10 23:07:54 dovecot_login authenticator fai ... |
2020-09-11 05:16:37 |
| 106.12.26.167 | attack | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): |
2020-09-11 05:21:30 |
| 92.73.128.67 | attackbotsspam | php WP PHPmyadamin ABUSE blocked for 12h |
2020-09-11 04:54:40 |
| 185.220.101.203 | attackbotsspam | Sep 10 21:08:00 powerpi2 sshd[8728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.203 Sep 10 21:07:59 powerpi2 sshd[8728]: Invalid user hxeadm from 185.220.101.203 port 4540 Sep 10 21:08:02 powerpi2 sshd[8728]: Failed password for invalid user hxeadm from 185.220.101.203 port 4540 ssh2 ... |
2020-09-11 05:11:10 |
| 51.68.71.239 | attack | 2020-09-10T22:40:06.139769+02:00 |
2020-09-11 04:51:50 |
| 176.31.225.213 | attackbotsspam | [N10.H2.VM2] Port Scanner Detected Blocked by UFW |
2020-09-11 05:00:29 |