City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 74.120.100.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36129
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;74.120.100.141. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 22:08:59 CST 2025
;; MSG SIZE rcvd: 107
141.100.120.74.in-addr.arpa domain name pointer 74-120-100-141.blujaysolutions.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
141.100.120.74.in-addr.arpa name = 74-120-100-141.blujaysolutions.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 121.15.139.2 | attack | Aug 23 14:44:57 gw1 sshd[11214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.15.139.2 Aug 23 14:44:59 gw1 sshd[11214]: Failed password for invalid user ftpuser from 121.15.139.2 port 59292 ssh2 ... |
2020-08-23 20:25:48 |
| 186.10.245.152 | attack | $f2bV_matches |
2020-08-23 20:26:59 |
| 87.251.85.228 | attackbotsspam | Sending SPAM email |
2020-08-23 20:49:46 |
| 190.21.56.179 | attackbots | 2020-08-23T12:41:13.844376shield sshd\[21227\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190-21-56-179.baf.movistar.cl user=root 2020-08-23T12:41:15.840119shield sshd\[21227\]: Failed password for root from 190.21.56.179 port 39286 ssh2 2020-08-23T12:45:31.880137shield sshd\[22541\]: Invalid user front from 190.21.56.179 port 39338 2020-08-23T12:45:31.889199shield sshd\[22541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190-21-56-179.baf.movistar.cl 2020-08-23T12:45:34.337195shield sshd\[22541\]: Failed password for invalid user front from 190.21.56.179 port 39338 ssh2 |
2020-08-23 20:56:40 |
| 54.39.50.204 | attackspambots | Aug 23 08:34:36 buvik sshd[15710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.50.204 Aug 23 08:34:38 buvik sshd[15710]: Failed password for invalid user filip from 54.39.50.204 port 40056 ssh2 Aug 23 08:39:34 buvik sshd[16471]: Invalid user firefart from 54.39.50.204 ... |
2020-08-23 20:20:53 |
| 113.107.4.198 | attackspam | Aug 23 15:15:54 pkdns2 sshd\[10384\]: Invalid user servis from 113.107.4.198Aug 23 15:15:56 pkdns2 sshd\[10384\]: Failed password for invalid user servis from 113.107.4.198 port 46308 ssh2Aug 23 15:20:57 pkdns2 sshd\[10607\]: Failed password for root from 113.107.4.198 port 40106 ssh2Aug 23 15:23:12 pkdns2 sshd\[10717\]: Invalid user testftp from 113.107.4.198Aug 23 15:23:14 pkdns2 sshd\[10717\]: Failed password for invalid user testftp from 113.107.4.198 port 38988 ssh2Aug 23 15:25:26 pkdns2 sshd\[10850\]: Failed password for root from 113.107.4.198 port 37876 ssh2 ... |
2020-08-23 20:35:25 |
| 35.229.89.37 | attackspambots | Aug 23 00:44:06 NPSTNNYC01T sshd[7689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.229.89.37 Aug 23 00:44:08 NPSTNNYC01T sshd[7689]: Failed password for invalid user g from 35.229.89.37 port 51314 ssh2 Aug 23 00:48:07 NPSTNNYC01T sshd[8225]: Failed password for root from 35.229.89.37 port 32840 ssh2 ... |
2020-08-23 20:21:48 |
| 118.193.35.172 | attackspambots | [ssh] SSH attack |
2020-08-23 20:55:30 |
| 142.93.195.157 | attack | Aug 23 14:25:21 vpn01 sshd[2318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.195.157 Aug 23 14:25:23 vpn01 sshd[2318]: Failed password for invalid user ug from 142.93.195.157 port 39912 ssh2 ... |
2020-08-23 20:41:16 |
| 51.83.131.123 | attackspam | Aug 23 14:25:27 cosmoit sshd[7523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.131.123 |
2020-08-23 20:36:48 |
| 121.132.168.184 | attackspam | 2020-08-23T14:24:23.836465vps751288.ovh.net sshd\[4794\]: Invalid user dev2 from 121.132.168.184 port 37924 2020-08-23T14:24:23.843921vps751288.ovh.net sshd\[4794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.132.168.184 2020-08-23T14:24:26.178309vps751288.ovh.net sshd\[4794\]: Failed password for invalid user dev2 from 121.132.168.184 port 37924 ssh2 2020-08-23T14:25:04.915898vps751288.ovh.net sshd\[4806\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.132.168.184 user=root 2020-08-23T14:25:07.210390vps751288.ovh.net sshd\[4806\]: Failed password for root from 121.132.168.184 port 46356 ssh2 |
2020-08-23 20:59:48 |
| 208.109.8.138 | attack | 208.109.8.138 - - [23/Aug/2020:14:25:07 +0200] "GET /wp-login.php HTTP/1.1" 200 8537 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 208.109.8.138 - - [23/Aug/2020:14:25:09 +0200] "POST /wp-login.php HTTP/1.1" 200 8788 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 208.109.8.138 - - [23/Aug/2020:14:25:11 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-23 20:53:42 |
| 167.99.162.12 | attack | 2020-08-23T13:39:19.786605mail.standpoint.com.ua sshd[21289]: Failed password for storage from 167.99.162.12 port 43917 ssh2 2020-08-23T13:39:21.869170mail.standpoint.com.ua sshd[21289]: Failed password for storage from 167.99.162.12 port 43917 ssh2 2020-08-23T13:39:24.363210mail.standpoint.com.ua sshd[21289]: Failed password for storage from 167.99.162.12 port 43917 ssh2 2020-08-23T13:39:26.465882mail.standpoint.com.ua sshd[21289]: Failed password for storage from 167.99.162.12 port 43917 ssh2 2020-08-23T13:39:28.844763mail.standpoint.com.ua sshd[21289]: Failed password for storage from 167.99.162.12 port 43917 ssh2 ... |
2020-08-23 20:24:39 |
| 106.13.232.197 | attackspambots | Lines containing failures of 106.13.232.197 Aug 20 22:37:49 nxxxxxxx sshd[11308]: Invalid user ivete from 106.13.232.197 port 52556 Aug 20 22:37:49 nxxxxxxx sshd[11308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.232.197 Aug 20 22:37:51 nxxxxxxx sshd[11308]: Failed password for invalid user ivete from 106.13.232.197 port 52556 ssh2 Aug 20 22:37:51 nxxxxxxx sshd[11308]: Received disconnect from 106.13.232.197 port 52556:11: Bye Bye [preauth] Aug 20 22:37:51 nxxxxxxx sshd[11308]: Disconnected from invalid user ivete 106.13.232.197 port 52556 [preauth] Aug 20 22:47:04 nxxxxxxx sshd[13066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.232.197 user=r.r Aug 20 22:47:06 nxxxxxxx sshd[13066]: Failed password for r.r from 106.13.232.197 port 56808 ssh2 Aug 20 22:47:06 nxxxxxxx sshd[13066]: Received disconnect from 106.13.232.197 port 56808:11: Bye Bye [preauth] Aug 20 22:47:06 n........ ------------------------------ |
2020-08-23 20:35:56 |
| 51.38.83.164 | attack | *Port Scan* detected from 51.38.83.164 (GB/United Kingdom/England/London/164.ip-51-38-83.eu). 4 hits in the last 40 seconds |
2020-08-23 20:47:44 |