City: unknown
Region: unknown
Country: India
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.68.21.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61858
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;103.68.21.142. IN A
;; AUTHORITY SECTION:
. 519 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 10:48:15 CST 2022
;; MSG SIZE rcvd: 106Host 142.21.68.103.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 142.21.68.103.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 83.97.20.36 | attackspambots | Jul 9 16:53:22 mail kernel: [3189050.112166] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=83.97.20.36 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=42334 PROTO=TCP SPT=42589 DPT=4057 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 9 16:53:31 mail kernel: [3189059.327442] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=83.97.20.36 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=51439 PROTO=TCP SPT=42589 DPT=4003 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 9 16:54:59 mail kernel: [3189147.631468] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=83.97.20.36 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=49527 PROTO=TCP SPT=42589 DPT=4381 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 9 16:56:51 mail kernel: [3189259.338618] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=83.97.20.36 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=19541 PROTO=TCP SPT=42589 DPT=4119 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-07-10 02:29:29 |
| 36.103.242.14 | attackbotsspam | Jul 9 20:01:54 lnxweb62 sshd[1092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.103.242.14 Jul 9 20:01:56 lnxweb62 sshd[1092]: Failed password for invalid user git from 36.103.242.14 port 39364 ssh2 Jul 9 20:09:11 lnxweb62 sshd[5431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.103.242.14 |
2019-07-10 02:51:30 |
| 14.205.31.91 | attack | 19/7/9@09:34:11: FAIL: IoT-SSH address from=14.205.31.91 ... |
2019-07-10 02:31:20 |
| 153.36.232.49 | attackspambots | SSH Brute Force, server-1 sshd[31084]: Failed password for root from 153.36.232.49 port 14555 ssh2 |
2019-07-10 02:54:38 |
| 79.173.226.191 | attack | " " |
2019-07-10 02:08:43 |
| 178.90.74.81 | attackbotsspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-08 16:27:55,196 INFO [shellcode_manager] (178.90.74.81) no match, writing hexdump (e149b172aa0570270a01544a613bfa98 :2326883) - MS17010 (EternalBlue) |
2019-07-10 02:49:05 |
| 54.37.66.73 | attack | 2019-07-09T19:32:03.3062921240 sshd\[31592\]: Invalid user administrator from 54.37.66.73 port 57029 2019-07-09T19:32:03.3105741240 sshd\[31592\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.66.73 2019-07-09T19:32:04.7661901240 sshd\[31592\]: Failed password for invalid user administrator from 54.37.66.73 port 57029 ssh2 ... |
2019-07-10 02:17:33 |
| 188.24.148.206 | attackspambots | NAME : RO-RESIDENTIAL CIDR : 188.24.128.0/19 SYN Flood DDoS Attack Romania - block certain countries :) IP: 188.24.148.206 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-07-10 02:23:09 |
| 92.39.54.91 | attackspam | Unauthorized IMAP connection attempt |
2019-07-10 02:27:04 |
| 188.132.181.190 | attackspam | SMB Server BruteForce Attack |
2019-07-10 02:21:59 |
| 62.24.102.106 | attackbots | Jul 9 19:57:55 nextcloud sshd\[7379\]: Invalid user test from 62.24.102.106 Jul 9 19:57:55 nextcloud sshd\[7379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.24.102.106 Jul 9 19:57:57 nextcloud sshd\[7379\]: Failed password for invalid user test from 62.24.102.106 port 26802 ssh2 ... |
2019-07-10 02:37:35 |
| 138.68.92.121 | attackspambots | Jul 9 09:34:43 server sshd\[168638\]: Invalid user oleg from 138.68.92.121 Jul 9 09:34:43 server sshd\[168638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 Jul 9 09:34:45 server sshd\[168638\]: Failed password for invalid user oleg from 138.68.92.121 port 54232 ssh2 ... |
2019-07-10 02:20:50 |
| 112.85.42.175 | attack | Jul 9 20:24:12 debian64 sshd\[13821\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.175 user=root Jul 9 20:24:14 debian64 sshd\[13821\]: Failed password for root from 112.85.42.175 port 11565 ssh2 Jul 9 20:24:17 debian64 sshd\[13821\]: Failed password for root from 112.85.42.175 port 11565 ssh2 ... |
2019-07-10 02:47:29 |
| 171.97.12.180 | attackspam | TCP port 23 (Telnet) attempt blocked by firewall. [2019-07-09 15:33:47] |
2019-07-10 02:20:19 |
| 207.46.13.121 | attack | Automatic report - Web App Attack |
2019-07-10 02:24:49 |