City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.12.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15245
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.12.147. IN A
;; AUTHORITY SECTION:
. 518 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 17:44:25 CST 2022
;; MSG SIZE rcvd: 106Host 147.12.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 147.12.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 2.139.209.78 | attackspam | Apr 18 16:07:08 server sshd[9739]: Failed password for root from 2.139.209.78 port 46434 ssh2 Apr 18 16:12:36 server sshd[13734]: Failed password for invalid user pr from 2.139.209.78 port 51051 ssh2 Apr 18 16:17:01 server sshd[17354]: Failed password for invalid user ubuntu from 2.139.209.78 port 40275 ssh2 |
2020-04-18 22:22:15 |
| 134.122.79.129 | attackspam | Port probing on unauthorized port 1361 |
2020-04-18 22:38:58 |
| 193.112.250.77 | attackspambots | SSH brute-force: detected 6 distinct usernames within a 24-hour window. |
2020-04-18 22:20:36 |
| 103.92.24.240 | attack | Apr 18 14:12:06 srv01 sshd[29741]: Invalid user ubuntu from 103.92.24.240 port 43360 Apr 18 14:12:06 srv01 sshd[29741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.92.24.240 Apr 18 14:12:06 srv01 sshd[29741]: Invalid user ubuntu from 103.92.24.240 port 43360 Apr 18 14:12:07 srv01 sshd[29741]: Failed password for invalid user ubuntu from 103.92.24.240 port 43360 ssh2 Apr 18 14:17:22 srv01 sshd[30055]: Invalid user yx from 103.92.24.240 port 49310 ... |
2020-04-18 22:26:06 |
| 222.186.169.194 | attackbotsspam | Apr 18 16:39:39 markkoudstaal sshd[19958]: Failed password for root from 222.186.169.194 port 48800 ssh2 Apr 18 16:39:43 markkoudstaal sshd[19958]: Failed password for root from 222.186.169.194 port 48800 ssh2 Apr 18 16:39:47 markkoudstaal sshd[19958]: Failed password for root from 222.186.169.194 port 48800 ssh2 Apr 18 16:39:51 markkoudstaal sshd[19958]: Failed password for root from 222.186.169.194 port 48800 ssh2 |
2020-04-18 22:49:19 |
| 182.74.205.195 | attack | Unauthorized connection attempt from IP address 182.74.205.195 on Port 445(SMB) |
2020-04-18 22:32:39 |
| 174.138.1.99 | attackspam | CMS (WordPress or Joomla) login attempt. |
2020-04-18 22:39:55 |
| 66.110.216.198 | attackbots | failed_logins |
2020-04-18 22:39:36 |
| 61.155.110.210 | attackspambots | Apr 18 14:40:03 rotator sshd\[23607\]: Invalid user do from 61.155.110.210Apr 18 14:40:04 rotator sshd\[23607\]: Failed password for invalid user do from 61.155.110.210 port 57074 ssh2Apr 18 14:44:01 rotator sshd\[24393\]: Invalid user ftpuser from 61.155.110.210Apr 18 14:44:03 rotator sshd\[24393\]: Failed password for invalid user ftpuser from 61.155.110.210 port 45488 ssh2Apr 18 14:47:44 rotator sshd\[25191\]: Invalid user zp from 61.155.110.210Apr 18 14:47:46 rotator sshd\[25191\]: Failed password for invalid user zp from 61.155.110.210 port 33902 ssh2 ... |
2020-04-18 22:45:05 |
| 182.61.105.127 | attack | Apr 18 08:29:57 NPSTNNYC01T sshd[21672]: Failed password for root from 182.61.105.127 port 59394 ssh2 Apr 18 08:34:04 NPSTNNYC01T sshd[22157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.105.127 Apr 18 08:34:06 NPSTNNYC01T sshd[22157]: Failed password for invalid user admin from 182.61.105.127 port 37010 ssh2 ... |
2020-04-18 22:09:22 |
| 172.104.124.229 | attackbots | scans once in preceeding hours on the ports (in chronological order) 8888 resulting in total of 7 scans from 172.104.0.0/15 block. |
2020-04-18 22:40:27 |
| 106.1.94.78 | attackbots | Apr 18 19:01:17 itv-usvr-01 sshd[19231]: Invalid user dg from 106.1.94.78 |
2020-04-18 22:25:15 |
| 190.85.34.142 | attackbots | SSH brute-force: detected 7 distinct usernames within a 24-hour window. |
2020-04-18 22:08:18 |
| 41.193.46.251 | attackspam | Unauthorized connection attempt from IP address 41.193.46.251 on Port 445(SMB) |
2020-04-18 22:36:06 |
| 139.59.254.93 | attack | Apr 18 13:51:56 ns382633 sshd\[2439\]: Invalid user admin1 from 139.59.254.93 port 37310 Apr 18 13:51:56 ns382633 sshd\[2439\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.254.93 Apr 18 13:51:58 ns382633 sshd\[2439\]: Failed password for invalid user admin1 from 139.59.254.93 port 37310 ssh2 Apr 18 14:01:11 ns382633 sshd\[4323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.254.93 user=root Apr 18 14:01:14 ns382633 sshd\[4323\]: Failed password for root from 139.59.254.93 port 57856 ssh2 |
2020-04-18 22:28:11 |