City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.14.82
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54033
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.14.82. IN A
;; AUTHORITY SECTION:
. 444 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 02:11:37 CST 2022
;; MSG SIZE rcvd: 105Host 82.14.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 82.14.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 46.218.85.69 | attack | May 8 23:29:50 ns3164893 sshd[31621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.218.85.69 user=root May 8 23:29:52 ns3164893 sshd[31621]: Failed password for root from 46.218.85.69 port 56598 ssh2 ... |
2020-05-09 22:17:13 |
| 93.171.5.244 | attack | May 9 04:09:01 Ubuntu-1404-trusty-64-minimal sshd\[15504\]: Invalid user happy from 93.171.5.244 May 9 04:09:01 Ubuntu-1404-trusty-64-minimal sshd\[15504\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.171.5.244 May 9 04:09:03 Ubuntu-1404-trusty-64-minimal sshd\[15504\]: Failed password for invalid user happy from 93.171.5.244 port 47270 ssh2 May 9 04:24:07 Ubuntu-1404-trusty-64-minimal sshd\[22769\]: Invalid user testtest from 93.171.5.244 May 9 04:24:07 Ubuntu-1404-trusty-64-minimal sshd\[22769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.171.5.244 |
2020-05-09 21:54:28 |
| 89.144.47.246 | attackspambots | Unauthorised access (May 8) SRC=89.144.47.246 LEN=40 TTL=245 ID=41279 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (May 8) SRC=89.144.47.246 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=3962 TCP DPT=3389 WINDOW=1024 SYN Unauthorised access (May 7) SRC=89.144.47.246 LEN=40 TOS=0x08 PREC=0x20 TTL=243 ID=17004 TCP DPT=3389 WINDOW=1024 SYN |
2020-05-09 22:05:46 |
| 94.102.50.137 | attackspambots | ET CINS Active Threat Intelligence Poor Reputation IP group 89 - port: 1039 proto: TCP cat: Misc Attack |
2020-05-09 21:46:20 |
| 89.248.172.101 | attackbots | ET CINS Active Threat Intelligence Poor Reputation IP group 81 - port: 13373 proto: TCP cat: Misc Attack |
2020-05-09 21:55:00 |
| 218.92.0.172 | attackspam | May 8 22:59:40 NPSTNNYC01T sshd[12641]: Failed password for root from 218.92.0.172 port 5821 ssh2 May 8 22:59:44 NPSTNNYC01T sshd[12641]: Failed password for root from 218.92.0.172 port 5821 ssh2 May 8 22:59:47 NPSTNNYC01T sshd[12641]: Failed password for root from 218.92.0.172 port 5821 ssh2 May 8 22:59:55 NPSTNNYC01T sshd[12641]: error: maximum authentication attempts exceeded for root from 218.92.0.172 port 5821 ssh2 [preauth] ... |
2020-05-09 22:17:51 |
| 222.186.15.10 | attackspam | May 9 07:56:31 gw1 sshd[16410]: Failed password for root from 222.186.15.10 port 14031 ssh2 May 9 07:56:32 gw1 sshd[16410]: Failed password for root from 222.186.15.10 port 14031 ssh2 ... |
2020-05-09 21:45:30 |
| 138.99.135.186 | attackspambots | Unauthorized connection attempt detected from IP address 138.99.135.186 to port 445 |
2020-05-09 22:26:45 |
| 218.92.0.179 | attack | May 9 03:54:53 combo sshd[3353]: Failed password for root from 218.92.0.179 port 1605 ssh2 May 9 03:54:56 combo sshd[3353]: Failed password for root from 218.92.0.179 port 1605 ssh2 May 9 03:54:59 combo sshd[3353]: Failed password for root from 218.92.0.179 port 1605 ssh2 ... |
2020-05-09 22:08:11 |
| 218.92.0.168 | attackspambots | May 9 04:30:16 pve1 sshd[19272]: Failed password for root from 218.92.0.168 port 58831 ssh2 May 9 04:30:20 pve1 sshd[19272]: Failed password for root from 218.92.0.168 port 58831 ssh2 ... |
2020-05-09 22:20:48 |
| 212.64.68.71 | attack | SSH-BruteForce |
2020-05-09 21:57:48 |
| 206.81.12.209 | attackspam | (sshd) Failed SSH login from 206.81.12.209 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 9 04:46:32 ubnt-55d23 sshd[4416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.12.209 user=root May 9 04:46:35 ubnt-55d23 sshd[4416]: Failed password for root from 206.81.12.209 port 38196 ssh2 |
2020-05-09 22:01:13 |
| 212.129.32.164 | attackspam | " " |
2020-05-09 21:48:16 |
| 80.82.69.130 | attackbots | ET CINS Active Threat Intelligence Poor Reputation IP group 67 - port: 25133 proto: TCP cat: Misc Attack |
2020-05-09 22:35:39 |
| 218.92.0.175 | attack | 2020-05-06T22:33:13.140649finland sshd[54888]: Unable to negotiate with 218.92.0.175 port 48685: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] 2020-05-07T09:41:49.212494finland sshd[57560]: Connection from 218.92.0.175 port 2296 on 95.217.116.180 port 22 rdomain "" 2020-05-07T09:41:50.434222finland sshd[57560]: Unable to negotiate with 218.92.0.175 port 2296: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] 2020-05-07T14:22:16.770229finland sshd[57934]: Connection from 218.92.0.175 port 47947 on 95.217.116.180 port 22 rdomain "" 2020-05-07T14:22:18.181658finland sshd[57934]: Connection reset by 218.92.0.175 port 47947 [preauth] 2020-05-08T05:17:01.548050finland sshd[59926]: Connection from 218.92.0.175 port 45959 on 95.217.116.180 port 22 rdomain "" 2020-05-08T05:17:01.837128finla ... |
2020-05-09 22:12:16 |