City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.21.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1200
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.21.107. IN A
;; AUTHORITY SECTION:
. 9 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 18:52:47 CST 2022
;; MSG SIZE rcvd: 106Host 107.21.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 107.21.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 47.74.234.121 | attackspam | Mar 3 23:34:30 localhost sshd\[4589\]: Invalid user es from 47.74.234.121 port 55876 Mar 3 23:34:30 localhost sshd\[4589\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.74.234.121 Mar 3 23:34:31 localhost sshd\[4589\]: Failed password for invalid user es from 47.74.234.121 port 55876 ssh2 |
2020-03-04 06:38:57 |
| 70.39.67.59 | attackspambots | Mar 3 23:34:03 debian-2gb-nbg1-2 kernel: \[5534020.574039\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=70.39.67.59 DST=195.201.40.59 LEN=48 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=UDP SPT=36247 DPT=3478 LEN=28 |
2020-03-04 07:05:16 |
| 182.150.22.233 | attackbots | W 5701,/var/log/auth.log,-,- |
2020-03-04 07:09:33 |
| 140.143.139.14 | attackbots | 5x Failed Password |
2020-03-04 06:31:16 |
| 189.213.96.192 | attack | Automatic report - Port Scan Attack |
2020-03-04 06:45:10 |
| 187.181.100.75 | attackspambots | firewall-block, port(s): 1433/tcp |
2020-03-04 06:39:59 |
| 50.127.71.5 | attackbotsspam | (sshd) Failed SSH login from 50.127.71.5 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 3 22:55:12 amsweb01 sshd[30432]: Invalid user teamcity from 50.127.71.5 port 3883 Mar 3 22:55:13 amsweb01 sshd[30432]: Failed password for invalid user teamcity from 50.127.71.5 port 3883 ssh2 Mar 3 23:02:40 amsweb01 sshd[32186]: Invalid user hadoop from 50.127.71.5 port 56852 Mar 3 23:02:43 amsweb01 sshd[32186]: Failed password for invalid user hadoop from 50.127.71.5 port 56852 ssh2 Mar 3 23:10:04 amsweb01 sshd[1697]: User dev from 50.127.71.5 not allowed because not listed in AllowUsers |
2020-03-04 06:47:22 |
| 106.12.85.28 | attackspambots | Mar 3 12:33:56 hpm sshd\[1303\]: Invalid user openfiler from 106.12.85.28 Mar 3 12:33:56 hpm sshd\[1303\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.85.28 Mar 3 12:33:58 hpm sshd\[1303\]: Failed password for invalid user openfiler from 106.12.85.28 port 46502 ssh2 Mar 3 12:42:23 hpm sshd\[2421\]: Invalid user crystal from 106.12.85.28 Mar 3 12:42:23 hpm sshd\[2421\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.85.28 |
2020-03-04 07:03:43 |
| 193.112.74.137 | attackspam | Mar 3 23:20:37 localhost sshd\[15262\]: Invalid user arkserver from 193.112.74.137 Mar 3 23:20:37 localhost sshd\[15262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.74.137 Mar 3 23:20:38 localhost sshd\[15262\]: Failed password for invalid user arkserver from 193.112.74.137 port 43014 ssh2 Mar 3 23:26:18 localhost sshd\[15508\]: Invalid user upload from 193.112.74.137 Mar 3 23:26:18 localhost sshd\[15508\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.74.137 ... |
2020-03-04 06:32:45 |
| 218.75.210.46 | attack | Mar 3 23:49:17 srv01 sshd[384]: Invalid user wpyan from 218.75.210.46 port 37509 Mar 3 23:49:17 srv01 sshd[384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.75.210.46 Mar 3 23:49:17 srv01 sshd[384]: Invalid user wpyan from 218.75.210.46 port 37509 Mar 3 23:49:19 srv01 sshd[384]: Failed password for invalid user wpyan from 218.75.210.46 port 37509 ssh2 Mar 3 23:54:32 srv01 sshd[621]: Invalid user wordpress from 218.75.210.46 port 19169 ... |
2020-03-04 07:10:20 |
| 181.25.159.189 | attack | firewall-block, port(s): 2323/tcp |
2020-03-04 06:49:20 |
| 120.92.34.241 | attackbotsspam | Mar 3 23:00:53 jane sshd[32235]: Failed password for daemon from 120.92.34.241 port 36812 ssh2 ... |
2020-03-04 06:30:32 |
| 92.118.38.58 | attackbotsspam | (smtpauth) Failed SMTP AUTH login from 92.118.38.58 (RO/Romania/ip-38-58.ZervDNS): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-03-03 23:45:33 login authenticator failed for (User) [92.118.38.58]: 535 Incorrect authentication data (set_id=peaches@forhosting.nl) 2020-03-03 23:45:41 login authenticator failed for (User) [92.118.38.58]: 535 Incorrect authentication data (set_id=peaches@forhosting.nl) 2020-03-03 23:46:04 login authenticator failed for (User) [92.118.38.58]: 535 Incorrect authentication data (set_id=peanut@forhosting.nl) 2020-03-03 23:46:11 login authenticator failed for (User) [92.118.38.58]: 535 Incorrect authentication data (set_id=peanut@forhosting.nl) 2020-03-03 23:46:34 login authenticator failed for (User) [92.118.38.58]: 535 Incorrect authentication data (set_id=peanutlinux@forhosting.nl) |
2020-03-04 06:47:01 |
| 222.186.173.215 | attackspambots | Mar 3 23:30:31 srv206 sshd[23246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.215 user=root Mar 3 23:30:33 srv206 sshd[23246]: Failed password for root from 222.186.173.215 port 62488 ssh2 ... |
2020-03-04 06:32:21 |
| 202.170.119.6 | attack | Portscan or hack attempt detected by psad/fwsnort |
2020-03-04 06:35:14 |