City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.31.137
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1721
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.31.137. IN A
;; AUTHORITY SECTION:
. 157 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 02:23:23 CST 2022
;; MSG SIZE rcvd: 106Host 137.31.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 137.31.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 192.99.166.243 | attack | Dec 6 23:33:19 pi sshd\[22505\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.166.243 Dec 6 23:33:21 pi sshd\[22505\]: Failed password for invalid user guest from 192.99.166.243 port 34622 ssh2 Dec 6 23:39:18 pi sshd\[22811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.166.243 user=root Dec 6 23:39:20 pi sshd\[22811\]: Failed password for root from 192.99.166.243 port 44764 ssh2 Dec 6 23:45:24 pi sshd\[23057\]: Invalid user ammelie from 192.99.166.243 port 54910 ... |
2019-12-07 07:47:55 |
| 111.230.140.177 | attack | Dec 6 18:21:07 TORMINT sshd\[8633\]: Invalid user alfonse from 111.230.140.177 Dec 6 18:21:07 TORMINT sshd\[8633\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.140.177 Dec 6 18:21:10 TORMINT sshd\[8633\]: Failed password for invalid user alfonse from 111.230.140.177 port 36110 ssh2 ... |
2019-12-07 07:36:03 |
| 132.145.16.205 | attackspam | SSH Brute Force, server-1 sshd[7411]: Failed password for invalid user test from 132.145.16.205 port 52790 ssh2 |
2019-12-07 07:53:09 |
| 86.149.50.6 | attackspam | Fail2Ban Ban Triggered |
2019-12-07 07:29:28 |
| 193.112.33.200 | attackbots | SSH Brute Force, server-1 sshd[5020]: Failed password for invalid user bezhan from 193.112.33.200 port 49714 ssh2 |
2019-12-07 08:02:38 |
| 142.93.163.77 | attackbots | Dec 7 00:10:28 sd-53420 sshd\[24091\]: User root from 142.93.163.77 not allowed because none of user's groups are listed in AllowGroups Dec 7 00:10:28 sd-53420 sshd\[24091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.163.77 user=root Dec 7 00:10:30 sd-53420 sshd\[24091\]: Failed password for invalid user root from 142.93.163.77 port 49486 ssh2 Dec 7 00:15:26 sd-53420 sshd\[24949\]: Invalid user jervell from 142.93.163.77 Dec 7 00:15:26 sd-53420 sshd\[24949\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.163.77 ... |
2019-12-07 07:24:43 |
| 202.123.177.18 | attack | SSH Brute Force, server-1 sshd[5860]: Failed password for invalid user rpc from 202.123.177.18 port 58796 ssh2 |
2019-12-07 08:02:10 |
| 46.101.254.248 | attack | Dec 6 23:56:03 nextcloud sshd\[31725\]: Invalid user operator from 46.101.254.248 Dec 6 23:56:03 nextcloud sshd\[31725\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.254.248 Dec 6 23:56:05 nextcloud sshd\[31725\]: Failed password for invalid user operator from 46.101.254.248 port 49250 ssh2 ... |
2019-12-07 07:26:25 |
| 180.178.134.190 | attack | port scan and connect, tcp 1433 (ms-sql-s) |
2019-12-07 07:45:26 |
| 61.177.172.128 | attackbotsspam | Dec 6 18:18:48 plusreed sshd[25548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root Dec 6 18:18:50 plusreed sshd[25548]: Failed password for root from 61.177.172.128 port 33202 ssh2 ... |
2019-12-07 07:36:20 |
| 45.171.198.189 | attackspambots | Dec 6 23:55:52 v22018076622670303 sshd\[18753\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.171.198.189 user=root Dec 6 23:55:54 v22018076622670303 sshd\[18753\]: Failed password for root from 45.171.198.189 port 49084 ssh2 Dec 6 23:55:56 v22018076622670303 sshd\[18753\]: Failed password for root from 45.171.198.189 port 49084 ssh2 ... |
2019-12-07 07:36:39 |
| 222.186.169.192 | attackspam | Dec 7 00:49:04 ns381471 sshd[18456]: Failed password for root from 222.186.169.192 port 36228 ssh2 Dec 7 00:49:16 ns381471 sshd[18456]: error: maximum authentication attempts exceeded for root from 222.186.169.192 port 36228 ssh2 [preauth] |
2019-12-07 07:51:27 |
| 152.136.86.234 | attack | 2019-12-06T23:26:34.485497shield sshd\[19346\]: Invalid user suniga from 152.136.86.234 port 45871 2019-12-06T23:26:34.491054shield sshd\[19346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.86.234 2019-12-06T23:26:36.363037shield sshd\[19346\]: Failed password for invalid user suniga from 152.136.86.234 port 45871 ssh2 2019-12-06T23:32:58.243491shield sshd\[21591\]: Invalid user springthorpe from 152.136.86.234 port 50825 2019-12-06T23:32:58.248148shield sshd\[21591\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.86.234 |
2019-12-07 07:41:16 |
| 60.48.64.193 | attackbotsspam | Dec 4 00:42:20 mail sshd[3975]: reveeclipse mapping checking getaddrinfo for trm02-home.tm.net.my [60.48.64.193] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 4 00:42:20 mail sshd[3975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.48.64.193 user=daemon Dec 4 00:42:23 mail sshd[3975]: Failed password for daemon from 60.48.64.193 port 56406 ssh2 Dec 4 00:42:24 mail sshd[3975]: Received disconnect from 60.48.64.193: 11: Bye Bye [preauth] Dec 4 01:01:02 mail sshd[4288]: reveeclipse mapping checking getaddrinfo for trm02-home.tm.net.my [60.48.64.193] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 4 01:01:02 mail sshd[4288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.48.64.193 user=dovecot Dec 4 01:01:04 mail sshd[4288]: Failed password for dovecot from 60.48.64.193 port 45521 ssh2 Dec 4 01:01:04 mail sshd[4288]: Received disconnect from 60.48.64.193: 11: Bye Bye [preauth] Dec 4 01:14........ ------------------------------- |
2019-12-07 07:41:37 |
| 202.83.172.249 | attackbots | Dec 7 01:50:25 server sshd\[7489\]: Invalid user escutin from 202.83.172.249 Dec 7 01:50:25 server sshd\[7489\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.83.172.249 Dec 7 01:50:27 server sshd\[7489\]: Failed password for invalid user escutin from 202.83.172.249 port 45664 ssh2 Dec 7 02:06:56 server sshd\[12041\]: Invalid user zookeeper from 202.83.172.249 Dec 7 02:06:56 server sshd\[12041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.83.172.249 ... |
2019-12-07 07:49:03 |