City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.34.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4079
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.34.11. IN A
;; AUTHORITY SECTION:
. 207 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 20:56:35 CST 2022
;; MSG SIZE rcvd: 105Host 11.34.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 11.34.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 189.125.93.48 | attackbotsspam | Invalid user caspar from 189.125.93.48 port 54068 |
2020-07-28 18:03:43 |
| 111.229.102.53 | attackspambots | Jul 28 02:57:51 firewall sshd[16255]: Invalid user hive from 111.229.102.53 Jul 28 02:57:53 firewall sshd[16255]: Failed password for invalid user hive from 111.229.102.53 port 58342 ssh2 Jul 28 03:03:23 firewall sshd[16374]: Invalid user srs from 111.229.102.53 ... |
2020-07-28 18:16:20 |
| 200.236.119.142 | attackspambots | Automatic report - Port Scan Attack |
2020-07-28 18:20:40 |
| 177.154.77.218 | attackspambots | Jul 28 05:38:16 mail.srvfarm.net postfix/smtps/smtpd[2356781]: warning: unknown[177.154.77.218]: SASL PLAIN authentication failed: Jul 28 05:38:16 mail.srvfarm.net postfix/smtps/smtpd[2356781]: lost connection after AUTH from unknown[177.154.77.218] Jul 28 05:40:13 mail.srvfarm.net postfix/smtpd[2353403]: warning: unknown[177.154.77.218]: SASL PLAIN authentication failed: Jul 28 05:40:14 mail.srvfarm.net postfix/smtpd[2353403]: lost connection after AUTH from unknown[177.154.77.218] Jul 28 05:43:34 mail.srvfarm.net postfix/smtpd[2354259]: warning: unknown[177.154.77.218]: SASL PLAIN authentication failed: |
2020-07-28 17:44:19 |
| 112.91.185.78 | attackbotsspam | Unauthorised access (Jul 28) SRC=112.91.185.78 LEN=44 TTL=237 ID=48531 TCP DPT=1433 WINDOW=1024 SYN |
2020-07-28 17:58:30 |
| 179.127.229.213 | attackspambots | Jul 28 05:41:14 mail.srvfarm.net postfix/smtps/smtpd[2355528]: warning: unknown[179.127.229.213]: SASL PLAIN authentication failed: Jul 28 05:41:15 mail.srvfarm.net postfix/smtps/smtpd[2355528]: lost connection after AUTH from unknown[179.127.229.213] Jul 28 05:41:51 mail.srvfarm.net postfix/smtps/smtpd[2358056]: warning: unknown[179.127.229.213]: SASL PLAIN authentication failed: Jul 28 05:41:52 mail.srvfarm.net postfix/smtps/smtpd[2358056]: lost connection after AUTH from unknown[179.127.229.213] Jul 28 05:46:30 mail.srvfarm.net postfix/smtps/smtpd[2358056]: warning: unknown[179.127.229.213]: SASL PLAIN authentication failed: |
2020-07-28 17:43:17 |
| 49.235.115.4 | attackbotsspam | Jul 28 11:25:45 ns382633 sshd\[28794\]: Invalid user wcf from 49.235.115.4 port 45606 Jul 28 11:25:45 ns382633 sshd\[28794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.115.4 Jul 28 11:25:47 ns382633 sshd\[28794\]: Failed password for invalid user wcf from 49.235.115.4 port 45606 ssh2 Jul 28 11:33:34 ns382633 sshd\[30099\]: Invalid user mchen from 49.235.115.4 port 36882 Jul 28 11:33:34 ns382633 sshd\[30099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.115.4 |
2020-07-28 18:01:40 |
| 172.82.230.3 | attackspam | Jul 28 08:56:49 mail.srvfarm.net postfix/smtpd[2422824]: lost connection after STARTTLS from r3.news.eu.rvca.com[172.82.230.3] Jul 28 08:58:54 mail.srvfarm.net postfix/smtpd[2422836]: lost connection after STARTTLS from r3.news.eu.rvca.com[172.82.230.3] Jul 28 08:59:58 mail.srvfarm.net postfix/smtpd[2422828]: lost connection after STARTTLS from r3.news.eu.rvca.com[172.82.230.3] Jul 28 09:01:09 mail.srvfarm.net postfix/smtpd[2429154]: lost connection after STARTTLS from r3.news.eu.rvca.com[172.82.230.3] Jul 28 09:02:16 mail.srvfarm.net postfix/smtpd[2438844]: lost connection after STARTTLS from r3.news.eu.rvca.com[172.82.230.3] |
2020-07-28 17:46:47 |
| 62.234.59.145 | attackspambots | B: Abusive ssh attack |
2020-07-28 18:13:36 |
| 185.39.10.54 | attack | Jul 28 05:50:59 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=185.39.10.54 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=31252 PROTO=TCP SPT=48258 DPT=3926 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 28 05:50:59 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=185.39.10.54 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=36230 PROTO=TCP SPT=48258 DPT=64063 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 28 05:50:59 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=185.39.10.54 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=63097 PROTO=TCP SPT=48258 DPT=9154 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 28 05:51:00 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=185.39.10.54 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=34648 PROTO=TCP SPT=48258 DPT=35287 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 28 05: ... |
2020-07-28 18:13:55 |
| 103.197.207.47 | attackspambots | xmlrpc attack |
2020-07-28 18:00:21 |
| 144.64.3.101 | attack | fail2ban -- 144.64.3.101 ... |
2020-07-28 18:04:26 |
| 212.70.149.19 | attack | Jul 28 11:49:09 srv01 postfix/smtpd\[19138\]: warning: unknown\[212.70.149.19\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 28 11:49:17 srv01 postfix/smtpd\[14691\]: warning: unknown\[212.70.149.19\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 28 11:49:18 srv01 postfix/smtpd\[19292\]: warning: unknown\[212.70.149.19\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 28 11:49:22 srv01 postfix/smtpd\[19138\]: warning: unknown\[212.70.149.19\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 28 11:49:39 srv01 postfix/smtpd\[14691\]: warning: unknown\[212.70.149.19\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-07-28 17:51:34 |
| 113.190.232.244 | attackbotsspam | Dovecot Invalid User Login Attempt. |
2020-07-28 17:53:46 |
| 65.49.20.66 | attack | ET CINS Active Threat Intelligence Poor Reputation IP group 64 - port: 22 proto: tcp cat: Misc Attackbytes: 60 |
2020-07-28 18:14:27 |