City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.34.194
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57771
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.34.194. IN A
;; AUTHORITY SECTION:
. 249 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 20:59:05 CST 2022
;; MSG SIZE rcvd: 106Host 194.34.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 194.34.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 111.231.69.203 | attackspambots | GET /administrator/index.php user: admin |
2020-01-24 05:49:24 |
| 51.144.153.216 | attackbotsspam | RDP Bruteforce |
2020-01-24 06:23:00 |
| 14.182.207.227 | attackspam | Unauthorized connection attempt from IP address 14.182.207.227 on Port 445(SMB) |
2020-01-24 06:06:17 |
| 131.72.222.167 | attack | unauthorized connection attempt |
2020-01-24 05:44:29 |
| 41.138.90.77 | attack | my email account was hacked two times the last 4 weeks by IP 41.138.90.77 and used for sending over 1.500 spams atound the world ! |
2020-01-24 05:50:24 |
| 142.93.48.216 | attackbots | xmlrpc attack |
2020-01-24 06:00:00 |
| 185.40.4.94 | attackbotsspam | Port scan on 17 port(s): 139 300 555 810 1030 2226 2401 3221 7011 7790 8077 8081 8158 8335 11180 33382 55550 |
2020-01-24 06:25:00 |
| 89.36.211.23 | attack | Request to REST API ///wp-json/wp/v2/users/ |
2020-01-24 05:54:30 |
| 116.246.21.23 | attack | Unauthorized connection attempt detected from IP address 116.246.21.23 to port 2220 [J] |
2020-01-24 06:00:23 |
| 180.50.107.194 | attackspam | Unauthorized connection attempt from IP address 180.50.107.194 on Port 445(SMB) |
2020-01-24 06:09:12 |
| 81.23.112.14 | attackbots | Unauthorized connection attempt from IP address 81.23.112.14 on Port 445(SMB) |
2020-01-24 06:04:45 |
| 175.204.125.198 | attackbots | Jan 23 16:01:28 IngegnereFirenze sshd[30644]: Failed password for invalid user admin from 175.204.125.198 port 57044 ssh2 ... |
2020-01-24 06:22:03 |
| 59.61.166.228 | attack | Lines containing failures of 59.61.166.228 Jan 23 17:01:36 kmh-vmh-003-fsn07 sshd[6931]: Invalid user kdj from 59.61.166.228 port 33470 Jan 23 17:01:36 kmh-vmh-003-fsn07 sshd[6931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.61.166.228 Jan 23 17:01:38 kmh-vmh-003-fsn07 sshd[6931]: Failed password for invalid user kdj from 59.61.166.228 port 33470 ssh2 Jan 23 17:01:39 kmh-vmh-003-fsn07 sshd[6931]: Received disconnect from 59.61.166.228 port 33470:11: Bye Bye [preauth] Jan 23 17:01:39 kmh-vmh-003-fsn07 sshd[6931]: Disconnected from invalid user kdj 59.61.166.228 port 33470 [preauth] Jan 23 17:04:35 kmh-vmh-003-fsn07 sshd[16087]: Invalid user user from 59.61.166.228 port 57788 Jan 23 17:04:35 kmh-vmh-003-fsn07 sshd[16087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.61.166.228 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=59.61.166.228 |
2020-01-24 05:42:50 |
| 91.226.116.212 | attack | Unauthorized connection attempt from IP address 91.226.116.212 on Port 445(SMB) |
2020-01-24 06:17:44 |
| 85.228.220.80 | attackbotsspam | (imapd) Failed IMAP login from 85.228.220.80 (SE/Sweden/ua-85-228-220-80.bbcust.telenor.se): 1 in the last 3600 secs |
2020-01-24 06:03:54 |