City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.38.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46920
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.38.138. IN A
;; AUTHORITY SECTION:
. 389 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400
;; Query time: 140 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 08:38:29 CST 2022
;; MSG SIZE rcvd: 106Host 138.38.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 138.38.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 182.61.178.66 | attackspambots | Lines containing failures of 182.61.178.66 Apr 13 23:19:27 penfold postfix/smtpd[10508]: connect from unknown[182.61.178.66] Apr x@x Apr 13 23:19:29 penfold postfix/smtpd[10508]: disconnect from unknown[182.61.178.66] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4 Apr 13 23:19:34 penfold postfix/smtpd[11203]: connect from unknown[182.61.178.66] Apr x@x Apr 13 23:19:35 penfold postfix/smtpd[11203]: disconnect from unknown[182.61.178.66] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4 Apr 13 23:19:43 penfold postfix/smtpd[11205]: connect from unknown[182.61.178.66] Apr x@x Apr 13 23:19:44 penfold postfix/smtpd[11205]: disconnect from unknown[182.61.178.66] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4 Apr 13 23:19:48 penfold postfix/smtpd[11191]: connect from unknown[182.61.178.66] Apr x@x Apr 13 23:19:49 penfold postfix/smtpd[11191]: disconnect from unknown[182.61.178.66] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4 Apr 13 23:19:53 penfold postfix/smtpd[9043]: c........ ------------------------------ |
2020-04-14 18:52:45 |
| 203.190.55.203 | attackbotsspam | prod6 ... |
2020-04-14 19:15:57 |
| 186.4.188.3 | attackspam | (sshd) Failed SSH login from 186.4.188.3 (EC/Ecuador/host-186-4-188-3.netlife.ec): 5 in the last 3600 secs |
2020-04-14 18:53:33 |
| 182.75.77.38 | attackspam | $f2bV_matches |
2020-04-14 19:24:40 |
| 37.228.132.230 | attackspam | Apr 14 11:53:38 vps sshd[7897]: Failed password for root from 37.228.132.230 port 37772 ssh2 Apr 14 12:16:59 vps sshd[9453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.228.132.230 Apr 14 12:17:00 vps sshd[9453]: Failed password for invalid user sinus from 37.228.132.230 port 42938 ssh2 ... |
2020-04-14 19:17:46 |
| 67.205.144.244 | attackbotsspam | firewall-block, port(s): 12391/tcp |
2020-04-14 19:14:03 |
| 142.93.60.53 | attack | Apr 14 08:38:51 localhost sshd[112633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.60.53 user=root Apr 14 08:38:53 localhost sshd[112633]: Failed password for root from 142.93.60.53 port 39354 ssh2 Apr 14 08:42:21 localhost sshd[113111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.60.53 user=root Apr 14 08:42:23 localhost sshd[113111]: Failed password for root from 142.93.60.53 port 46994 ssh2 Apr 14 08:45:58 localhost sshd[113613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.60.53 user=root Apr 14 08:46:00 localhost sshd[113613]: Failed password for root from 142.93.60.53 port 54628 ssh2 ... |
2020-04-14 19:26:32 |
| 113.176.89.22 | attackbotsspam | 1586836846 - 04/14/2020 06:00:46 Host: 113.176.89.22/113.176.89.22 Port: 445 TCP Blocked |
2020-04-14 19:08:40 |
| 178.62.248.61 | attackspam | Apr 14 10:05:14 Enigma sshd[30523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.248.61 Apr 14 10:05:14 Enigma sshd[30523]: Invalid user www from 178.62.248.61 port 33098 Apr 14 10:05:15 Enigma sshd[30523]: Failed password for invalid user www from 178.62.248.61 port 33098 ssh2 Apr 14 10:08:52 Enigma sshd[30668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.248.61 user=root Apr 14 10:08:54 Enigma sshd[30668]: Failed password for root from 178.62.248.61 port 40276 ssh2 |
2020-04-14 18:49:38 |
| 89.248.169.12 | attack | firewall-block, port(s): 993/tcp |
2020-04-14 19:08:54 |
| 202.147.193.8 | attack | 1586837141 - 04/14/2020 06:05:41 Host: 202.147.193.8/202.147.193.8 Port: 445 TCP Blocked |
2020-04-14 18:56:46 |
| 223.166.32.249 | attack | 223.166.32.249 - - [14/Apr/2020:07:44:51 +0300] "GET /HNAP1/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1" 223.166.32.249 - - [14/Apr/2020:07:44:52 +0300] "GET /sqlite/main.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1" 223.166.32.249 - - [14/Apr/2020:07:44:53 +0300] "GET /sqlitemanager/main.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1" ... |
2020-04-14 18:51:00 |
| 113.193.243.35 | attackspam | 2020-04-14T05:08:02.204570linuxbox-skyline sshd[113878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.193.243.35 user=root 2020-04-14T05:08:04.456315linuxbox-skyline sshd[113878]: Failed password for root from 113.193.243.35 port 56550 ssh2 ... |
2020-04-14 19:18:28 |
| 60.246.3.35 | attackspam | IMAP brute force ... |
2020-04-14 19:11:09 |
| 190.158.201.33 | attackbotsspam | Apr 14 06:39:46 NPSTNNYC01T sshd[21083]: Failed password for root from 190.158.201.33 port 39280 ssh2 Apr 14 06:43:45 NPSTNNYC01T sshd[21425]: Failed password for root from 190.158.201.33 port 43285 ssh2 ... |
2020-04-14 18:51:45 |