City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.41.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41131
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.41.121. IN A
;; AUTHORITY SECTION:
. 381 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 02:28:57 CST 2022
;; MSG SIZE rcvd: 106Host 121.41.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 121.41.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 111.231.71.53 | attackbotsspam | Aug 31 23:23:22 srv-ubuntu-dev3 sshd[4339]: Invalid user domain from 111.231.71.53 Aug 31 23:23:22 srv-ubuntu-dev3 sshd[4339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.71.53 Aug 31 23:23:22 srv-ubuntu-dev3 sshd[4339]: Invalid user domain from 111.231.71.53 Aug 31 23:23:23 srv-ubuntu-dev3 sshd[4339]: Failed password for invalid user domain from 111.231.71.53 port 48602 ssh2 Aug 31 23:27:30 srv-ubuntu-dev3 sshd[4728]: Invalid user svn from 111.231.71.53 Aug 31 23:27:30 srv-ubuntu-dev3 sshd[4728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.71.53 Aug 31 23:27:30 srv-ubuntu-dev3 sshd[4728]: Invalid user svn from 111.231.71.53 Aug 31 23:27:32 srv-ubuntu-dev3 sshd[4728]: Failed password for invalid user svn from 111.231.71.53 port 47730 ssh2 Aug 31 23:31:31 srv-ubuntu-dev3 sshd[5216]: Invalid user uat from 111.231.71.53 ... |
2020-09-01 07:00:47 |
| 106.13.233.83 | attack | Aug 31 18:29:08 george sshd[10875]: Invalid user test1 from 106.13.233.83 port 40510 Aug 31 18:29:08 george sshd[10875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.233.83 Aug 31 18:29:10 george sshd[10875]: Failed password for invalid user test1 from 106.13.233.83 port 40510 ssh2 Aug 31 18:32:49 george sshd[10939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.233.83 user=root Aug 31 18:32:51 george sshd[10939]: Failed password for root from 106.13.233.83 port 36558 ssh2 ... |
2020-09-01 07:16:33 |
| 49.83.241.166 | attack | Aug 31 22:10:05 host sshd[30635]: Invalid user netscreen from 49.83.241.166 port 47448 Aug 31 22:10:06 host sshd[30637]: Invalid user misp from 49.83.241.166 port 48062 Aug 31 22:10:12 host sshd[30641]: Invalid user admin from 49.83.241.166 port 49647 Aug 31 22:10:15 host sshd[30643]: Invalid user admin from 49.83.241.166 port 50835 Aug 31 22:10:17 host sshd[30645]: Invalid user admin from 49.83.241.166 port 51992 Aug 31 22:10:19 host sshd[30647]: Invalid user admin from 49.83.241.166 port 52859 Aug 31 22:10:21 host sshd[30649]: Invalid user admin from 49.83.241.166 port 53769 Au ... |
2020-09-01 07:18:39 |
| 150.158.113.106 | attackspambots | Aug 31 23:58:48 ajax sshd[9086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.158.113.106 Aug 31 23:58:50 ajax sshd[9086]: Failed password for invalid user dzh from 150.158.113.106 port 43136 ssh2 |
2020-09-01 07:23:16 |
| 45.55.189.252 | attack | Sep 1 00:45:00 server sshd[9613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.189.252 Sep 1 00:45:00 server sshd[9613]: Invalid user magno from 45.55.189.252 port 49154 Sep 1 00:45:02 server sshd[9613]: Failed password for invalid user magno from 45.55.189.252 port 49154 ssh2 Sep 1 00:56:23 server sshd[16184]: User root from 45.55.189.252 not allowed because listed in DenyUsers Sep 1 00:56:23 server sshd[16184]: User root from 45.55.189.252 not allowed because listed in DenyUsers ... |
2020-09-01 07:19:52 |
| 194.61.54.112 | attackbots | Tried our host z. |
2020-09-01 06:53:15 |
| 139.162.27.225 | attackspam | 139.162.27.225 |
2020-09-01 07:22:35 |
| 111.231.18.208 | attackspambots | Aug 31 22:30:24 instance-2 sshd[11674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.18.208 Aug 31 22:30:26 instance-2 sshd[11674]: Failed password for invalid user admin from 111.231.18.208 port 55974 ssh2 Aug 31 22:34:32 instance-2 sshd[11703]: Failed password for root from 111.231.18.208 port 33676 ssh2 |
2020-09-01 06:57:25 |
| 117.50.99.197 | attackspam | Aug 31 22:52:05 plex-server sshd[2254147]: Invalid user contact from 117.50.99.197 port 38776 Aug 31 22:52:05 plex-server sshd[2254147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.99.197 Aug 31 22:52:05 plex-server sshd[2254147]: Invalid user contact from 117.50.99.197 port 38776 Aug 31 22:52:06 plex-server sshd[2254147]: Failed password for invalid user contact from 117.50.99.197 port 38776 ssh2 Aug 31 22:55:41 plex-server sshd[2255979]: Invalid user ka from 117.50.99.197 port 14812 ... |
2020-09-01 07:04:11 |
| 195.54.160.183 | attack | 2020-08-31T17:16:55.252926correo.[domain] sshd[36269]: Invalid user scan from 195.54.160.183 port 48193 2020-08-31T17:16:57.535030correo.[domain] sshd[36269]: Failed password for invalid user scan from 195.54.160.183 port 48193 ssh2 2020-08-31T17:16:58.206837correo.[domain] sshd[36271]: Invalid user admin from 195.54.160.183 port 55407 ... |
2020-09-01 07:08:16 |
| 140.148.248.8 | attackbots | 20/8/31@18:22:11: FAIL: Alarm-Network address from=140.148.248.8 ... |
2020-09-01 07:03:54 |
| 186.93.240.101 | attackbotsspam | Unauthorised access (Sep 1) SRC=186.93.240.101 LEN=48 TTL=113 ID=6020 DF TCP DPT=445 WINDOW=8192 SYN |
2020-09-01 07:10:54 |
| 138.255.148.35 | attackbotsspam | Sep 1 00:42:07 eventyay sshd[845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.255.148.35 Sep 1 00:42:09 eventyay sshd[845]: Failed password for invalid user simon from 138.255.148.35 port 55782 ssh2 Sep 1 00:44:15 eventyay sshd[930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.255.148.35 ... |
2020-09-01 07:02:34 |
| 91.121.183.9 | attack | 91.121.183.9 - - [31/Aug/2020:23:57:10 +0100] "POST /wp-login.php HTTP/1.1" 200 5957 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 91.121.183.9 - - [01/Sep/2020:00:00:11 +0100] "POST /wp-login.php HTTP/1.1" 200 5950 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 91.121.183.9 - - [01/Sep/2020:00:03:13 +0100] "POST /wp-login.php HTTP/1.1" 200 5957 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" ... |
2020-09-01 07:07:27 |
| 111.229.19.221 | attackspam | $f2bV_matches |
2020-09-01 07:02:56 |