City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.41.39
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38584
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.41.39. IN A
;; AUTHORITY SECTION:
. 358 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 85 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 22:05:40 CST 2022
;; MSG SIZE rcvd: 105Host 39.41.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 39.41.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 5.135.182.141 | attackspam | Nov 10 12:16:57 SilenceServices sshd[17230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.182.141 Nov 10 12:17:00 SilenceServices sshd[17230]: Failed password for invalid user aguzzi from 5.135.182.141 port 57392 ssh2 Nov 10 12:21:53 SilenceServices sshd[18770]: Failed password for root from 5.135.182.141 port 39272 ssh2 |
2019-11-10 19:38:17 |
| 2001:19f0:6801:e06:5400:1ff:fed7:e7f7 | attack | xmlrpc attack |
2019-11-10 20:08:19 |
| 103.89.247.198 | attackbotsspam | Nov 10 07:05:35 mxgate1 postfix/postscreen[30118]: CONNECT from [103.89.247.198]:63661 to [176.31.12.44]:25 Nov 10 07:05:35 mxgate1 postfix/dnsblog[30119]: addr 103.89.247.198 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 10 07:05:35 mxgate1 postfix/dnsblog[30119]: addr 103.89.247.198 listed by domain zen.spamhaus.org as 127.0.0.3 Nov 10 07:05:35 mxgate1 postfix/dnsblog[30120]: addr 103.89.247.198 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 10 07:05:35 mxgate1 postfix/dnsblog[30123]: addr 103.89.247.198 listed by domain bl.spamcop.net as 127.0.0.2 Nov 10 07:05:35 mxgate1 postfix/dnsblog[30122]: addr 103.89.247.198 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 10 07:05:35 mxgate1 postfix/postscreen[30118]: PREGREET 23 after 0.22 from [103.89.247.198]:63661: EHLO [103.89.247.198] Nov 10 07:05:35 mxgate1 postfix/postscreen[30118]: DNSBL rank 5 for [103.89.247.198]:63661 Nov x@x Nov 10 07:05:36 mxgate1 postfix/postscreen[30118]: HANGUP after 1 from [1........ ------------------------------- |
2019-11-10 19:38:37 |
| 125.212.212.226 | attackspam | Nov 10 12:51:03 xeon sshd[35527]: Failed password for root from 125.212.212.226 port 52618 ssh2 |
2019-11-10 20:00:52 |
| 104.245.144.42 | attackbotsspam | (From doretha.gerard@msn.com) Want more visitors for your website? Receive hundreds of people who are ready to buy sent directly to your website. Boost your profits fast. Start seeing results in as little as 48 hours. For additional information reply to: michael4621gre@gmail.com |
2019-11-10 20:05:38 |
| 91.190.116.169 | attackbots | [portscan] Port scan |
2019-11-10 19:49:46 |
| 183.199.220.179 | attackspam | Automatic report - Port Scan Attack |
2019-11-10 20:07:01 |
| 167.114.55.84 | attackspam | Nov 10 09:11:01 SilenceServices sshd[23814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.55.84 Nov 10 09:11:03 SilenceServices sshd[23814]: Failed password for invalid user adcuser from 167.114.55.84 port 56754 ssh2 Nov 10 09:14:51 SilenceServices sshd[24960]: Failed password for root from 167.114.55.84 port 38118 ssh2 |
2019-11-10 20:14:01 |
| 193.242.211.140 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/193.242.211.140/ NL - 1H : (31) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : NL NAME ASN : ASN58329 IP : 193.242.211.140 CIDR : 193.242.210.0/23 PREFIX COUNT : 4 UNIQUE IP COUNT : 1280 ATTACKS DETECTED ASN58329 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-10 09:52:39 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-10 19:56:28 |
| 47.247.60.226 | attackspam | RDP Bruteforce |
2019-11-10 20:00:11 |
| 174.21.126.38 | attack | Nov 10 07:14:08 server02 sshd[12927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174-21-126-38.tukw.qwest.net Nov 10 07:14:08 server02 sshd[12925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174-21-126-38.tukw.qwest.net Nov 10 07:14:10 server02 sshd[12927]: Failed password for invalid user pi from 174.21.126.38 port 46502 ssh2 Nov 10 07:14:10 server02 sshd[12925]: Failed password for invalid user pi from 174.21.126.38 port 46500 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=174.21.126.38 |
2019-11-10 19:49:15 |
| 222.73.202.117 | attack | Nov 10 08:31:46 reporting6 sshd[17649]: User r.r from 222.73.202.117 not allowed because not listed in AllowUsers Nov 10 08:31:46 reporting6 sshd[17649]: Failed password for invalid user r.r from 222.73.202.117 port 57312 ssh2 Nov 10 08:57:16 reporting6 sshd[917]: User r.r from 222.73.202.117 not allowed because not listed in AllowUsers Nov 10 08:57:16 reporting6 sshd[917]: Failed password for invalid user r.r from 222.73.202.117 port 36578 ssh2 Nov 10 09:03:18 reporting6 sshd[4945]: Invalid user amslogin from 222.73.202.117 Nov 10 09:03:18 reporting6 sshd[4945]: Failed password for invalid user amslogin from 222.73.202.117 port 54835 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=222.73.202.117 |
2019-11-10 20:16:12 |
| 193.169.39.254 | attackbots | Nov 10 01:25:46 hanapaa sshd\[8246\]: Invalid user right from 193.169.39.254 Nov 10 01:25:46 hanapaa sshd\[8246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=netup.yugt.ru Nov 10 01:25:47 hanapaa sshd\[8246\]: Failed password for invalid user right from 193.169.39.254 port 34534 ssh2 Nov 10 01:29:44 hanapaa sshd\[8530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=netup.yugt.ru user=root Nov 10 01:29:47 hanapaa sshd\[8530\]: Failed password for root from 193.169.39.254 port 42390 ssh2 |
2019-11-10 19:39:44 |
| 165.227.41.202 | attackspambots | Nov 10 09:12:02 legacy sshd[16323]: Failed password for root from 165.227.41.202 port 47000 ssh2 Nov 10 09:15:20 legacy sshd[16465]: Failed password for root from 165.227.41.202 port 55516 ssh2 ... |
2019-11-10 19:54:48 |
| 47.103.36.53 | attackspam | (Nov 10) LEN=40 TTL=45 ID=52717 TCP DPT=8080 WINDOW=3381 SYN (Nov 9) LEN=40 TTL=45 ID=15384 TCP DPT=8080 WINDOW=31033 SYN (Nov 9) LEN=40 TTL=45 ID=15227 TCP DPT=8080 WINDOW=31033 SYN (Nov 9) LEN=40 TTL=45 ID=57118 TCP DPT=8080 WINDOW=59605 SYN (Nov 8) LEN=40 TTL=45 ID=38814 TCP DPT=8080 WINDOW=15371 SYN (Nov 7) LEN=40 TTL=45 ID=17317 TCP DPT=8080 WINDOW=15371 SYN (Nov 7) LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=51569 TCP DPT=8080 WINDOW=15371 SYN (Nov 6) LEN=40 TTL=44 ID=31932 TCP DPT=8080 WINDOW=15371 SYN (Nov 6) LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=53817 TCP DPT=8080 WINDOW=3381 SYN (Nov 6) LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=4809 TCP DPT=8080 WINDOW=15371 SYN (Nov 5) LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=47885 TCP DPT=8080 WINDOW=31033 SYN (Nov 5) LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=27517 TCP DPT=8080 WINDOW=3381 SYN (Nov 5) LEN=40 TOS=0x10 PREC=0x40 TTL=44 ID=22050 TCP DPT=8080 WINDOW=31033 SYN (Nov 5) LEN=40 TOS=0x10 PREC=0x40 TTL=44 I... |
2019-11-10 20:02:56 |