City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.42.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33455
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.42.57. IN A
;; AUTHORITY SECTION:
. 185 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 02:29:53 CST 2022
;; MSG SIZE rcvd: 105Host 57.42.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 57.42.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.85.42.173 | attackbots | Jul 31 09:24:44 server sshd[26598]: Failed none for root from 112.85.42.173 port 22473 ssh2 Jul 31 09:24:46 server sshd[26598]: Failed password for root from 112.85.42.173 port 22473 ssh2 Jul 31 09:24:51 server sshd[26598]: Failed password for root from 112.85.42.173 port 22473 ssh2 |
2020-07-31 15:32:20 |
| 67.207.88.180 | attackspambots | Unauthorized connection attempt detected from IP address 67.207.88.180 to port 14240 |
2020-07-31 15:02:46 |
| 58.54.249.210 | attack | Jul 30 20:51:09 mockhub sshd[8998]: Failed password for root from 58.54.249.210 port 55788 ssh2 ... |
2020-07-31 15:27:08 |
| 189.213.225.226 | attackspambots | Icarus honeypot on github |
2020-07-31 15:03:19 |
| 58.229.114.170 | attackspambots | Jul 31 05:58:41 vps333114 sshd[19847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.229.114.170 user=root Jul 31 05:58:43 vps333114 sshd[19847]: Failed password for root from 58.229.114.170 port 41722 ssh2 ... |
2020-07-31 15:15:51 |
| 134.175.224.105 | attackbots | Invalid user shaohua from 134.175.224.105 port 45252 |
2020-07-31 15:29:03 |
| 132.232.14.159 | attack | Jul 31 08:50:44 buvik sshd[7161]: Failed password for root from 132.232.14.159 port 51436 ssh2 Jul 31 08:53:51 buvik sshd[7536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.14.159 user=root Jul 31 08:53:53 buvik sshd[7536]: Failed password for root from 132.232.14.159 port 52492 ssh2 ... |
2020-07-31 15:10:27 |
| 178.32.148.3 | attack |
|
2020-07-31 14:58:04 |
| 205.209.166.106 | attack | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: tcp cat: Potentially Bad Trafficbytes: 62 |
2020-07-31 15:18:26 |
| 212.98.122.91 | attack | IP: 212.98.122.91
Ports affected
Simple Mail Transfer (25)
Abuse Confidence rating 100%
Found in DNSBL('s)
ASN Details
AS42525 GlobalConnect A/S
Denmark (DK)
CIDR 212.98.64.0/18
Log Date: 31/07/2020 5:03:03 AM UTC |
2020-07-31 15:01:49 |
| 106.13.82.54 | attackbotsspam | 2020-07-31T07:23:29.812926shield sshd\[18028\]: Invalid user nouri from 106.13.82.54 port 52990 2020-07-31T07:23:29.822047shield sshd\[18028\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.82.54 2020-07-31T07:23:32.041004shield sshd\[18028\]: Failed password for invalid user nouri from 106.13.82.54 port 52990 ssh2 2020-07-31T07:29:05.042198shield sshd\[19130\]: Invalid user adgjmptw1 from 106.13.82.54 port 60584 2020-07-31T07:29:05.050616shield sshd\[19130\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.82.54 |
2020-07-31 15:34:58 |
| 92.53.96.121 | attackspambots | Fail2Ban Ban Triggered |
2020-07-31 15:39:58 |
| 175.207.12.238 | attackbots | Bruteforce detected by fail2ban |
2020-07-31 14:59:13 |
| 51.103.49.40 | attackspambots | Unauthorized connection attempt detected from IP address 51.103.49.40 to port 22 |
2020-07-31 15:23:20 |
| 176.122.250.34 | attack | Telnet Honeypot -> Telnet Bruteforce / Login |
2020-07-31 15:14:36 |