City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.42.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53584
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.42.72. IN A
;; AUTHORITY SECTION:
. 182 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 02:29:56 CST 2022
;; MSG SIZE rcvd: 105Host 72.42.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 72.42.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 131.221.104.168 | attack | Telnetd brute force attack detected by fail2ban |
2020-03-19 01:23:22 |
| 129.226.50.78 | attack | Mar 18 14:41:56 meumeu sshd[27441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.50.78 Mar 18 14:41:58 meumeu sshd[27441]: Failed password for invalid user test from 129.226.50.78 port 43436 ssh2 Mar 18 14:45:16 meumeu sshd[27846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.50.78 ... |
2020-03-19 01:05:51 |
| 200.89.174.209 | attackbotsspam | Mar 18 07:51:40 server1 sshd\[1639\]: Failed password for root from 200.89.174.209 port 38630 ssh2 Mar 18 07:55:27 server1 sshd\[2662\]: Invalid user fujimura from 200.89.174.209 Mar 18 07:55:27 server1 sshd\[2662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.89.174.209 Mar 18 07:55:28 server1 sshd\[2662\]: Failed password for invalid user fujimura from 200.89.174.209 port 35388 ssh2 Mar 18 07:59:16 server1 sshd\[4043\]: Invalid user liwenxuan from 200.89.174.209 Mar 18 07:59:16 server1 sshd\[4043\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.89.174.209 ... |
2020-03-19 00:27:32 |
| 68.64.228.251 | attack | Honeypot attack, port: 445, PTR: 68-64-228-251.static-transtelco.net. |
2020-03-19 00:55:40 |
| 123.125.237.67 | attack | Lines containing failures of 123.125.237.67 Mar 16 21:21:36 dns01 sshd[18930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.125.237.67 user=r.r Mar 16 21:21:38 dns01 sshd[18930]: Failed password for r.r from 123.125.237.67 port 11346 ssh2 Mar 16 21:21:38 dns01 sshd[18930]: Received disconnect from 123.125.237.67 port 11346:11: Bye Bye [preauth] Mar 16 21:21:38 dns01 sshd[18930]: Disconnected from authenticating user r.r 123.125.237.67 port 11346 [preauth] Mar 16 21:35:58 dns01 sshd[21726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.125.237.67 user=r.r Mar 16 21:36:00 dns01 sshd[21726]: Failed password for r.r from 123.125.237.67 port 10872 ssh2 Mar 16 21:36:00 dns01 sshd[21726]: Received disconnect from 123.125.237.67 port 10872:11: Bye Bye [preauth] Mar 16 21:36:00 dns01 sshd[21726]: Disconnected from authenticating user r.r 123.125.237.67 port 10872 [preauth] Mar 16 21:38:........ ------------------------------ |
2020-03-19 01:27:37 |
| 8.14.149.127 | attackspam | Mar 18 14:03:55 xeon sshd[31131]: Failed password for root from 8.14.149.127 port 65017 ssh2 |
2020-03-19 00:30:21 |
| 81.217.30.100 | attackspam | Automatic report - Port Scan Attack |
2020-03-19 01:11:52 |
| 61.153.247.165 | attackspam | Unauthorised access (Mar 18) SRC=61.153.247.165 LEN=48 TTL=114 ID=14475 DF TCP DPT=445 WINDOW=8192 SYN |
2020-03-19 01:17:39 |
| 106.51.3.214 | attackspam | Dec 30 07:59:08 woltan sshd[1586]: Failed password for invalid user helseth from 106.51.3.214 port 48208 ssh2 |
2020-03-19 01:04:12 |
| 167.99.63.181 | attack | Mar 18 13:58:04 ns382633 sshd\[15020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.63.181 user=root Mar 18 13:58:05 ns382633 sshd\[15020\]: Failed password for root from 167.99.63.181 port 38062 ssh2 Mar 18 14:05:38 ns382633 sshd\[16555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.63.181 user=root Mar 18 14:05:40 ns382633 sshd\[16555\]: Failed password for root from 167.99.63.181 port 35644 ssh2 Mar 18 14:09:53 ns382633 sshd\[17040\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.63.181 user=root |
2020-03-19 00:38:16 |
| 118.24.12.102 | attackbots | Mar 18 15:04:08 pkdns2 sshd\[50294\]: Invalid user adm from 118.24.12.102Mar 18 15:04:10 pkdns2 sshd\[50294\]: Failed password for invalid user adm from 118.24.12.102 port 43006 ssh2Mar 18 15:05:50 pkdns2 sshd\[50387\]: Invalid user qlserver from 118.24.12.102Mar 18 15:05:52 pkdns2 sshd\[50387\]: Failed password for invalid user qlserver from 118.24.12.102 port 34516 ssh2Mar 18 15:09:17 pkdns2 sshd\[50533\]: Invalid user tinkerware from 118.24.12.102Mar 18 15:09:19 pkdns2 sshd\[50533\]: Failed password for invalid user tinkerware from 118.24.12.102 port 45764 ssh2 ... |
2020-03-19 01:21:38 |
| 82.64.138.80 | attackbotsspam | Mar 18 13:09:43 marvibiene sshd[21410]: Invalid user postgres from 82.64.138.80 port 35834 Mar 18 13:09:43 marvibiene sshd[21410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.64.138.80 Mar 18 13:09:43 marvibiene sshd[21410]: Invalid user postgres from 82.64.138.80 port 35834 Mar 18 13:09:45 marvibiene sshd[21410]: Failed password for invalid user postgres from 82.64.138.80 port 35834 ssh2 ... |
2020-03-19 00:51:46 |
| 218.92.0.138 | attackspambots | Mar 18 18:01:18 SilenceServices sshd[25245]: Failed password for root from 218.92.0.138 port 27197 ssh2 Mar 18 18:01:22 SilenceServices sshd[25245]: Failed password for root from 218.92.0.138 port 27197 ssh2 Mar 18 18:01:28 SilenceServices sshd[25245]: Failed password for root from 218.92.0.138 port 27197 ssh2 Mar 18 18:01:35 SilenceServices sshd[25245]: error: maximum authentication attempts exceeded for root from 218.92.0.138 port 27197 ssh2 [preauth] |
2020-03-19 01:08:54 |
| 49.234.147.154 | attack | SSH brutforce |
2020-03-19 00:41:24 |
| 124.158.183.18 | attack | Mar 18 16:26:52 vps58358 sshd\[32171\]: Invalid user node from 124.158.183.18Mar 18 16:26:54 vps58358 sshd\[32171\]: Failed password for invalid user node from 124.158.183.18 port 55938 ssh2Mar 18 16:30:11 vps58358 sshd\[32205\]: Failed password for root from 124.158.183.18 port 46580 ssh2Mar 18 16:33:21 vps58358 sshd\[32222\]: Invalid user tmpu02 from 124.158.183.18Mar 18 16:33:23 vps58358 sshd\[32222\]: Failed password for invalid user tmpu02 from 124.158.183.18 port 37230 ssh2Mar 18 16:36:39 vps58358 sshd\[32241\]: Failed password for root from 124.158.183.18 port 56106 ssh2 ... |
2020-03-19 01:02:38 |