City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.49.109
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21027
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.49.109. IN A
;; AUTHORITY SECTION:
. 367 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400
;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 20 19:33:54 CST 2022
;; MSG SIZE rcvd: 106Host 109.49.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 109.49.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 192.166.218.25 | attack | SSH brute-force: detected 6 distinct usernames within a 24-hour window. |
2019-12-12 19:26:42 |
| 185.234.217.67 | attackbotsspam | Dec 12 07:24:49 relay postfix/smtpd\[11866\]: warning: unknown\[185.234.217.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 12 07:24:55 relay postfix/smtpd\[11853\]: warning: unknown\[185.234.217.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 12 07:25:05 relay postfix/smtpd\[10154\]: warning: unknown\[185.234.217.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 12 07:25:27 relay postfix/smtpd\[11866\]: warning: unknown\[185.234.217.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 12 07:25:33 relay postfix/smtpd\[20454\]: warning: unknown\[185.234.217.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-12-12 19:41:21 |
| 14.232.106.195 | attack | 1576131839 - 12/12/2019 07:23:59 Host: 14.232.106.195/14.232.106.195 Port: 445 TCP Blocked |
2019-12-12 19:19:24 |
| 117.48.208.71 | attackspam | Dec 12 09:26:44 pornomens sshd\[11182\]: Invalid user gin_kyo from 117.48.208.71 port 46580 Dec 12 09:26:44 pornomens sshd\[11182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.48.208.71 Dec 12 09:26:47 pornomens sshd\[11182\]: Failed password for invalid user gin_kyo from 117.48.208.71 port 46580 ssh2 ... |
2019-12-12 19:21:42 |
| 139.59.18.215 | attackbots | Dec 12 10:50:44 game-panel sshd[12071]: Failed password for dovecot from 139.59.18.215 port 60238 ssh2 Dec 12 10:56:44 game-panel sshd[12307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.18.215 Dec 12 10:56:45 game-panel sshd[12307]: Failed password for invalid user marquardt from 139.59.18.215 port 40302 ssh2 |
2019-12-12 19:14:00 |
| 222.186.52.86 | attack | Dec 12 12:18:14 * sshd[9761]: Failed password for root from 222.186.52.86 port 25946 ssh2 Dec 12 12:18:17 * sshd[9761]: Failed password for root from 222.186.52.86 port 25946 ssh2 |
2019-12-12 19:22:17 |
| 149.202.56.194 | attackspam | Dec 12 11:27:25 srv206 sshd[12193]: Invalid user kroenke from 149.202.56.194 Dec 12 11:27:25 srv206 sshd[12193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.ip-149-202-56.eu Dec 12 11:27:25 srv206 sshd[12193]: Invalid user kroenke from 149.202.56.194 Dec 12 11:27:28 srv206 sshd[12193]: Failed password for invalid user kroenke from 149.202.56.194 port 50330 ssh2 ... |
2019-12-12 19:40:42 |
| 211.220.27.191 | attackspam | Dec 11 23:43:07 hpm sshd\[12894\]: Invalid user monique from 211.220.27.191 Dec 11 23:43:07 hpm sshd\[12894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.220.27.191 Dec 11 23:43:09 hpm sshd\[12894\]: Failed password for invalid user monique from 211.220.27.191 port 48220 ssh2 Dec 11 23:50:02 hpm sshd\[13514\]: Invalid user solbakken from 211.220.27.191 Dec 11 23:50:02 hpm sshd\[13514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.220.27.191 |
2019-12-12 19:35:11 |
| 119.123.223.187 | attackbots | 1576131878 - 12/12/2019 07:24:38 Host: 119.123.223.187/119.123.223.187 Port: 445 TCP Blocked |
2019-12-12 19:10:59 |
| 81.133.73.161 | attackbots | Dec 12 06:25:55 *** sshd[25369]: Invalid user ocean from 81.133.73.161 |
2019-12-12 19:09:39 |
| 119.28.105.127 | attack | [ssh] SSH attack |
2019-12-12 19:28:53 |
| 184.105.247.251 | attack | BAD_IP |
2019-12-12 19:29:10 |
| 149.202.59.85 | attackspambots | Dec 12 11:22:48 tux-35-217 sshd\[8851\]: Invalid user dykstra from 149.202.59.85 port 35081 Dec 12 11:22:48 tux-35-217 sshd\[8851\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.59.85 Dec 12 11:22:50 tux-35-217 sshd\[8851\]: Failed password for invalid user dykstra from 149.202.59.85 port 35081 ssh2 Dec 12 11:28:00 tux-35-217 sshd\[8888\]: Invalid user dnslog from 149.202.59.85 port 39073 Dec 12 11:28:00 tux-35-217 sshd\[8888\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.59.85 ... |
2019-12-12 19:18:53 |
| 221.238.192.25 | attackbots | 2019-12-12T12:03:41.723198vps751288.ovh.net sshd\[4967\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.238.192.25 user=operator 2019-12-12T12:03:43.792767vps751288.ovh.net sshd\[4967\]: Failed password for operator from 221.238.192.25 port 44196 ssh2 2019-12-12T12:10:33.023813vps751288.ovh.net sshd\[5011\]: Invalid user backup from 221.238.192.25 port 36206 2019-12-12T12:10:33.033841vps751288.ovh.net sshd\[5011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.238.192.25 2019-12-12T12:10:35.665246vps751288.ovh.net sshd\[5011\]: Failed password for invalid user backup from 221.238.192.25 port 36206 ssh2 |
2019-12-12 19:17:28 |
| 51.68.220.249 | attackbots | Dec 12 05:43:22 ny01 sshd[1444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.220.249 Dec 12 05:43:25 ny01 sshd[1444]: Failed password for invalid user rpc from 51.68.220.249 port 59340 ssh2 Dec 12 05:52:24 ny01 sshd[2466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.220.249 |
2019-12-12 19:15:47 |