City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.49.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21630
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.49.92. IN A
;; AUTHORITY SECTION:
. 282 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 23:18:47 CST 2022
;; MSG SIZE rcvd: 105Host 92.49.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 92.49.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.99.238.213 | attack | Jul 4 04:08:11 debian-2gb-nbg1-2 kernel: \[16087111.880049\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=139.99.238.213 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=54321 PROTO=TCP SPT=60092 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-07-04 10:32:32 |
| 202.70.72.233 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-07-04 10:53:06 |
| 202.154.191.106 | attackspambots | VNC brute force attack detected by fail2ban |
2020-07-04 11:06:07 |
| 192.141.107.58 | attack | ... |
2020-07-04 11:03:58 |
| 52.66.197.212 | attackspambots | Jul 4 02:06:54 vps639187 sshd\[26938\]: Invalid user admin from 52.66.197.212 port 47832 Jul 4 02:06:54 vps639187 sshd\[26938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.66.197.212 Jul 4 02:06:56 vps639187 sshd\[26938\]: Failed password for invalid user admin from 52.66.197.212 port 47832 ssh2 ... |
2020-07-04 11:00:32 |
| 95.165.102.80 | attackbotsspam | Unauthorized connection attempt from IP address 95.165.102.80 on Port 445(SMB) |
2020-07-04 10:39:37 |
| 182.46.47.124 | attackbots | Honeypot attack, port: 81, PTR: PTR record not found |
2020-07-04 11:10:39 |
| 162.243.116.41 | attack | Jul 4 03:34:43 hosting sshd[17469]: Invalid user babu from 162.243.116.41 port 41914 ... |
2020-07-04 10:44:48 |
| 108.5.191.238 | attack | Unauthorized connection attempt from IP address 108.5.191.238 on Port 445(SMB) |
2020-07-04 10:35:17 |
| 220.135.110.211 | attackbots | Jul 4 01:15:14 debian-2gb-nbg1-2 kernel: \[16076735.207240\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=220.135.110.211 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=14864 PROTO=TCP SPT=46930 DPT=81 WINDOW=37746 RES=0x00 SYN URGP=0 |
2020-07-04 10:38:47 |
| 75.76.129.187 | attack | 20 attempts against mh-ssh on web |
2020-07-04 10:33:13 |
| 222.186.31.127 | attack | Jul 4 04:33:20 dbanaszewski sshd[12272]: Unable to negotiate with 222.186.31.127 port 24637: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Jul 4 04:38:46 dbanaszewski sshd[12319]: Unable to negotiate with 222.186.31.127 port 45642: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Jul 4 04:40:25 dbanaszewski sshd[12374]: Unable to negotiate with 222.186.31.127 port 27075: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] |
2020-07-04 10:51:48 |
| 114.7.164.170 | attack | Jul 4 04:32:51 buvik sshd[1279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.7.164.170 user=root Jul 4 04:32:53 buvik sshd[1279]: Failed password for root from 114.7.164.170 port 60476 ssh2 Jul 4 04:36:54 buvik sshd[1859]: Invalid user zmc from 114.7.164.170 ... |
2020-07-04 10:46:28 |
| 35.233.73.146 | attack | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-07-04 10:56:17 |
| 190.5.242.114 | attack | Jul 4 04:09:34 serwer sshd\[28863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.5.242.114 user=root Jul 4 04:09:35 serwer sshd\[28863\]: Failed password for root from 190.5.242.114 port 49537 ssh2 Jul 4 04:15:34 serwer sshd\[29497\]: Invalid user kelvin from 190.5.242.114 port 60642 Jul 4 04:15:34 serwer sshd\[29497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.5.242.114 ... |
2020-07-04 11:01:32 |