City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.5.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50825
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.5.104. IN A
;; AUTHORITY SECTION:
. 236 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 23:19:11 CST 2022
;; MSG SIZE rcvd: 105Host 104.5.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 104.5.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.202.3.55 | attackspam | 1599324634 - 09/05/2020 18:50:34 Host: 112.202.3.55/112.202.3.55 Port: 445 TCP Blocked |
2020-09-06 14:07:29 |
| 61.1.69.223 | attackbotsspam | (sshd) Failed SSH login from 61.1.69.223 (IN/India/static.bb.klm.61.1.69.223.bsnl.in): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 5 19:17:21 server sshd[8647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.1.69.223 user=root Sep 5 19:17:24 server sshd[8647]: Failed password for root from 61.1.69.223 port 45344 ssh2 Sep 5 19:26:54 server sshd[11581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.1.69.223 user=root Sep 5 19:26:56 server sshd[11581]: Failed password for root from 61.1.69.223 port 44806 ssh2 Sep 5 19:43:09 server sshd[16524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.1.69.223 user=root |
2020-09-06 13:59:41 |
| 81.170.148.27 | attackspam | DATE:2020-09-05 18:51:22, IP:81.170.148.27, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2020-09-06 13:48:10 |
| 148.72.209.9 | attackspambots | 148.72.209.9 - - [06/Sep/2020:07:34:33 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.72.209.9 - - [06/Sep/2020:07:34:36 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.72.209.9 - - [06/Sep/2020:07:34:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-06 13:36:52 |
| 103.205.5.158 | attackspam | SSH auth scanning - multiple failed logins |
2020-09-06 13:58:07 |
| 194.35.48.67 | attackbots | Sep 6 06:14:22 sshgateway sshd\[21308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=rz.iptv2022.com user=root Sep 6 06:14:24 sshgateway sshd\[21308\]: Failed password for root from 194.35.48.67 port 37336 ssh2 Sep 6 06:16:05 sshgateway sshd\[21817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=rz.iptv2022.com user=root |
2020-09-06 14:13:57 |
| 222.186.175.212 | attackbotsspam | 2020-09-06T08:33:14.257210lavrinenko.info sshd[20185]: Failed password for root from 222.186.175.212 port 37214 ssh2 2020-09-06T08:33:21.172255lavrinenko.info sshd[20185]: Failed password for root from 222.186.175.212 port 37214 ssh2 2020-09-06T08:33:25.807159lavrinenko.info sshd[20185]: Failed password for root from 222.186.175.212 port 37214 ssh2 2020-09-06T08:33:28.962217lavrinenko.info sshd[20185]: Failed password for root from 222.186.175.212 port 37214 ssh2 2020-09-06T08:33:32.646621lavrinenko.info sshd[20185]: Failed password for root from 222.186.175.212 port 37214 ssh2 ... |
2020-09-06 13:44:47 |
| 209.97.130.11 | attack | Sep 5 21:23:48 Host-KLAX-C sshd[24149]: Disconnected from invalid user root 209.97.130.11 port 59146 [preauth] ... |
2020-09-06 13:34:57 |
| 51.77.200.139 | attackbots | Sep 6 07:31:06 root sshd[16052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.200.139 ... |
2020-09-06 14:15:45 |
| 83.240.242.218 | attackbots | SSH auth scanning - multiple failed logins |
2020-09-06 14:01:47 |
| 220.84.248.58 | attack | 2020-09-06T06:03:12.808584shield sshd\[3085\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.84.248.58 user=root 2020-09-06T06:03:14.697075shield sshd\[3085\]: Failed password for root from 220.84.248.58 port 52756 ssh2 2020-09-06T06:07:29.486329shield sshd\[3527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.84.248.58 user=root 2020-09-06T06:07:31.334360shield sshd\[3527\]: Failed password for root from 220.84.248.58 port 55750 ssh2 2020-09-06T06:11:43.549161shield sshd\[3750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.84.248.58 user=root |
2020-09-06 14:17:14 |
| 195.189.96.150 | attack |
|
2020-09-06 14:13:15 |
| 45.140.17.61 | attackspambots | Port Scan: TCP/27738 |
2020-09-06 13:45:08 |
| 5.188.84.119 | attackspam | 0,27-01/02 [bc01/m11] PostRequest-Spammer scoring: maputo01_x2b |
2020-09-06 14:12:51 |
| 159.89.47.115 | attackspam | [N10.H2.VM2] Port Scanner Detected Blocked by UFW |
2020-09-06 14:02:59 |