City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.53.248
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56547
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.53.248. IN A
;; AUTHORITY SECTION:
. 377 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 00:00:08 CST 2022
;; MSG SIZE rcvd: 106Host 248.53.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 248.53.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 69.194.11.249 | attackspam | Oct 7 22:30:19 ns382633 sshd\[29090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.194.11.249 user=root Oct 7 22:30:21 ns382633 sshd\[29090\]: Failed password for root from 69.194.11.249 port 46194 ssh2 Oct 7 22:39:40 ns382633 sshd\[30739\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.194.11.249 user=root Oct 7 22:39:42 ns382633 sshd\[30739\]: Failed password for root from 69.194.11.249 port 60256 ssh2 Oct 7 22:47:40 ns382633 sshd\[31776\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.194.11.249 user=root |
2020-10-08 07:24:20 |
| 167.250.127.235 | attack | Oct 8 01:33:54 ns382633 sshd\[24153\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.250.127.235 user=root Oct 8 01:33:55 ns382633 sshd\[24153\]: Failed password for root from 167.250.127.235 port 41874 ssh2 Oct 8 01:43:11 ns382633 sshd\[25450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.250.127.235 user=root Oct 8 01:43:13 ns382633 sshd\[25450\]: Failed password for root from 167.250.127.235 port 63098 ssh2 Oct 8 01:46:39 ns382633 sshd\[25956\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.250.127.235 user=root |
2020-10-08 07:54:48 |
| 163.172.197.175 | attack | 163.172.197.175 - - [08/Oct/2020:01:18:07 +0200] "POST /wp-login.php HTTP/1.1" 200 8865 "http://cubscouts.org/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36" 163.172.197.175 - - [08/Oct/2020:01:18:07 +0200] "POST /wp-login.php HTTP/1.1" 200 8865 "http://cubscouts.org/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36" 163.172.197.175 - - [08/Oct/2020:01:18:07 +0200] "POST /wp-login.php HTTP/1.1" 200 8865 "http://cubscouts.org/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36" 163.172.197.175 - - [08/Oct/2020:01:18:07 +0200] "POST /wp-login.php HTTP/1.1" 200 8865 "http://cubscouts.org/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36" 163.172.197.175 - - [08/Oct/2020:01: ... |
2020-10-08 07:25:31 |
| 14.215.113.59 | attackspambots | Lines containing failures of 14.215.113.59 Oct 4 23:41:21 shared02 sshd[16931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.215.113.59 user=r.r Oct 4 23:41:23 shared02 sshd[16931]: Failed password for r.r from 14.215.113.59 port 55560 ssh2 Oct 4 23:41:23 shared02 sshd[16931]: Received disconnect from 14.215.113.59 port 55560:11: Bye Bye [preauth] Oct 4 23:41:23 shared02 sshd[16931]: Disconnected from authenticating user r.r 14.215.113.59 port 55560 [preauth] Oct 4 23:58:24 shared02 sshd[22841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.215.113.59 user=r.r Oct 4 23:58:26 shared02 sshd[22841]: Failed password for r.r from 14.215.113.59 port 37176 ssh2 Oct 4 23:58:26 shared02 sshd[22841]: Received disconnect from 14.215.113.59 port 37176:11: Bye Bye [preauth] Oct 4 23:58:26 shared02 sshd[22841]: Disconnected from authenticating user r.r 14.215.113.59 port 37176 [preauth........ ------------------------------ |
2020-10-08 07:42:54 |
| 176.109.0.30 | attackspam | $f2bV_matches |
2020-10-08 07:16:29 |
| 77.37.162.17 | attackspam | 2020-10-07T22:48:24.887108shield sshd\[26988\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=broadband-77-37-162-17.ip.moscow.rt.ru user=root 2020-10-07T22:48:26.906501shield sshd\[26988\]: Failed password for root from 77.37.162.17 port 37386 ssh2 2020-10-07T22:51:48.925817shield sshd\[27367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=broadband-77-37-162-17.ip.moscow.rt.ru user=root 2020-10-07T22:51:50.955019shield sshd\[27367\]: Failed password for root from 77.37.162.17 port 38544 ssh2 2020-10-07T22:55:17.056270shield sshd\[27698\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=broadband-77-37-162-17.ip.moscow.rt.ru user=root |
2020-10-08 07:23:58 |
| 49.88.112.67 | attack | Oct 8 01:18:21 buvik sshd[15592]: Failed password for root from 49.88.112.67 port 34990 ssh2 Oct 8 01:18:22 buvik sshd[15592]: Failed password for root from 49.88.112.67 port 34990 ssh2 Oct 8 01:18:25 buvik sshd[15592]: Failed password for root from 49.88.112.67 port 34990 ssh2 ... |
2020-10-08 07:20:06 |
| 139.189.245.98 | attack | Unauthorised access (Oct 7) SRC=139.189.245.98 LEN=40 TTL=53 ID=41353 TCP DPT=23 WINDOW=265 SYN |
2020-10-08 07:32:53 |
| 171.245.235.43 | attackspam | Unauthorised access (Oct 7) SRC=171.245.235.43 LEN=40 TTL=47 ID=10877 TCP DPT=23 WINDOW=31201 SYN |
2020-10-08 07:45:25 |
| 167.172.201.94 | attackspambots | Oct 8 01:18:27 PorscheCustomer sshd[16016]: Failed password for root from 167.172.201.94 port 33464 ssh2 Oct 8 01:22:09 PorscheCustomer sshd[16164]: Failed password for root from 167.172.201.94 port 39892 ssh2 ... |
2020-10-08 07:56:38 |
| 106.12.108.170 | attackspambots | [N3.H3.VM3] Port Scanner Detected Blocked by UFW |
2020-10-08 07:52:13 |
| 27.68.25.196 | attackbots | 20/10/7@16:47:19: FAIL: Alarm-Telnet address from=27.68.25.196 20/10/7@16:47:20: FAIL: Alarm-Telnet address from=27.68.25.196 ... |
2020-10-08 07:48:34 |
| 45.142.120.149 | attack | 2020-10-07T17:10:51.502333linuxbox-skyline auth[40304]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=BLUNCK rhost=45.142.120.149 ... |
2020-10-08 07:17:24 |
| 218.92.0.173 | attackspam | 2020-10-08T01:29:34.180844 sshd[4175696]: Unable to negotiate with 218.92.0.173 port 11078: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] 2020-10-08T01:29:35.230536 sshd[4175712]: Unable to negotiate with 218.92.0.173 port 62284: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] 2020-10-08T01:37:26.996611 sshd[4181795]: Unable to negotiate with 218.92.0.173 port 47786: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] |
2020-10-08 07:43:41 |
| 120.85.61.98 | attack | Oct 8 01:40:04 www sshd\[57343\]: Failed password for root from 120.85.61.98 port 6956 ssh2Oct 8 01:43:58 www sshd\[57468\]: Failed password for root from 120.85.61.98 port 4053 ssh2Oct 8 01:47:57 www sshd\[57591\]: Failed password for root from 120.85.61.98 port 1142 ssh2 ... |
2020-10-08 07:41:22 |