City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.55.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9357
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.55.16. IN A
;; AUTHORITY SECTION:
. 170 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 00:13:00 CST 2022
;; MSG SIZE rcvd: 105Host 16.55.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 16.55.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 46.21.54.224 | attack | port scan and connect, tcp 23 (telnet) |
2019-11-13 16:11:21 |
| 145.239.76.165 | attackbotsspam | 145.239.76.165 - - \[13/Nov/2019:07:28:23 +0100\] "POST /wp-login.php HTTP/1.0" 200 4802 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 145.239.76.165 - - \[13/Nov/2019:07:28:25 +0100\] "POST /wp-login.php HTTP/1.0" 200 4640 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 145.239.76.165 - - \[13/Nov/2019:07:28:28 +0100\] "POST /wp-login.php HTTP/1.0" 200 4639 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-13 15:57:53 |
| 198.13.55.198 | attackbots | Nov 13 07:28:48 cp sshd[11062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.13.55.198 |
2019-11-13 15:42:33 |
| 145.239.94.223 | attackspambots | Spam Emails |
2019-11-13 15:36:33 |
| 175.181.36.242 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/175.181.36.242/ TW - 1H : (10) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TW NAME ASN : ASN9919 IP : 175.181.36.242 CIDR : 175.181.36.0/24 PREFIX COUNT : 829 UNIQUE IP COUNT : 674816 ATTACKS DETECTED ASN9919 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-13 07:28:34 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-13 15:54:15 |
| 46.105.129.129 | attackspam | Nov 13 04:37:36 firewall sshd[8814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.129.129 user=sync Nov 13 04:37:38 firewall sshd[8814]: Failed password for sync from 46.105.129.129 port 50619 ssh2 Nov 13 04:41:03 firewall sshd[8890]: Invalid user test from 46.105.129.129 ... |
2019-11-13 16:12:40 |
| 222.137.123.54 | attack | Fail2Ban - FTP Abuse Attempt |
2019-11-13 15:39:23 |
| 105.227.143.209 | attackbots | Lines containing failures of 105.227.143.209 Oct 31 11:31:45 server-name sshd[27823]: Did not receive identification string from 105.227.143.209 port 54723 Oct 31 11:31:50 server-name sshd[27824]: Invalid user user from 105.227.143.209 port 54124 Oct 31 11:31:50 server-name sshd[27824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.227.143.209 Oct 31 11:31:53 server-name sshd[27824]: Failed password for invalid user user from 105.227.143.209 port 54124 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=105.227.143.209 |
2019-11-13 15:55:11 |
| 14.169.200.34 | attackspambots | Lines containing failures of 14.169.200.34 Oct 17 17:29:31 server-name sshd[4996]: User r.r from 14.169.200.34 not allowed because not listed in AllowUsers Oct 17 17:29:32 server-name sshd[4996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.169.200.34 user=r.r Oct 17 17:29:34 server-name sshd[4996]: Failed password for invalid user r.r from 14.169.200.34 port 60889 ssh2 Oct 17 17:29:36 server-name sshd[4996]: Connection closed by invalid user r.r 14.169.200.34 port 60889 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.169.200.34 |
2019-11-13 16:15:54 |
| 113.164.79.177 | attackspam | 113.164.79.177 has been banned for [spam] ... |
2019-11-13 16:03:03 |
| 218.92.0.203 | attack | Nov 13 07:55:54 venus sshd\[32407\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.203 user=root Nov 13 07:55:57 venus sshd\[32407\]: Failed password for root from 218.92.0.203 port 64672 ssh2 Nov 13 07:56:00 venus sshd\[32407\]: Failed password for root from 218.92.0.203 port 64672 ssh2 ... |
2019-11-13 16:04:15 |
| 185.102.238.194 | attackbotsspam | Lines containing failures of 185.102.238.194 Oct 27 12:32:31 server-name sshd[22572]: Did not receive identification string from 185.102.238.194 port 59802 Oct 27 12:32:35 server-name sshd[22574]: Invalid user noc from 185.102.238.194 port 64157 Oct 27 12:32:35 server-name sshd[22574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.102.238.194 Oct 27 12:32:37 server-name sshd[22574]: Failed password for invalid user noc from 185.102.238.194 port 64157 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=185.102.238.194 |
2019-11-13 16:00:50 |
| 45.57.236.202 | attackbots | (From vickyrowe543@gmail.com) Hi! I was checking on your website, and it seems you might have to update it to keep up with the current trends. People nowadays are more comfortable browsing the internet on their phone or tablet since it's more convenient. There were some issues when I was viewing it in mobile platforms, I can fix that for you. I already like its design and overall user-interface, but I believe that your website can get even better so that your potential clients can be more engaged to do business with you, thus making your website more profitable. I'm all about flexibility and I'm sure that we can work out something to fit your needs. My rates are cheap since I'm committed to helping small businesses. I'll answer all the questions you have for me during a free consultation over the phone. I'd also like to know your ideas for the website, so please reply with the best time for me to call and your preferred contact details. I look forward to hearing back from you. Best Regards, Vick |
2019-11-13 15:36:59 |
| 183.129.160.229 | attackspam | 183.129.160.229 was recorded 14 times by 12 hosts attempting to connect to the following ports: 57907,51827,29798,60620,65281,4462,25273,21040,20482,17,46614,10321,43909,30281. Incident counter (4h, 24h, all-time): 14, 98, 963 |
2019-11-13 15:56:20 |
| 181.189.221.245 | attack | Sent mail to target address hacked/leaked from abandonia in 2016 |
2019-11-13 16:05:45 |