City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.57.9
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22501
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.57.9. IN A
;; AUTHORITY SECTION:
. 309 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 00:36:36 CST 2022
;; MSG SIZE rcvd: 104Host 9.57.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 9.57.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 77.243.218.63 | attackspambots | Jun 17 11:54:23 lukav-desktop sshd\[2362\]: Invalid user qaz from 77.243.218.63 Jun 17 11:54:23 lukav-desktop sshd\[2362\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.243.218.63 Jun 17 11:54:25 lukav-desktop sshd\[2362\]: Failed password for invalid user qaz from 77.243.218.63 port 48236 ssh2 Jun 17 11:56:20 lukav-desktop sshd\[2396\]: Invalid user vit from 77.243.218.63 Jun 17 11:56:20 lukav-desktop sshd\[2396\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.243.218.63 |
2020-06-17 18:25:02 |
| 206.189.166.172 | attackbots | (sshd) Failed SSH login from 206.189.166.172 (US/United States/-): 5 in the last 3600 secs |
2020-06-17 18:40:28 |
| 189.186.30.107 | attackspambots | Jun 16 17:32:53 zn008 sshd[19653]: Address 189.186.30.107 maps to dsl-189-186-30-107-dyn.prod-infinhostnameum.com.mx, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jun 16 17:32:53 zn008 sshd[19653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.186.30.107 user=r.r Jun 16 17:32:55 zn008 sshd[19653]: Failed password for r.r from 189.186.30.107 port 53677 ssh2 Jun 16 17:32:55 zn008 sshd[19653]: Received disconnect from 189.186.30.107: 11: Bye Bye [preauth] Jun 16 17:35:23 zn008 sshd[20058]: Address 189.186.30.107 maps to dsl-189-186-30-107-dyn.prod-infinhostnameum.com.mx, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jun 16 17:35:23 zn008 sshd[20058]: Invalid user qlz from 189.186.30.107 Jun 16 17:35:23 zn008 sshd[20058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.186.30.107 Jun 16 17:35:25 zn008 sshd[20058]: Failed password for........ ------------------------------- |
2020-06-17 18:47:24 |
| 178.62.248.130 | attackbots | $f2bV_matches |
2020-06-17 18:34:55 |
| 165.22.191.129 | attackbots | LGS,WP GET /wp/wp-login.php |
2020-06-17 18:30:21 |
| 193.27.228.220 | attack |
|
2020-06-17 18:59:11 |
| 181.52.249.213 | attackbotsspam | Jun 16 23:33:39 propaganda sshd[22867]: Connection from 181.52.249.213 port 43550 on 10.0.0.160 port 22 rdomain "" Jun 16 23:33:39 propaganda sshd[22867]: Connection closed by 181.52.249.213 port 43550 [preauth] |
2020-06-17 18:34:41 |
| 45.134.179.57 | attackspam | Jun 17 12:46:09 debian-2gb-nbg1-2 kernel: \[14649467.741941\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.134.179.57 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=44945 PROTO=TCP SPT=54589 DPT=63278 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-17 18:50:32 |
| 218.92.0.251 | attack | Jun 17 12:33:46 home sshd[5506]: Failed password for root from 218.92.0.251 port 35142 ssh2 Jun 17 12:33:58 home sshd[5506]: Failed password for root from 218.92.0.251 port 35142 ssh2 Jun 17 12:33:58 home sshd[5506]: error: maximum authentication attempts exceeded for root from 218.92.0.251 port 35142 ssh2 [preauth] ... |
2020-06-17 18:36:34 |
| 94.102.50.137 | attackspam | ET DROP Dshield Block Listed Source group 1 - port: 60206 proto: TCP cat: Misc Attack |
2020-06-17 18:22:47 |
| 94.243.129.134 | attack | " " |
2020-06-17 18:43:16 |
| 49.232.148.100 | attackspambots | Jun 17 06:01:51 ns382633 sshd\[14790\]: Invalid user radio from 49.232.148.100 port 43010 Jun 17 06:01:51 ns382633 sshd\[14790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.148.100 Jun 17 06:01:53 ns382633 sshd\[14790\]: Failed password for invalid user radio from 49.232.148.100 port 43010 ssh2 Jun 17 06:08:33 ns382633 sshd\[15909\]: Invalid user wp-user from 49.232.148.100 port 60224 Jun 17 06:08:33 ns382633 sshd\[15909\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.148.100 |
2020-06-17 18:55:44 |
| 89.248.167.141 | attackspam | Jun 17 12:00:37 debian-2gb-nbg1-2 kernel: \[14646736.461862\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=89.248.167.141 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=21051 PROTO=TCP SPT=8080 DPT=2072 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-17 18:39:26 |
| 82.48.214.254 | attackspam | Invalid user dev from 82.48.214.254 port 53921 |
2020-06-17 18:21:14 |
| 34.71.158.203 | attackspambots | SSH brutforce |
2020-06-17 18:44:03 |