City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.68.40
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 649
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.68.40.			IN	A
;; AUTHORITY SECTION:
.			60	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021801 1800 900 604800 86400
;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 03:30:50 CST 2022
;; MSG SIZE  rcvd: 105Host 40.68.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server:		183.60.83.19
Address:	183.60.83.19#53
** server can't find 40.68.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime | 
|---|---|---|---|
| 212.83.145.72 | attack | Unauthorized IMAP connection attempt | 2020-02-25 06:22:30 | 
| 49.88.112.115 | attackspambots | Feb 24 12:11:41 tdfoods sshd\[24138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.115 user=root Feb 24 12:11:43 tdfoods sshd\[24138\]: Failed password for root from 49.88.112.115 port 37239 ssh2 Feb 24 12:14:38 tdfoods sshd\[24395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.115 user=root Feb 24 12:14:40 tdfoods sshd\[24395\]: Failed password for root from 49.88.112.115 port 23987 ssh2 Feb 24 12:15:43 tdfoods sshd\[24474\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.115 user=root | 2020-02-25 06:32:00 | 
| 141.136.83.189 | attack | Unauthorized connection attempt from IP address 141.136.83.189 on Port 445(SMB) | 2020-02-25 06:41:07 | 
| 109.165.11.163 | attackbots | Feb 24 14:17:01 debian-2gb-nbg1-2 kernel: \[4809421.746737\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=109.165.11.163 DST=195.201.40.59 LEN=52 TOS=0x00 PREC=0x00 TTL=53 ID=14528 DF PROTO=TCP SPT=49645 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 | 2020-02-25 06:33:18 | 
| 185.209.0.90 | attackbotsspam | ET DROP Dshield Block Listed Source group 1 - port: 28389 proto: TCP cat: Misc Attack | 2020-02-25 06:44:00 | 
| 222.186.190.92 | attackbotsspam | Feb 24 23:33:31 server sshd[1825133]: Failed password for root from 222.186.190.92 port 34340 ssh2 Feb 24 23:33:35 server sshd[1825133]: Failed password for root from 222.186.190.92 port 34340 ssh2 Feb 24 23:33:39 server sshd[1825133]: Failed password for root from 222.186.190.92 port 34340 ssh2 | 2020-02-25 06:42:55 | 
| 187.111.160.29 | attack | proto=tcp . spt=41301 . dpt=25 . Listed on dnsbl-sorbs plus abuseat-org and barracuda (207) | 2020-02-25 06:49:17 | 
| 193.56.117.9 | attack | tcp 54874 | 2020-02-25 06:36:20 | 
| 123.182.226.44 | attackspambots | port scan and connect, tcp 23 (telnet) | 2020-02-25 06:49:33 | 
| 61.2.150.39 | attack | 1582550200 - 02/24/2020 14:16:40 Host: 61.2.150.39/61.2.150.39 Port: 445 TCP Blocked | 2020-02-25 06:40:33 | 
| 196.246.210.120 | attackspambots | proto=tcp . spt=52489 . dpt=25 . Found on 196.246.0.0/16 Spamhaus DROP (Dont Route Or Peer) (208) | 2020-02-25 06:45:50 | 
| 128.199.138.31 | attackbots | Feb 24 23:05:36 odroid64 sshd\[2426\]: Invalid user admin from 128.199.138.31 Feb 24 23:05:36 odroid64 sshd\[2426\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.138.31 ... | 2020-02-25 06:31:09 | 
| 200.69.250.253 | attack | 2020-02-24T23:22:45.651706scmdmz1 sshd[1173]: Invalid user spares-brochures@1234 from 200.69.250.253 port 55118 2020-02-24T23:22:45.654561scmdmz1 sshd[1173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.69.250.253 2020-02-24T23:22:45.651706scmdmz1 sshd[1173]: Invalid user spares-brochures@1234 from 200.69.250.253 port 55118 2020-02-24T23:22:47.422327scmdmz1 sshd[1173]: Failed password for invalid user spares-brochures@1234 from 200.69.250.253 port 55118 ssh2 2020-02-24T23:26:47.920786scmdmz1 sshd[1576]: Invalid user spares-brochures from 200.69.250.253 port 39889 ... | 2020-02-25 06:27:09 | 
| 123.16.141.152 | attackbotsspam | Unauthorized connection attempt from IP address 123.16.141.152 on Port 445(SMB) | 2020-02-25 06:41:35 | 
| 193.56.28.138 | attackbots | Rude login attack (29 tries in 1d) | 2020-02-25 06:38:30 |