City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.70.159
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16500
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.70.159. IN A
;; AUTHORITY SECTION:
. 481 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 169 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 02:41:25 CST 2022
;; MSG SIZE rcvd: 106Host 159.70.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 159.70.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 171.242.146.196 | attackbots | 1582119065 - 02/19/2020 14:31:05 Host: 171.242.146.196/171.242.146.196 Port: 445 TCP Blocked |
2020-02-20 05:43:52 |
| 201.152.56.108 | attackspam | 1582149526 - 02/19/2020 22:58:46 Host: 201.152.56.108/201.152.56.108 Port: 445 TCP Blocked |
2020-02-20 06:07:48 |
| 5.188.210.101 | attackspam | port scan and connect, tcp 443 (https) |
2020-02-20 05:44:38 |
| 218.92.0.145 | attackspam | Feb 19 22:38:02 server sshd[79160]: Failed password for root from 218.92.0.145 port 26602 ssh2 Feb 19 22:38:06 server sshd[79160]: Failed password for root from 218.92.0.145 port 26602 ssh2 Feb 19 22:38:10 server sshd[79160]: Failed password for root from 218.92.0.145 port 26602 ssh2 |
2020-02-20 05:45:45 |
| 118.32.133.252 | attack | Fail2Ban Ban Triggered |
2020-02-20 05:39:57 |
| 52.14.10.218 | attack | 2020-02-19 15:58:09 dovecot_login authenticator failed for ec2-52-14-10-218.us-east-2.compute.amazonaws.com (xftXkhXO) [52.14.10.218]:61290 I=[192.147.25.65]:587: 535 Incorrect authentication data (set_id=mrm@lerctr.org) 2020-02-19 15:58:26 dovecot_login authenticator failed for ec2-52-14-10-218.us-east-2.compute.amazonaws.com (GgcaVVFA) [52.14.10.218]:62221 I=[192.147.25.65]:587: 535 Incorrect authentication data (set_id=mrm@lerctr.org) 2020-02-19 15:58:44 dovecot_login authenticator failed for ec2-52-14-10-218.us-east-2.compute.amazonaws.com (r1mnI2) [52.14.10.218]:62893 I=[192.147.25.65]:587: 535 Incorrect authentication data (set_id=mrm@lerctr.org) ... |
2020-02-20 06:09:46 |
| 178.88.115.126 | attack | Feb 19 11:56:17 wbs sshd\[26710\]: Invalid user postgres from 178.88.115.126 Feb 19 11:56:17 wbs sshd\[26710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.88.115.126 Feb 19 11:56:19 wbs sshd\[26710\]: Failed password for invalid user postgres from 178.88.115.126 port 43466 ssh2 Feb 19 11:58:56 wbs sshd\[27010\]: Invalid user user from 178.88.115.126 Feb 19 11:58:56 wbs sshd\[27010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.88.115.126 |
2020-02-20 06:01:36 |
| 120.138.125.2 | attackbots | Unauthorized connection attempt from IP address 120.138.125.2 on Port 445(SMB) |
2020-02-20 05:58:22 |
| 78.191.203.164 | attack | Automatic report - Port Scan Attack |
2020-02-20 05:52:03 |
| 222.186.30.57 | attackspam | 2020-02-19T19:05:38.051922vps773228.ovh.net sshd[2000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.57 user=root 2020-02-19T19:05:39.884812vps773228.ovh.net sshd[2000]: Failed password for root from 222.186.30.57 port 29086 ssh2 2020-02-19T19:05:42.202990vps773228.ovh.net sshd[2000]: Failed password for root from 222.186.30.57 port 29086 ssh2 2020-02-19T19:05:44.459762vps773228.ovh.net sshd[2000]: Failed password for root from 222.186.30.57 port 29086 ssh2 2020-02-19T22:40:58.076153vps773228.ovh.net sshd[2802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.57 user=root 2020-02-19T22:40:59.601158vps773228.ovh.net sshd[2802]: Failed password for root from 222.186.30.57 port 44478 ssh2 2020-02-19T22:40:58.076153vps773228.ovh.net sshd[2802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.57 user=root 2020-02-19T22:40:59.601158vps ... |
2020-02-20 06:02:40 |
| 163.172.185.190 | attackspam | Feb 19 18:46:44 tuxlinux sshd[3606]: Invalid user at from 163.172.185.190 port 45764 Feb 19 18:46:44 tuxlinux sshd[3606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.185.190 Feb 19 18:46:44 tuxlinux sshd[3606]: Invalid user at from 163.172.185.190 port 45764 Feb 19 18:46:44 tuxlinux sshd[3606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.185.190 Feb 19 18:46:44 tuxlinux sshd[3606]: Invalid user at from 163.172.185.190 port 45764 Feb 19 18:46:44 tuxlinux sshd[3606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.185.190 Feb 19 18:46:46 tuxlinux sshd[3606]: Failed password for invalid user at from 163.172.185.190 port 45764 ssh2 ... |
2020-02-20 05:41:14 |
| 113.20.97.17 | attackspambots | Unauthorized connection attempt from IP address 113.20.97.17 on Port 445(SMB) |
2020-02-20 05:47:32 |
| 157.245.58.92 | attack | SSH brutforce |
2020-02-20 06:09:30 |
| 92.118.160.41 | attackbots | GR_lt-source-1-mnt_<177>1582141577 [1:2403468:55470] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 85 [Classification: Misc Attack] [Priority: 2] {TCP} 92.118.160.41:56067 |
2020-02-20 05:50:52 |
| 217.26.171.139 | attack | Unauthorized connection attempt from IP address 217.26.171.139 on Port 445(SMB) |
2020-02-20 05:56:12 |