City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.74.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30534
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.74.208. IN A
;; AUTHORITY SECTION:
. 227 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 02:53:14 CST 2022
;; MSG SIZE rcvd: 106Host 208.74.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 208.74.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 141.98.81.42 | attackspam | Jun 8 08:58:46 vpn01 sshd[769]: Failed password for root from 141.98.81.42 port 15383 ssh2 ... |
2020-06-08 15:00:29 |
| 101.91.238.160 | attackspambots | $f2bV_matches |
2020-06-08 14:49:50 |
| 59.127.229.207 | attackbotsspam | TW_MAINT-TW-TWNIC_<177>1591588309 [1:2403398:57811] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 50 [Classification: Misc Attack] [Priority: 2]: |
2020-06-08 15:20:17 |
| 125.124.199.251 | attack | Jun 8 07:06:10 cdc sshd[11673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.199.251 user=root Jun 8 07:06:12 cdc sshd[11673]: Failed password for invalid user root from 125.124.199.251 port 58048 ssh2 |
2020-06-08 14:42:25 |
| 180.76.103.247 | attackspambots | Jun 8 06:04:17 ns382633 sshd\[18313\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.103.247 user=root Jun 8 06:04:19 ns382633 sshd\[18313\]: Failed password for root from 180.76.103.247 port 48238 ssh2 Jun 8 06:15:44 ns382633 sshd\[20721\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.103.247 user=root Jun 8 06:15:46 ns382633 sshd\[20721\]: Failed password for root from 180.76.103.247 port 47678 ssh2 Jun 8 06:19:13 ns382633 sshd\[20975\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.103.247 user=root |
2020-06-08 15:05:53 |
| 124.158.163.22 | attackbotsspam | Port Scanner |
2020-06-08 14:49:05 |
| 190.207.82.63 | attackspam | 20/6/7@23:52:27: FAIL: Alarm-Network address from=190.207.82.63 ... |
2020-06-08 14:50:58 |
| 141.98.81.207 | attackbotsspam | 2020-06-07T16:42:39.663601homeassistant sshd[18295]: Failed password for invalid user admin from 141.98.81.207 port 26687 ssh2 2020-06-08T06:09:13.195912homeassistant sshd[3109]: Invalid user admin from 141.98.81.207 port 3899 2020-06-08T06:09:13.203246homeassistant sshd[3109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.207 ... |
2020-06-08 14:53:50 |
| 180.76.50.159 | attack | SSH login attempts. |
2020-06-08 14:51:18 |
| 89.208.242.202 | attackspam | Jun 8 06:00:16 marvibiene sshd[5755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.208.242.202 user=root Jun 8 06:00:18 marvibiene sshd[5755]: Failed password for root from 89.208.242.202 port 42790 ssh2 Jun 8 06:27:03 marvibiene sshd[6204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.208.242.202 user=root Jun 8 06:27:05 marvibiene sshd[6204]: Failed password for root from 89.208.242.202 port 38682 ssh2 ... |
2020-06-08 15:21:37 |
| 203.98.76.172 | attackbotsspam | 3492:Jun 8 08:20:28 fmk sshd[21802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.98.76.172 user=r.r 3493:Jun 8 08:20:31 fmk sshd[21802]: Failed password for r.r from 203.98.76.172 port 55594 ssh2 3494:Jun 8 08:20:33 fmk sshd[21802]: Received disconnect from 203.98.76.172 port 55594:11: Bye Bye [preauth] 3495:Jun 8 08:20:33 fmk sshd[21802]: Disconnected from authenticating user r.r 203.98.76.172 port 55594 [preauth] 3564:Jun 8 08:48:54 fmk sshd[22208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.98.76.172 user=r.r 3565:Jun 8 08:48:56 fmk sshd[22208]: Failed password for r.r from 203.98.76.172 port 53616 ssh2 3566:Jun 8 08:48:56 fmk sshd[22208]: Received disconnect from 203.98.76.172 port 53616:11: Bye Bye [preauth] 3567:Jun 8 08:48:56 fmk sshd[22208]: Disconnected from authenticating user r.r 203.98.76.172 port 53616 [preauth] 3574:Jun 8 08:51:26 fmk sshd[22285]: pam........ ------------------------------ |
2020-06-08 15:12:40 |
| 178.128.72.84 | attack | (sshd) Failed SSH login from 178.128.72.84 (US/United States/-): 5 in the last 3600 secs |
2020-06-08 15:07:23 |
| 118.25.8.234 | attack | (sshd) Failed SSH login from 118.25.8.234 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 8 06:36:40 s1 sshd[14753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.8.234 user=root Jun 8 06:36:43 s1 sshd[14753]: Failed password for root from 118.25.8.234 port 58870 ssh2 Jun 8 06:47:01 s1 sshd[14998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.8.234 user=root Jun 8 06:47:03 s1 sshd[14998]: Failed password for root from 118.25.8.234 port 47686 ssh2 Jun 8 06:52:06 s1 sshd[15102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.8.234 user=root |
2020-06-08 15:02:50 |
| 167.172.156.227 | attack | Jun 8 10:07:34 debian kernel: [502612.484903] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=167.172.156.227 DST=89.252.131.35 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=3559 PROTO=TCP SPT=58764 DPT=15091 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-08 15:19:56 |
| 141.98.81.210 | attack | 2020-06-07T16:42:46.525709homeassistant sshd[18369]: Failed password for invalid user admin from 141.98.81.210 port 4429 ssh2 2020-06-08T06:09:20.074507homeassistant sshd[3162]: Invalid user admin from 141.98.81.210 port 26047 ... |
2020-06-08 14:46:17 |