City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.80.81
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1771
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.80.81. IN A
;; AUTHORITY SECTION:
. 11 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:01:47 CST 2022
;; MSG SIZE rcvd: 105Host 81.80.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 81.80.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 188.166.158.153 | attackspambots | www.geburtshaus-fulda.de 188.166.158.153 [08/May/2020:18:19:45 +0200] "POST /wp-login.php HTTP/1.1" 200 6083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" www.geburtshaus-fulda.de 188.166.158.153 [08/May/2020:18:19:50 +0200] "POST /wp-login.php HTTP/1.1" 200 6084 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-05-16 23:26:42 |
| 103.255.4.11 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-05-17 00:11:55 |
| 209.85.220.41 | attack | Sending out 419 type spam emails from IP 209.85.220.41 (Google.com) "Congratulations Dear Winner, We are pleased to inform you of the result of the just concluded annual final draws held by Facebook Lottery Group in Cash Promotion to encourage the usage of Facebook world wide.The online international lotto promo draws was conducted from an exclusive list of 50,000.00 companies/ corporate bodies and 30.000.000 individual users email addresses from Europe, North & South America, Asia, Australia, New Zealand, Middle-East and Africa, were picked by an "Advanced Automated Random Computer Search Machine" from the Facebook Platform. This is a millennium scientific computer which was used. It is a promotional program aimed at encouraging Facebook Users; therefore you do not need to buy ticket to enter for it. "NO TICKETS WERE SOLD"." |
2020-05-17 00:17:45 |
| 106.13.215.207 | attackbotsspam | Invalid user laptop from 106.13.215.207 port 55114 |
2020-05-16 23:34:26 |
| 222.186.42.137 | attack | May 15 22:59:44 NPSTNNYC01T sshd[13938]: Failed password for root from 222.186.42.137 port 24801 ssh2 May 15 22:59:53 NPSTNNYC01T sshd[13949]: Failed password for root from 222.186.42.137 port 61410 ssh2 May 15 22:59:56 NPSTNNYC01T sshd[13949]: Failed password for root from 222.186.42.137 port 61410 ssh2 ... |
2020-05-16 23:23:20 |
| 111.10.43.201 | attackspam | SSH-BruteForce |
2020-05-16 23:45:31 |
| 23.89.246.2 | attackspam | Unauthorised access (May 13) SRC=23.89.246.2 LEN=40 TTL=240 ID=22210 TCP DPT=1433 WINDOW=1024 SYN |
2020-05-16 23:29:44 |
| 185.220.100.251 | attackbotsspam | May 16 06:22:18 gw1 sshd[31421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.100.251 May 16 06:22:20 gw1 sshd[31421]: Failed password for invalid user webguest from 185.220.100.251 port 9410 ssh2 ... |
2020-05-16 23:40:01 |
| 94.101.134.247 | attack | Honeypot attack, port: 81, PTR: PTR record not found |
2020-05-16 23:37:49 |
| 98.155.158.181 | attackspambots | Automatic report - Port Scan Attack |
2020-05-16 23:22:20 |
| 206.189.138.174 | attack | 20 attempts against mh-ssh on solar |
2020-05-17 00:01:04 |
| 51.91.39.84 | attackbotsspam | Invalid user test from 51.91.39.84 port 40280 |
2020-05-16 23:47:16 |
| 186.3.131.100 | attackbots | May 16 04:50:27 nextcloud sshd\[13911\]: Invalid user angel1 from 186.3.131.100 May 16 04:50:27 nextcloud sshd\[13911\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.3.131.100 May 16 04:50:30 nextcloud sshd\[13911\]: Failed password for invalid user angel1 from 186.3.131.100 port 39014 ssh2 |
2020-05-17 00:09:08 |
| 142.93.56.12 | attack | May 16 00:11:44 raspberrypi sshd\[2570\]: Invalid user user from 142.93.56.12May 16 00:11:46 raspberrypi sshd\[2570\]: Failed password for invalid user user from 142.93.56.12 port 49538 ssh2May 16 00:23:01 raspberrypi sshd\[8924\]: Failed password for root from 142.93.56.12 port 48856 ssh2 ... |
2020-05-16 23:52:49 |
| 152.136.147.190 | attackspam | DATE:2020-05-15 19:23:02, IP:152.136.147.190, PORT:6379 REDIS brute force auth on honeypot server (epe-honey1-hq) |
2020-05-16 23:42:28 |