City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.9.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41958
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.9.20. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:12:41 CST 2022
;; MSG SIZE rcvd: 104Host 20.9.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 20.9.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 83.69.106.140 | attack | Sep 16 04:30:10 site1 sshd\[47504\]: Invalid user hali from 83.69.106.140Sep 16 04:30:12 site1 sshd\[47504\]: Failed password for invalid user hali from 83.69.106.140 port 53262 ssh2Sep 16 04:33:59 site1 sshd\[47654\]: Invalid user fieu from 83.69.106.140Sep 16 04:34:01 site1 sshd\[47654\]: Failed password for invalid user fieu from 83.69.106.140 port 37112 ssh2Sep 16 04:37:56 site1 sshd\[47864\]: Invalid user jet from 83.69.106.140Sep 16 04:37:58 site1 sshd\[47864\]: Failed password for invalid user jet from 83.69.106.140 port 49212 ssh2 ... |
2019-09-16 12:29:34 |
| 45.136.109.33 | attackspam | Sep 16 06:07:06 h2177944 kernel: \[1483265.599318\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.33 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=65373 PROTO=TCP SPT=47691 DPT=2281 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 16 06:18:18 h2177944 kernel: \[1483937.375257\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.33 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=13775 PROTO=TCP SPT=47691 DPT=2897 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 16 06:27:08 h2177944 kernel: \[1484467.245521\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.33 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=24811 PROTO=TCP SPT=47691 DPT=2032 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 16 06:46:46 h2177944 kernel: \[1485644.496139\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.33 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=30726 PROTO=TCP SPT=47691 DPT=2009 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 16 06:58:45 h2177944 kernel: \[1486363.566981\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.33 DST=85.214.117.9 |
2019-09-16 13:00:34 |
| 41.232.196.183 | attack | Chat Spam |
2019-09-16 12:19:38 |
| 195.218.144.234 | attackbots | Sep 14 04:55:41 ns sshd[22478]: Invalid user hamza from 195.218.144.234 Sep 14 04:55:43 ns sshd[22478]: Failed password for invalid user hamza from 195.218.144.234 port 43792 ssh2 Sep 14 05:05:15 ns sshd[23668]: Invalid user credhostnamecard from 195.218.144.234 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=195.218.144.234 |
2019-09-16 12:36:50 |
| 52.162.237.22 | attack | Sep 15 18:10:32 hcbb sshd\[32045\]: Failed password for invalid user plsql from 52.162.237.22 port 54060 ssh2 Sep 15 18:15:27 hcbb sshd\[32483\]: Invalid user Administrator from 52.162.237.22 Sep 15 18:15:27 hcbb sshd\[32483\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.162.237.22 Sep 15 18:15:29 hcbb sshd\[32483\]: Failed password for invalid user Administrator from 52.162.237.22 port 43284 ssh2 Sep 15 18:20:31 hcbb sshd\[475\]: Invalid user april from 52.162.237.22 |
2019-09-16 12:24:31 |
| 188.166.208.131 | attack | Sep 15 15:06:02 lcdev sshd\[9048\]: Invalid user passw0rd from 188.166.208.131 Sep 15 15:06:02 lcdev sshd\[9048\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.208.131 Sep 15 15:06:03 lcdev sshd\[9048\]: Failed password for invalid user passw0rd from 188.166.208.131 port 42410 ssh2 Sep 15 15:10:53 lcdev sshd\[9576\]: Invalid user auxcontable from 188.166.208.131 Sep 15 15:10:53 lcdev sshd\[9576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.208.131 |
2019-09-16 12:15:36 |
| 51.254.33.188 | attackspambots | Sep 15 18:40:04 lcdev sshd\[29482\]: Invalid user h from 51.254.33.188 Sep 15 18:40:04 lcdev sshd\[29482\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.ip-51-254-33.eu Sep 15 18:40:06 lcdev sshd\[29482\]: Failed password for invalid user h from 51.254.33.188 port 57034 ssh2 Sep 15 18:44:06 lcdev sshd\[29785\]: Invalid user ov from 51.254.33.188 Sep 15 18:44:06 lcdev sshd\[29785\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.ip-51-254-33.eu |
2019-09-16 12:44:29 |
| 34.67.30.226 | attack | SSH Bruteforce attempt |
2019-09-16 12:14:43 |
| 191.252.184.158 | attackspam | Sep 16 07:41:19 tuotantolaitos sshd[14793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.184.158 Sep 16 07:41:21 tuotantolaitos sshd[14793]: Failed password for invalid user www from 191.252.184.158 port 56198 ssh2 ... |
2019-09-16 12:46:38 |
| 47.254.147.170 | attackbots | $f2bV_matches |
2019-09-16 12:14:07 |
| 139.59.94.225 | attackspambots | Sep 16 07:16:03 server sshd\[10663\]: Invalid user prestashop from 139.59.94.225 port 38492 Sep 16 07:16:03 server sshd\[10663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.225 Sep 16 07:16:04 server sshd\[10663\]: Failed password for invalid user prestashop from 139.59.94.225 port 38492 ssh2 Sep 16 07:20:42 server sshd\[12938\]: Invalid user oz from 139.59.94.225 port 53882 Sep 16 07:20:42 server sshd\[12938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.225 |
2019-09-16 12:25:38 |
| 180.176.181.47 | attackbots | TW - 1H : (218) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TW NAME ASN : ASN38841 IP : 180.176.181.47 CIDR : 180.176.176.0/21 PREFIX COUNT : 240 UNIQUE IP COUNT : 291584 WYKRYTE ATAKI Z ASN38841 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-09-16 12:33:51 |
| 85.26.229.72 | attackspam | RU - 1H : (74) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : RU NAME ASN : ASN31205 IP : 85.26.229.72 CIDR : 85.26.229.0/24 PREFIX COUNT : 38 UNIQUE IP COUNT : 16640 WYKRYTE ATAKI Z ASN31205 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-09-16 12:35:43 |
| 177.194.88.113 | attackbots | Sep 16 01:14:58 mintao sshd\[18629\]: Invalid user pi from 177.194.88.113\ Sep 16 01:15:00 mintao sshd\[18630\]: Invalid user pi from 177.194.88.113\ |
2019-09-16 12:37:54 |
| 163.172.39.160 | attack | Sep 16 01:15:24 vtv3 sshd\[20990\]: Invalid user labor from 163.172.39.160 port 51380 Sep 16 01:15:24 vtv3 sshd\[20990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.39.160 Sep 16 01:15:26 vtv3 sshd\[20990\]: Failed password for invalid user labor from 163.172.39.160 port 51380 ssh2 Sep 16 01:23:45 vtv3 sshd\[24787\]: Invalid user changeme from 163.172.39.160 port 40096 Sep 16 01:23:45 vtv3 sshd\[24787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.39.160 Sep 16 01:36:52 vtv3 sshd\[31699\]: Invalid user warlock from 163.172.39.160 port 52370 Sep 16 01:36:52 vtv3 sshd\[31699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.39.160 Sep 16 01:36:54 vtv3 sshd\[31699\]: Failed password for invalid user warlock from 163.172.39.160 port 52370 ssh2 Sep 16 01:41:16 vtv3 sshd\[1480\]: Invalid user debian from 163.172.39.160 port 37638 Sep 16 01:41:16 vtv3 sshd |
2019-09-16 12:48:23 |