City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.91.189
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30008
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.91.189. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 42 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:14:46 CST 2022
;; MSG SIZE rcvd: 106Host 189.91.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 189.91.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 223.19.162.251 | attackspam | Honeypot attack, port: 5555, PTR: 251-162-19-223-on-nets.com. |
2020-02-14 17:16:15 |
| 59.2.35.63 | attackbotsspam | Honeypot attack, port: 5555, PTR: PTR record not found |
2020-02-14 17:30:05 |
| 200.251.23.6 | attack | Feb 14 07:57:39 plex sshd[2759]: Invalid user colord from 200.251.23.6 port 37644 |
2020-02-14 17:20:14 |
| 78.128.113.133 | attackspambots | Feb 14 09:40:04 relay postfix/smtpd\[15942\]: warning: unknown\[78.128.113.133\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 14 09:53:03 relay postfix/smtpd\[15938\]: warning: unknown\[78.128.113.133\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 14 09:53:10 relay postfix/smtpd\[13309\]: warning: unknown\[78.128.113.133\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 14 09:56:50 relay postfix/smtpd\[13935\]: warning: unknown\[78.128.113.133\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 14 09:56:57 relay postfix/smtpd\[15942\]: warning: unknown\[78.128.113.133\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-02-14 17:23:32 |
| 46.128.205.248 | attackbotsspam | Feb 14 10:04:02 MK-Soft-VM8 sshd[7710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.128.205.248 Feb 14 10:04:04 MK-Soft-VM8 sshd[7710]: Failed password for invalid user erika from 46.128.205.248 port 46648 ssh2 ... |
2020-02-14 17:19:40 |
| 219.141.184.178 | attack | Typical blackmail attempt. But instead of the usual "I have a video of you where you visit sex sites", now a new variant. "You mess around with other women and I get your messages from it." And then the usual: The deal is next. You make a donation of $ 950 worth in Bit Coln value. Otherwise, well ... your secret will not be a secret anymore. I created a special archive with some materials for your wife that will be delivered if I don`t get my donation. It took me some time to accumulate enough information. Whoever falls for such shit is to blame. And by the way, if the idiot blackmailer reads this ... I'm not married at all. The blackmail comes via a chinese server again: 183.60.83.19#53(183.60.83.19) |
2020-02-14 17:48:35 |
| 188.152.184.2 | attackspambots | Honeypot attack, port: 81, PTR: net-188-152-184-2.cust.dsl.teletu.it. |
2020-02-14 17:31:34 |
| 94.142.12.9 | attackspambots | " " |
2020-02-14 17:35:11 |
| 119.237.21.126 | attackbots | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-14 17:31:14 |
| 117.50.66.85 | attackspambots | Port probing on unauthorized port 1433 |
2020-02-14 17:40:39 |
| 195.154.45.194 | attackspam | [2020-02-14 04:33:16] NOTICE[1148][C-0000907d] chan_sip.c: Call from '' (195.154.45.194:55422) to extension '011972592277524' rejected because extension not found in context 'public'. [2020-02-14 04:33:16] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-14T04:33:16.620-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972592277524",SessionID="0x7fd82c53a2e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.45.194/55422",ACLName="no_extension_match" [2020-02-14 04:37:13] NOTICE[1148][C-00009082] chan_sip.c: Call from '' (195.154.45.194:63267) to extension '+972592277524' rejected because extension not found in context 'public'. [2020-02-14 04:37:13] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-14T04:37:13.484-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="+972592277524",SessionID="0x7fd82c9bc688",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/1 ... |
2020-02-14 17:45:07 |
| 165.22.108.156 | attackspam | Feb 14 10:02:53 plex sshd[5410]: Invalid user ftproot from 165.22.108.156 port 34852 |
2020-02-14 17:32:15 |
| 45.40.135.73 | attackbotsspam | WordPress wp-login brute force :: 45.40.135.73 0.156 BYPASS [14/Feb/2020:04:54:39 0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2287 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-02-14 17:13:44 |
| 112.85.42.178 | attack | Feb 14 09:59:04 dedicated sshd[14635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.178 user=root Feb 14 09:59:06 dedicated sshd[14635]: Failed password for root from 112.85.42.178 port 55579 ssh2 |
2020-02-14 17:15:13 |
| 222.186.19.221 | attackspam | Feb 14 10:38:27 debian-2gb-nbg1-2 kernel: \[3932332.752972\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=222.186.19.221 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=54321 PROTO=TCP SPT=33194 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-02-14 17:43:13 |