City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.93.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4478
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.93.21. IN A
;; AUTHORITY SECTION:
. 565 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 75 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:17:22 CST 2022
;; MSG SIZE rcvd: 105Host 21.93.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 21.93.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.31.136 | attack | Sep 16 07:05:08 ny01 sshd[11019]: Failed password for root from 222.186.31.136 port 18515 ssh2 Sep 16 07:05:10 ny01 sshd[11019]: Failed password for root from 222.186.31.136 port 18515 ssh2 Sep 16 07:05:12 ny01 sshd[11019]: Failed password for root from 222.186.31.136 port 18515 ssh2 |
2019-09-16 19:19:35 |
| 128.199.108.108 | attack | Sep 16 05:46:20 TORMINT sshd\[22778\]: Invalid user ubnt from 128.199.108.108 Sep 16 05:46:20 TORMINT sshd\[22778\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.108.108 Sep 16 05:46:22 TORMINT sshd\[22778\]: Failed password for invalid user ubnt from 128.199.108.108 port 51284 ssh2 ... |
2019-09-16 17:56:48 |
| 185.211.245.198 | attackspambots | Sep 16 11:32:09 mail postfix/smtpd\[23147\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 16 11:32:20 mail postfix/smtpd\[23148\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 16 11:33:33 mail postfix/smtpd\[23145\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-09-16 17:38:38 |
| 122.152.212.31 | attack | Sep 16 11:38:43 dedicated sshd[5599]: Invalid user tristan from 122.152.212.31 port 40414 |
2019-09-16 17:45:56 |
| 62.28.34.125 | attackbotsspam | Sep 16 11:30:48 mail sshd\[26030\]: Invalid user kim from 62.28.34.125 port 63551 Sep 16 11:30:48 mail sshd\[26030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.34.125 Sep 16 11:30:50 mail sshd\[26030\]: Failed password for invalid user kim from 62.28.34.125 port 63551 ssh2 Sep 16 11:34:42 mail sshd\[26619\]: Invalid user ubuntu from 62.28.34.125 port 14490 Sep 16 11:34:42 mail sshd\[26619\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.34.125 |
2019-09-16 17:43:32 |
| 177.94.224.237 | attack | Sep 16 01:17:32 php1 sshd\[8088\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.94.224.237 user=lp Sep 16 01:17:34 php1 sshd\[8088\]: Failed password for lp from 177.94.224.237 port 55141 ssh2 Sep 16 01:23:39 php1 sshd\[8575\]: Invalid user ismael from 177.94.224.237 Sep 16 01:23:39 php1 sshd\[8575\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.94.224.237 Sep 16 01:23:41 php1 sshd\[8575\]: Failed password for invalid user ismael from 177.94.224.237 port 19976 ssh2 |
2019-09-16 19:24:30 |
| 82.202.160.93 | attackspambots | Unauthorised access (Sep 16) SRC=82.202.160.93 LEN=40 TTL=248 ID=3913 TCP DPT=445 WINDOW=1024 SYN |
2019-09-16 17:49:33 |
| 203.192.231.218 | attackbotsspam | Sep 16 05:19:43 master sshd[4138]: Failed password for invalid user plcmspip from 203.192.231.218 port 40445 ssh2 Sep 16 05:24:03 master sshd[4144]: Failed password for invalid user vt from 203.192.231.218 port 19256 ssh2 Sep 16 05:28:07 master sshd[4151]: Failed password for invalid user web from 203.192.231.218 port 60288 ssh2 Sep 16 05:32:03 master sshd[4461]: Failed password for invalid user vnc from 203.192.231.218 port 37337 ssh2 Sep 16 05:36:09 master sshd[4465]: Failed password for invalid user nextcloud from 203.192.231.218 port 14404 ssh2 Sep 16 05:40:17 master sshd[4469]: Failed password for invalid user mt from 203.192.231.218 port 55440 ssh2 Sep 16 05:44:24 master sshd[4473]: Failed password for invalid user zy from 203.192.231.218 port 32501 ssh2 Sep 16 05:48:27 master sshd[4488]: Failed password for invalid user jian from 203.192.231.218 port 9558 ssh2 Sep 16 05:52:32 master sshd[4492]: Failed password for invalid user admin from 203.192.231.218 port 50592 ssh2 Sep 16 05:56:43 master sshd[4496] |
2019-09-16 17:32:34 |
| 207.154.225.170 | attackbotsspam | Sep 16 10:33:31 web8 sshd\[14079\]: Invalid user cemergen from 207.154.225.170 Sep 16 10:33:31 web8 sshd\[14079\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.225.170 Sep 16 10:33:32 web8 sshd\[14079\]: Failed password for invalid user cemergen from 207.154.225.170 port 36954 ssh2 Sep 16 10:37:53 web8 sshd\[16144\]: Invalid user mongo from 207.154.225.170 Sep 16 10:37:53 web8 sshd\[16144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.225.170 |
2019-09-16 18:56:07 |
| 186.193.222.22 | attackbots | Unauthorised access (Sep 16) SRC=186.193.222.22 LEN=44 TTL=51 ID=2776 TCP DPT=23 WINDOW=7586 SYN |
2019-09-16 17:35:12 |
| 146.148.80.88 | attackbots | 146.148.80.88 - - [16/Sep/2019:10:26:20 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 146.148.80.88 - - [16/Sep/2019:10:26:20 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 146.148.80.88 - - [16/Sep/2019:10:26:20 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 146.148.80.88 - - [16/Sep/2019:10:26:21 +0200] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 146.148.80.88 - - [16/Sep/2019:10:26:21 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 146.148.80.88 - - [16/Sep/2019:10:26:21 +0200] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-09-16 18:47:26 |
| 206.189.47.166 | attack | Sep 16 11:09:41 lnxded63 sshd[22450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.47.166 |
2019-09-16 17:51:26 |
| 60.29.241.2 | attackbotsspam | Sep 16 06:45:25 xtremcommunity sshd\[142516\]: Invalid user nnn from 60.29.241.2 port 6192 Sep 16 06:45:25 xtremcommunity sshd\[142516\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.29.241.2 Sep 16 06:45:27 xtremcommunity sshd\[142516\]: Failed password for invalid user nnn from 60.29.241.2 port 6192 ssh2 Sep 16 06:50:00 xtremcommunity sshd\[142618\]: Invalid user wf from 60.29.241.2 port 34106 Sep 16 06:50:00 xtremcommunity sshd\[142618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.29.241.2 ... |
2019-09-16 18:55:28 |
| 27.111.36.136 | attackspam | Sep 16 00:30:14 sachi sshd\[9849\]: Invalid user postgres from 27.111.36.136 Sep 16 00:30:14 sachi sshd\[9849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.111.36.136 Sep 16 00:30:16 sachi sshd\[9849\]: Failed password for invalid user postgres from 27.111.36.136 port 48878 ssh2 Sep 16 00:34:56 sachi sshd\[10241\]: Invalid user Administrator from 27.111.36.136 Sep 16 00:34:56 sachi sshd\[10241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.111.36.136 |
2019-09-16 19:05:12 |
| 50.227.195.3 | attackbotsspam | Sep 16 16:20:36 areeb-Workstation sshd[5005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.227.195.3 Sep 16 16:20:38 areeb-Workstation sshd[5005]: Failed password for invalid user aya from 50.227.195.3 port 34590 ssh2 ... |
2019-09-16 19:13:50 |