City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.94.135
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10353
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.21.94.135. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:18:14 CST 2022
;; MSG SIZE rcvd: 106Host 135.94.21.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 135.94.21.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.176.27.118 | attack | Dec 11 06:11:20 mc1 kernel: \[199918.942083\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.118 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=46101 PROTO=TCP SPT=55867 DPT=19232 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 11 06:12:00 mc1 kernel: \[199958.685109\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.118 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=3784 PROTO=TCP SPT=55867 DPT=25873 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 11 06:19:44 mc1 kernel: \[200423.327194\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.118 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=25536 PROTO=TCP SPT=55867 DPT=54213 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-12-11 13:20:34 |
| 117.4.161.226 | attackspambots | Unauthorised access (Dec 11) SRC=117.4.161.226 LEN=52 TTL=108 ID=10094 DF TCP DPT=445 WINDOW=8192 SYN |
2019-12-11 13:34:32 |
| 114.67.74.49 | attack | Dec 10 19:31:00 web1 sshd\[5823\]: Invalid user lechtenberg from 114.67.74.49 Dec 10 19:31:00 web1 sshd\[5823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.74.49 Dec 10 19:31:01 web1 sshd\[5823\]: Failed password for invalid user lechtenberg from 114.67.74.49 port 50102 ssh2 Dec 10 19:37:56 web1 sshd\[6521\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.74.49 user=news Dec 10 19:37:58 web1 sshd\[6521\]: Failed password for news from 114.67.74.49 port 53490 ssh2 |
2019-12-11 13:40:41 |
| 61.148.16.162 | attackspambots | Dec 11 00:27:10 plusreed sshd[22615]: Invalid user sveinole from 61.148.16.162 ... |
2019-12-11 13:37:25 |
| 42.104.97.238 | attack | Dec 11 05:54:44 localhost sshd\[18187\]: Invalid user wu from 42.104.97.238 port 37188 Dec 11 05:54:44 localhost sshd\[18187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.104.97.238 Dec 11 05:54:45 localhost sshd\[18187\]: Failed password for invalid user wu from 42.104.97.238 port 37188 ssh2 |
2019-12-11 13:41:13 |
| 201.139.88.19 | attackbotsspam | Dec 11 06:01:52 MK-Soft-VM7 sshd[16046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.139.88.19 Dec 11 06:01:54 MK-Soft-VM7 sshd[16046]: Failed password for invalid user steam from 201.139.88.19 port 58196 ssh2 ... |
2019-12-11 13:05:52 |
| 13.77.142.89 | attackspam | Dec 10 19:24:57 web9 sshd\[29349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.77.142.89 user=root Dec 10 19:24:58 web9 sshd\[29349\]: Failed password for root from 13.77.142.89 port 50296 ssh2 Dec 10 19:30:47 web9 sshd\[30137\]: Invalid user cpm from 13.77.142.89 Dec 10 19:30:47 web9 sshd\[30137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.77.142.89 Dec 10 19:30:49 web9 sshd\[30137\]: Failed password for invalid user cpm from 13.77.142.89 port 60382 ssh2 |
2019-12-11 13:34:08 |
| 162.243.137.171 | attack | Dec 10 21:31:01 mockhub sshd[4471]: Failed password for news from 162.243.137.171 port 49089 ssh2 ... |
2019-12-11 13:42:31 |
| 110.136.240.30 | attackspam | Unauthorised access (Dec 11) SRC=110.136.240.30 LEN=52 TTL=248 ID=11568 DF TCP DPT=445 WINDOW=8192 SYN |
2019-12-11 13:26:18 |
| 202.90.131.90 | attackbots | Unauthorized connection attempt detected from IP address 202.90.131.90 to port 445 |
2019-12-11 13:41:41 |
| 94.191.86.249 | attackbots | Dec 10 23:55:11 plusreed sshd[14134]: Invalid user neher from 94.191.86.249 ... |
2019-12-11 13:09:34 |
| 2a00:d00:ff:162:62:204:66:10 | attack | Dec 11 05:55:15 mout postfix/smtpd[30823]: lost connection after CONNECT from internet.nl[2a00:d00:ff:162:62:204:66:10] |
2019-12-11 13:05:37 |
| 111.42.102.145 | attack | Automatic report - Port Scan Attack |
2019-12-11 13:17:16 |
| 77.247.109.43 | attackspam | Dec 11 05:55:03 debian-2gb-nbg1-2 kernel: \[24321649.587265\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=77.247.109.43 DST=195.201.40.59 LEN=441 TOS=0x00 PREC=0x00 TTL=54 ID=54305 DF PROTO=UDP SPT=5180 DPT=9090 LEN=421 |
2019-12-11 13:18:42 |
| 183.81.122.26 | attackbots | Attempt to attack host OS, exploiting network vulnerabilities, on 11-12-2019 04:55:10. |
2019-12-11 13:07:56 |