City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.211.93.241
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16818
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.211.93.241. IN A
;; AUTHORITY SECTION:
. 545 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400
;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 13:11:54 CST 2022
;; MSG SIZE rcvd: 107Host 241.93.211.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 241.93.211.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.78.44.63 | attackbots | Oct 21 23:16:12 Ubuntu-1404-trusty-64-minimal sshd\[30909\]: Invalid user html from 218.78.44.63 Oct 21 23:16:12 Ubuntu-1404-trusty-64-minimal sshd\[30909\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.44.63 Oct 21 23:16:14 Ubuntu-1404-trusty-64-minimal sshd\[30909\]: Failed password for invalid user html from 218.78.44.63 port 35402 ssh2 Oct 21 23:33:55 Ubuntu-1404-trusty-64-minimal sshd\[14169\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.44.63 user=root Oct 21 23:33:57 Ubuntu-1404-trusty-64-minimal sshd\[14169\]: Failed password for root from 218.78.44.63 port 57548 ssh2 |
2019-10-22 05:36:13 |
| 212.154.94.222 | attackbotsspam | scan z |
2019-10-22 05:38:12 |
| 59.39.177.195 | attackbots | Oct 21 22:04:55 h2812830 postfix/smtpd[18282]: warning: unknown[59.39.177.195]: SASL LOGIN authentication failed: authentication failure Oct 21 22:04:59 h2812830 postfix/smtpd[18282]: warning: unknown[59.39.177.195]: SASL LOGIN authentication failed: authentication failure Oct 21 22:05:03 h2812830 postfix/smtpd[18282]: warning: unknown[59.39.177.195]: SASL LOGIN authentication failed: authentication failure ... |
2019-10-22 05:44:18 |
| 36.66.140.3 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/36.66.140.3/ ID - 1H : (53) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : ID NAME ASN : ASN17974 IP : 36.66.140.3 CIDR : 36.66.128.0/17 PREFIX COUNT : 1456 UNIQUE IP COUNT : 1245952 ATTACKS DETECTED ASN17974 : 1H - 2 3H - 2 6H - 3 12H - 7 24H - 11 DateTime : 2019-10-21 22:05:24 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery |
2019-10-22 05:24:57 |
| 112.64.170.166 | attack | SSH bruteforce (Triggered fail2ban) |
2019-10-22 05:10:52 |
| 142.93.248.5 | attackspam | Oct 21 19:55:34 marvibiene sshd[7451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.248.5 user=root Oct 21 19:55:35 marvibiene sshd[7451]: Failed password for root from 142.93.248.5 port 32782 ssh2 Oct 21 20:04:52 marvibiene sshd[7504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.248.5 user=root Oct 21 20:04:54 marvibiene sshd[7504]: Failed password for root from 142.93.248.5 port 60308 ssh2 ... |
2019-10-22 05:50:07 |
| 118.122.124.78 | attackspam | Oct 21 22:01:40 SilenceServices sshd[1632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.122.124.78 Oct 21 22:01:41 SilenceServices sshd[1632]: Failed password for invalid user changeme from 118.122.124.78 port 38643 ssh2 Oct 21 22:05:35 SilenceServices sshd[2736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.122.124.78 |
2019-10-22 05:17:05 |
| 198.108.67.135 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 21-10-2019 21:05:24. |
2019-10-22 05:27:27 |
| 139.199.163.235 | attackbotsspam | invalid user |
2019-10-22 05:48:24 |
| 180.168.198.142 | attackbotsspam | Oct 21 22:22:15 srv206 sshd[12478]: Invalid user monitor from 180.168.198.142 Oct 21 22:22:15 srv206 sshd[12478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.198.142 Oct 21 22:22:15 srv206 sshd[12478]: Invalid user monitor from 180.168.198.142 Oct 21 22:22:16 srv206 sshd[12478]: Failed password for invalid user monitor from 180.168.198.142 port 32958 ssh2 ... |
2019-10-22 05:15:57 |
| 101.50.92.179 | attackspam | 2019-10-21 x@x 2019-10-21 21:16:11 unexpected disconnection while reading SMTP command from (ntl-50-92-179.nayatel.com) [101.50.92.179]:22124 I=[10.100.18.21]:25 (error: Connection reset by peer) 2019-10-21 x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=101.50.92.179 |
2019-10-22 05:36:40 |
| 185.176.27.246 | attack | firewall-block, port(s): 45511/tcp |
2019-10-22 05:42:28 |
| 91.92.214.64 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2019-10-22 05:45:51 |
| 45.80.104.152 | attack | Name: 'gekllokjwer' Street: 'DXJXKCusGwzJU' City: 'chOjdNXZYEVOMtMwe' Zip: 'DeRgRoRKaO' Message: 'Ñåìåé Ïÿòèãîðñê Àòûðàó, Êàçàõñòàí êóïèòü Ýêñòàçè (Mdma) Äçåðæèíñê Äåðáåíò Àõàíãàìà, Øðè-Ëàíêà êóïèòü Ñêîðîñòü ÑÊ êðèñòàëëû (ñîëü-Àëüôà-ÏÂÏ) Îáíèíñê Ìàãíèòîãîðñê |
2019-10-22 05:11:19 |
| 179.57.121.10 | attackbots | Attempt to attack host OS, exploiting network vulnerabilities, on 21-10-2019 21:05:23. |
2019-10-22 05:29:53 |