City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.22.6.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29259
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.22.6.34. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:40:52 CST 2022
;; MSG SIZE rcvd: 104Host 34.6.22.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 34.6.22.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.82.34.140 | attackbotsspam | Autoban 45.82.34.140 AUTH/CONNECT |
2019-10-11 18:14:14 |
| 103.74.121.142 | attackbots | WordPress wp-login brute force :: 103.74.121.142 0.132 BYPASS [11/Oct/2019:17:06:34 1100] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-10-11 18:15:02 |
| 94.2.196.137 | attack | port scan and connect, tcp 81 (hosts2-ns) |
2019-10-11 18:03:40 |
| 103.41.23.76 | attackspam | Oct 11 11:31:57 vps691689 sshd[17632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.41.23.76 Oct 11 11:31:59 vps691689 sshd[17632]: Failed password for invalid user P4SS2020 from 103.41.23.76 port 50626 ssh2 ... |
2019-10-11 17:51:04 |
| 221.140.151.235 | attack | Oct 11 09:28:57 venus sshd\[31820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.140.151.235 user=root Oct 11 09:28:59 venus sshd\[31820\]: Failed password for root from 221.140.151.235 port 54632 ssh2 Oct 11 09:33:02 venus sshd\[31856\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.140.151.235 user=root ... |
2019-10-11 18:15:57 |
| 185.112.151.153 | attack | Automatic report - Port Scan Attack |
2019-10-11 18:24:08 |
| 134.209.99.209 | attackbotsspam | Oct 9 10:12:13 zn006 sshd[4790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.99.209 user=r.r Oct 9 10:12:15 zn006 sshd[4790]: Failed password for r.r from 134.209.99.209 port 43352 ssh2 Oct 9 10:12:15 zn006 sshd[4790]: Received disconnect from 134.209.99.209: 11: Bye Bye [preauth] Oct 9 10:25:50 zn006 sshd[6217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.99.209 user=r.r Oct 9 10:25:53 zn006 sshd[6217]: Failed password for r.r from 134.209.99.209 port 42416 ssh2 Oct 9 10:25:53 zn006 sshd[6217]: Received disconnect from 134.209.99.209: 11: Bye Bye [preauth] Oct 9 10:30:08 zn006 sshd[6710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.99.209 user=r.r Oct 9 10:30:10 zn006 sshd[6710]: Failed password for r.r from 134.209.99.209 port 56652 ssh2 Oct 9 10:30:10 zn006 sshd[6710]: Received disconnect from 134.209......... ------------------------------- |
2019-10-11 18:31:15 |
| 192.227.252.23 | attackbots | 2019-10-11T09:52:46.223919shield sshd\[6993\]: Invalid user United123 from 192.227.252.23 port 43570 2019-10-11T09:52:46.229581shield sshd\[6993\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.23 2019-10-11T09:52:48.484485shield sshd\[6993\]: Failed password for invalid user United123 from 192.227.252.23 port 43570 ssh2 2019-10-11T09:59:34.586424shield sshd\[7552\]: Invalid user Parola@1234 from 192.227.252.23 port 45582 2019-10-11T09:59:34.592341shield sshd\[7552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.23 |
2019-10-11 18:11:43 |
| 139.59.13.223 | attackspam | Oct 11 03:37:45 localhost sshd\[11151\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.223 user=root Oct 11 03:37:47 localhost sshd\[11151\]: Failed password for root from 139.59.13.223 port 57812 ssh2 Oct 11 03:49:27 localhost sshd\[11359\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.223 user=root ... |
2019-10-11 17:59:58 |
| 139.59.46.243 | attack | Oct 11 09:45:57 web8 sshd\[2647\]: Invalid user qwerty@123 from 139.59.46.243 Oct 11 09:45:57 web8 sshd\[2647\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.46.243 Oct 11 09:45:59 web8 sshd\[2647\]: Failed password for invalid user qwerty@123 from 139.59.46.243 port 52530 ssh2 Oct 11 09:50:29 web8 sshd\[4879\]: Invalid user P4rol41q from 139.59.46.243 Oct 11 09:50:29 web8 sshd\[4879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.46.243 |
2019-10-11 18:04:33 |
| 75.149.254.249 | attack | Telnet Server BruteForce Attack |
2019-10-11 17:49:14 |
| 78.136.224.2 | attack | Oct 9 14:25:26 our-server-hostname postfix/smtpd[27722]: connect from unknown[78.136.224.2] Oct x@x Oct x@x Oct 9 14:25:29 our-server-hostname postfix/smtpd[27722]: lost connection after RCPT from unknown[78.136.224.2] Oct 9 14:25:29 our-server-hostname postfix/smtpd[27722]: disconnect from unknown[78.136.224.2] Oct 9 15:19:47 our-server-hostname postfix/smtpd[29852]: connect from unknown[78.136.224.2] Oct x@x Oct 9 15:19:50 our-server-hostname postfix/smtpd[29852]: lost connection after RCPT from unknown[78.136.224.2] Oct 9 15:19:50 our-server-hostname postfix/smtpd[29852]: disconnect from unknown[78.136.224.2] Oct 9 16:31:33 our-server-hostname postfix/smtpd[30171]: connect from unknown[78.136.224.2] Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct 9 16:31:41 our-server-hostname postfix/smtpd[30171]: lost connection after RCPT from unknown[78.136.224.2] Oct 9 16:31:41 our-server-hostname postfix/smtpd[30171]:........ ------------------------------- |
2019-10-11 18:22:00 |
| 103.72.144.23 | attackspam | Oct 11 05:40:02 rotator sshd\[13366\]: Invalid user Science@123 from 103.72.144.23Oct 11 05:40:03 rotator sshd\[13366\]: Failed password for invalid user Science@123 from 103.72.144.23 port 50120 ssh2Oct 11 05:44:40 rotator sshd\[14141\]: Invalid user Diego_123 from 103.72.144.23Oct 11 05:44:42 rotator sshd\[14141\]: Failed password for invalid user Diego_123 from 103.72.144.23 port 33814 ssh2Oct 11 05:49:19 rotator sshd\[14944\]: Invalid user 123Science from 103.72.144.23Oct 11 05:49:21 rotator sshd\[14944\]: Failed password for invalid user 123Science from 103.72.144.23 port 45746 ssh2 ... |
2019-10-11 18:03:18 |
| 148.70.249.72 | attackspam | Automatic report - Banned IP Access |
2019-10-11 18:12:34 |
| 151.80.46.40 | attackbotsspam | Oct 11 05:56:20 xtremcommunity sshd\[404322\]: Invalid user Alpine!23 from 151.80.46.40 port 60498 Oct 11 05:56:20 xtremcommunity sshd\[404322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.46.40 Oct 11 05:56:21 xtremcommunity sshd\[404322\]: Failed password for invalid user Alpine!23 from 151.80.46.40 port 60498 ssh2 Oct 11 06:00:15 xtremcommunity sshd\[404391\]: Invalid user Welcome2017 from 151.80.46.40 port 43576 Oct 11 06:00:15 xtremcommunity sshd\[404391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.46.40 ... |
2019-10-11 18:15:21 |