City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.21.50.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12701
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;107.21.50.80. IN A
;; AUTHORITY SECTION:
. 531 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400
;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 20 19:57:32 CST 2022
;; MSG SIZE rcvd: 10580.50.21.107.in-addr.arpa domain name pointer ec2-107-21-50-80.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
80.50.21.107.in-addr.arpa name = ec2-107-21-50-80.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 193.19.119.176 | normal | Is this the same person I was talking to on Plenty of Fish don't know holler |
2019-12-12 20:00:00 |
| 68.183.134.134 | attack | 68.183.134.134 - - \[12/Dec/2019:07:25:32 +0100\] "POST /wp-login.php HTTP/1.0" 200 7524 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 68.183.134.134 - - \[12/Dec/2019:07:25:39 +0100\] "POST /wp-login.php HTTP/1.0" 200 7391 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 68.183.134.134 - - \[12/Dec/2019:07:25:45 +0100\] "POST /wp-login.php HTTP/1.0" 200 7387 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-12-12 19:25:43 |
| 110.137.170.253 | attackbotsspam | 1576131840 - 12/12/2019 07:24:00 Host: 110.137.170.253/110.137.170.253 Port: 445 TCP Blocked |
2019-12-12 19:18:14 |
| 5.141.81.157 | attackspam | 1576131799 - 12/12/2019 07:23:19 Host: 5.141.81.157/5.141.81.157 Port: 445 TCP Blocked |
2019-12-12 19:24:55 |
| 77.247.109.59 | attackbotsspam | \[2019-12-12 06:31:37\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-12T06:31:37.479-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="84201148632170012",SessionID="0x7f0fb4767338",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.59/57771",ACLName="no_extension_match" \[2019-12-12 06:31:59\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-12T06:31:59.119-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="197201148122518001",SessionID="0x7f0fb404fe78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.59/55736",ACLName="no_extension_match" \[2019-12-12 06:32:23\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-12T06:32:23.843-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="305401148134454001",SessionID="0x7f0fb4987948",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.59/49710",ACLName |
2019-12-12 19:32:55 |
| 144.121.14.152 | attack | 1576131786 - 12/12/2019 07:23:06 Host: 144.121.14.152/144.121.14.152 Port: 445 TCP Blocked |
2019-12-12 19:29:22 |
| 187.188.169.123 | attackbots | Automatic report: SSH brute force attempt |
2019-12-12 19:39:43 |
| 77.105.74.146 | attack | Dec 12 09:56:09 [munged] sshd[28360]: Failed password for root from 77.105.74.146 port 47135 ssh2 |
2019-12-12 19:47:34 |
| 51.83.69.78 | attackspambots | Dec 12 11:36:35 MK-Soft-VM3 sshd[9467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.69.78 Dec 12 11:36:36 MK-Soft-VM3 sshd[9467]: Failed password for invalid user kj from 51.83.69.78 port 34206 ssh2 ... |
2019-12-12 19:24:01 |
| 68.183.142.240 | attackbots | Dec 12 11:57:08 sip sshd[24124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.142.240 Dec 12 11:57:09 sip sshd[24124]: Failed password for invalid user bisson from 68.183.142.240 port 57556 ssh2 Dec 12 12:04:30 sip sshd[24206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.142.240 |
2019-12-12 19:18:34 |
| 184.105.247.251 | attack | BAD_IP |
2019-12-12 19:29:10 |
| 46.182.7.35 | attack | Dec 12 11:58:36 MK-Soft-VM4 sshd[21809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.182.7.35 Dec 12 11:58:38 MK-Soft-VM4 sshd[21809]: Failed password for invalid user cyrus from 46.182.7.35 port 51434 ssh2 ... |
2019-12-12 19:51:37 |
| 159.203.201.102 | attackspam | firewall-block, port(s): 9080/tcp |
2019-12-12 19:54:20 |
| 58.87.66.249 | attackbots | Dec 12 11:56:07 v22018086721571380 sshd[916]: Failed password for invalid user rpm from 58.87.66.249 port 37168 ssh2 |
2019-12-12 19:47:58 |
| 118.25.103.132 | attackspambots | Dec 11 23:56:50 web1 sshd\[27463\]: Invalid user Administrator from 118.25.103.132 Dec 11 23:56:50 web1 sshd\[27463\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.103.132 Dec 11 23:56:52 web1 sshd\[27463\]: Failed password for invalid user Administrator from 118.25.103.132 port 58604 ssh2 Dec 12 00:02:56 web1 sshd\[28063\]: Invalid user root@root from 118.25.103.132 Dec 12 00:02:56 web1 sshd\[28063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.103.132 |
2019-12-12 19:42:12 |