City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 129.21.134.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19495
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;129.21.134.121. IN A
;; AUTHORITY SECTION:
. 507 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030802 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 04:48:33 CST 2022
;; MSG SIZE rcvd: 107121.134.21.129.in-addr.arpa domain name pointer kgcoe-eme72.main.ad.rit.edu.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
121.134.21.129.in-addr.arpa name = kgcoe-eme72.main.ad.rit.edu.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 118.24.82.164 | attackspam | Aug 23 18:39:02 raspberrypi sshd\[7369\]: Invalid user china from 118.24.82.164Aug 23 18:39:04 raspberrypi sshd\[7369\]: Failed password for invalid user china from 118.24.82.164 port 60752 ssh2Aug 23 18:47:38 raspberrypi sshd\[7930\]: Failed password for root from 118.24.82.164 port 43196 ssh2 ... |
2019-08-24 08:04:38 |
| 46.35.83.72 | attackspam | Aug 23 17:50:13 pl3server sshd[2040403]: Did not receive identification string from 46.35.83.72 Aug 23 17:50:17 pl3server sshd[2040415]: Invalid user thostname0nich from 46.35.83.72 Aug 23 17:50:17 pl3server sshd[2040415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=adsl-46-35-83-72.dynamic.yemennet.ye Aug 23 17:50:19 pl3server sshd[2040415]: Failed password for invalid user thostname0nich from 46.35.83.72 port 58786 ssh2 Aug 23 17:50:20 pl3server sshd[2040415]: Connection closed by 46.35.83.72 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=46.35.83.72 |
2019-08-24 08:01:53 |
| 114.44.144.220 | attack | : |
2019-08-24 08:01:21 |
| 106.12.198.21 | attackspambots | Aug 23 17:57:44 mail sshd[12960]: Invalid user sl from 106.12.198.21 Aug 23 17:57:44 mail sshd[12960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.198.21 Aug 23 17:57:44 mail sshd[12960]: Invalid user sl from 106.12.198.21 Aug 23 17:57:46 mail sshd[12960]: Failed password for invalid user sl from 106.12.198.21 port 41248 ssh2 Aug 23 18:14:19 mail sshd[15185]: Invalid user upload from 106.12.198.21 ... |
2019-08-24 08:13:21 |
| 185.220.101.58 | attack | REQUESTED PAGE: /wp-login.php |
2019-08-24 08:32:56 |
| 85.241.49.89 | attackbotsspam | Aug 23 20:04:59 OPSO sshd\[11881\]: Invalid user zzz from 85.241.49.89 port 38608 Aug 23 20:04:59 OPSO sshd\[11881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.241.49.89 Aug 23 20:05:01 OPSO sshd\[11881\]: Failed password for invalid user zzz from 85.241.49.89 port 38608 ssh2 Aug 23 20:09:11 OPSO sshd\[12421\]: Invalid user wuhao from 85.241.49.89 port 54756 Aug 23 20:09:11 OPSO sshd\[12421\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.241.49.89 |
2019-08-24 08:12:32 |
| 181.23.224.100 | attackbots | 2019-08-23 17:42:12 unexpected disconnection while reading SMTP command from (181-23-224-100.speedy.com.ar) [181.23.224.100]:60475 I=[10.100.18.25]:25 (error: Connection reset by peer) 2019-08-23 17:43:26 unexpected disconnection while reading SMTP command from (181-23-224-100.speedy.com.ar) [181.23.224.100]:18312 I=[10.100.18.25]:25 (error: Connection reset by peer) 2019-08-23 17:44:04 unexpected disconnection while reading SMTP command from (181-23-224-100.speedy.com.ar) [181.23.224.100]:21877 I=[10.100.18.25]:25 (error: Connection reset by peer) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=181.23.224.100 |
2019-08-24 08:28:48 |
| 51.68.198.119 | attackspam | Aug 24 01:25:24 mail sshd\[11911\]: Invalid user access from 51.68.198.119 port 56324 Aug 24 01:25:24 mail sshd\[11911\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.198.119 Aug 24 01:25:26 mail sshd\[11911\]: Failed password for invalid user access from 51.68.198.119 port 56324 ssh2 Aug 24 01:29:55 mail sshd\[12458\]: Invalid user yang from 51.68.198.119 port 45830 Aug 24 01:29:55 mail sshd\[12458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.198.119 |
2019-08-24 08:25:58 |
| 111.250.130.252 | attack | 23/tcp [2019-08-23]1pkt |
2019-08-24 08:38:24 |
| 185.59.143.170 | attackspam | [portscan] Port scan |
2019-08-24 08:07:51 |
| 177.7.217.57 | attackspambots | Aug 23 14:00:46 auw2 sshd\[10858\]: Invalid user ftpuser from 177.7.217.57 Aug 23 14:00:46 auw2 sshd\[10858\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=4832574137.e.brasiltelecom.net.br Aug 23 14:00:48 auw2 sshd\[10858\]: Failed password for invalid user ftpuser from 177.7.217.57 port 33140 ssh2 Aug 23 14:06:31 auw2 sshd\[11393\]: Invalid user tanvir from 177.7.217.57 Aug 23 14:06:31 auw2 sshd\[11393\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=4832574137.e.brasiltelecom.net.br |
2019-08-24 08:06:56 |
| 51.38.80.173 | attack | Aug 24 01:47:07 SilenceServices sshd[23793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.80.173 Aug 24 01:47:09 SilenceServices sshd[23793]: Failed password for invalid user cms from 51.38.80.173 port 48460 ssh2 Aug 24 01:51:08 SilenceServices sshd[30352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.80.173 |
2019-08-24 08:02:20 |
| 185.118.198.140 | attack | Aug 24 02:05:03 mail postfix/smtpd\[12302\]: warning: 185-118-198-140.clients.srvfarm.net\[185.118.198.140\]: SASL CRAM-MD5 authentication failed: Invalid authentication mechanism Aug 24 02:05:31 mail postfix/smtpd\[11802\]: warning: 185-118-198-140.clients.srvfarm.net\[185.118.198.140\]: SASL CRAM-MD5 authentication failed: Invalid authentication mechanism Aug 24 02:05:31 mail postfix/smtpd\[11920\]: warning: 185-118-198-140.clients.srvfarm.net\[185.118.198.140\]: SASL CRAM-MD5 authentication failed: Invalid authentication mechanism Aug 24 02:05:31 mail postfix/smtpd\[15649\]: warning: 185-118-198-140.clients.srvfarm.net\[185.118.198.140\]: SASL CRAM-MD5 authentication failed: Invalid authentication mechanism |
2019-08-24 08:23:26 |
| 93.77.188.167 | attackbots | 5555/tcp [2019-08-23]1pkt |
2019-08-24 08:39:35 |
| 104.233.252.198 | attackbotsspam | 445/tcp [2019-08-23]1pkt |
2019-08-24 08:34:03 |