City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 167.213.121.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43417
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;167.213.121.34. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 01:12:26 CST 2025
;; MSG SIZE rcvd: 107Host 34.121.213.167.in-addr.arpa not found: 2(SERVFAIL)
server can't find 167.213.121.34.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 192.144.204.101 | attackspambots | Oct 16 06:25:07 Ubuntu-1404-trusty-64-minimal sshd\[13424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.204.101 user=root Oct 16 06:25:09 Ubuntu-1404-trusty-64-minimal sshd\[13424\]: Failed password for root from 192.144.204.101 port 45176 ssh2 Oct 16 06:47:17 Ubuntu-1404-trusty-64-minimal sshd\[30087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.204.101 user=root Oct 16 06:47:18 Ubuntu-1404-trusty-64-minimal sshd\[30087\]: Failed password for root from 192.144.204.101 port 36816 ssh2 Oct 16 06:54:33 Ubuntu-1404-trusty-64-minimal sshd\[4741\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.204.101 user=root |
2019-10-16 15:11:30 |
| 186.4.123.139 | attack | Oct 16 09:30:29 pornomens sshd\[10493\]: Invalid user teamspeak3-user from 186.4.123.139 port 55919 Oct 16 09:30:29 pornomens sshd\[10493\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.4.123.139 Oct 16 09:30:31 pornomens sshd\[10493\]: Failed password for invalid user teamspeak3-user from 186.4.123.139 port 55919 ssh2 ... |
2019-10-16 15:36:13 |
| 117.63.125.66 | attackbots | Oct 15 23:07:46 esmtp postfix/smtpd[7791]: lost connection after AUTH from unknown[117.63.125.66] Oct 15 23:07:48 esmtp postfix/smtpd[7761]: lost connection after AUTH from unknown[117.63.125.66] Oct 15 23:07:49 esmtp postfix/smtpd[7793]: lost connection after AUTH from unknown[117.63.125.66] Oct 15 23:07:49 esmtp postfix/smtpd[7791]: lost connection after AUTH from unknown[117.63.125.66] Oct 15 23:07:50 esmtp postfix/smtpd[7761]: lost connection after AUTH from unknown[117.63.125.66] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.63.125.66 |
2019-10-16 15:39:24 |
| 91.77.94.46 | attack | Oct 16 05:26:55 mail sshd[21450]: Invalid user pi from 91.77.94.46 Oct 16 05:26:55 mail sshd[21452]: Invalid user pi from 91.77.94.46 Oct 16 05:26:55 mail sshd[21450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.77.94.46 Oct 16 05:26:55 mail sshd[21450]: Invalid user pi from 91.77.94.46 Oct 16 05:26:57 mail sshd[21450]: Failed password for invalid user pi from 91.77.94.46 port 38910 ssh2 Oct 16 05:26:55 mail sshd[21452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.77.94.46 Oct 16 05:26:55 mail sshd[21452]: Invalid user pi from 91.77.94.46 Oct 16 05:26:57 mail sshd[21452]: Failed password for invalid user pi from 91.77.94.46 port 38912 ssh2 ... |
2019-10-16 15:21:39 |
| 35.227.92.58 | attackspambots | REQUESTED PAGE: /xmlrpc.php |
2019-10-16 15:32:44 |
| 153.210.36.177 | attackspam | 3389BruteforceFW21 |
2019-10-16 15:08:17 |
| 37.17.173.39 | attackspambots | 2019-10-16T06:41:41.055367shield sshd\[30898\]: Invalid user qwerty from 37.17.173.39 port 59926 2019-10-16T06:41:41.060945shield sshd\[30898\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vps-173-39.szerverem.hu 2019-10-16T06:41:43.121232shield sshd\[30898\]: Failed password for invalid user qwerty from 37.17.173.39 port 59926 ssh2 2019-10-16T06:46:18.736593shield sshd\[32269\]: Invalid user gale from 37.17.173.39 port 42768 2019-10-16T06:46:18.740901shield sshd\[32269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vps-173-39.szerverem.hu |
2019-10-16 15:23:36 |
| 186.212.174.243 | attack | Automatic report - Port Scan Attack |
2019-10-16 15:11:56 |
| 104.236.250.155 | attackbots | Oct 16 05:22:57 vpn01 sshd[29340]: Failed password for root from 104.236.250.155 port 43468 ssh2 ... |
2019-10-16 15:17:37 |
| 14.190.134.239 | attackbotsspam | Oct 16 05:09:00 lvps83-169-44-148 sshd[31773]: warning: /etc/hosts.allow, line 26: host name/address mismatch: 14.190.134.239 != static.vnpt.vn Oct 16 05:09:00 lvps83-169-44-148 sshd[31773]: Did not receive identification string from 14.190.134.239 Oct 16 05:09:01 lvps83-169-44-148 sshd[31775]: warning: /etc/hosts.allow, line 26: host name/address mismatch: 14.190.134.239 != static.vnpt.vn Oct 16 05:09:03 lvps83-169-44-148 sshd[31775]: Address 14.190.134.239 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 16 05:09:03 lvps83-169-44-148 sshd[31775]: Invalid user tech from 14.190.134.239 Oct 16 05:09:03 lvps83-169-44-148 sshd[31775]: Failed none for invalid user tech from 14.190.134.239 port 49254 ssh2 Oct 16 05:09:04 lvps83-169-44-148 sshd[31775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.190.134.239 Oct 16 05:09:06 lvps83-169-44-148 sshd[31775]: Failed password for invali........ ------------------------------- |
2019-10-16 15:44:59 |
| 62.173.154.12 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-10-16 15:32:05 |
| 180.117.184.65 | attackbotsspam | Oct 15 23:20:45 esmtp postfix/smtpd[7782]: lost connection after AUTH from unknown[180.117.184.65] Oct 15 23:20:46 esmtp postfix/smtpd[7793]: lost connection after AUTH from unknown[180.117.184.65] Oct 15 23:20:47 esmtp postfix/smtpd[7791]: lost connection after AUTH from unknown[180.117.184.65] Oct 15 23:20:49 esmtp postfix/smtpd[7793]: lost connection after AUTH from unknown[180.117.184.65] Oct 15 23:20:50 esmtp postfix/smtpd[7791]: lost connection after AUTH from unknown[180.117.184.65] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=180.117.184.65 |
2019-10-16 15:24:05 |
| 190.177.92.135 | attackbotsspam | Oct 16 05:08:44 mxgate1 postfix/postscreen[16446]: CONNECT from [190.177.92.135]:40610 to [176.31.12.44]:25 Oct 16 05:08:44 mxgate1 postfix/dnsblog[16451]: addr 190.177.92.135 listed by domain cbl.abuseat.org as 127.0.0.2 Oct 16 05:08:44 mxgate1 postfix/dnsblog[16449]: addr 190.177.92.135 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 16 05:08:44 mxgate1 postfix/dnsblog[16449]: addr 190.177.92.135 listed by domain zen.spamhaus.org as 127.0.0.4 Oct 16 05:08:44 mxgate1 postfix/dnsblog[16448]: addr 190.177.92.135 listed by domain bl.spamcop.net as 127.0.0.2 Oct 16 05:08:44 mxgate1 postfix/dnsblog[16447]: addr 190.177.92.135 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 16 05:08:50 mxgate1 postfix/postscreen[16446]: DNSBL rank 5 for [190.177.92.135]:40610 Oct x@x Oct 16 05:08:52 mxgate1 postfix/postscreen[16446]: HANGUP after 2.2 from [190.177.92.135]:40610 in tests after SMTP handshake Oct 16 05:08:52 mxgate1 postfix/postscreen[16446]: DISCONNECT [190.177.9........ ------------------------------- |
2019-10-16 15:40:58 |
| 51.254.37.192 | attackbotsspam | Oct 16 08:21:18 ArkNodeAT sshd\[26245\]: Invalid user test from 51.254.37.192 Oct 16 08:21:18 ArkNodeAT sshd\[26245\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.37.192 Oct 16 08:21:20 ArkNodeAT sshd\[26245\]: Failed password for invalid user test from 51.254.37.192 port 42046 ssh2 |
2019-10-16 15:27:54 |
| 198.108.67.46 | attackspambots | firewall-block, port(s): 8585/tcp |
2019-10-16 15:40:24 |