City: unknown
Region: unknown
Country: Argentina
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 181.0.139.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18621
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;181.0.139.21. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025032002 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 21 12:17:57 CST 2025
;; MSG SIZE rcvd: 10521.139.0.181.in-addr.arpa domain name pointer host21.181-0-139.telecom.net.ar.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
21.139.0.181.in-addr.arpa name = host21.181-0-139.telecom.net.ar.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 182.75.216.190 | attack | 2020-02-14T04:12:29.4341021495-001 sshd[10350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.216.190 2020-02-14T04:12:29.4304441495-001 sshd[10350]: Invalid user murad from 182.75.216.190 port 42934 2020-02-14T04:12:31.6597541495-001 sshd[10350]: Failed password for invalid user murad from 182.75.216.190 port 42934 ssh2 2020-02-14T05:15:11.6514661495-001 sshd[13772]: Invalid user dev from 182.75.216.190 port 34385 2020-02-14T05:15:11.6549361495-001 sshd[13772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.216.190 2020-02-14T05:15:11.6514661495-001 sshd[13772]: Invalid user dev from 182.75.216.190 port 34385 2020-02-14T05:15:13.3380901495-001 sshd[13772]: Failed password for invalid user dev from 182.75.216.190 port 34385 ssh2 2020-02-14T05:18:13.9276221495-001 sshd[13926]: Invalid user video from 182.75.216.190 port 58293 2020-02-14T05:18:13.9359041495-001 sshd[13926]: pam_unix(sshd:auth ... |
2020-02-14 19:11:07 |
| 163.172.57.247 | attackspam | [portscan] tcp/22 [SSH] in blocklist.de:'listed [ssh]' *(RWIN=65535)(02141215) |
2020-02-14 19:36:53 |
| 120.31.160.67 | attackbots | Honeypot attack, port: 445, PTR: ns1.eflydns.net. |
2020-02-14 19:32:06 |
| 183.81.57.192 | attackbotsspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-02-14 19:21:17 |
| 119.207.149.137 | attackbots | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-14 18:54:28 |
| 114.33.127.115 | attack | Thu Feb 13 21:52:21 2020 - Child process 87787 handling connection Thu Feb 13 21:52:21 2020 - New connection from: 114.33.127.115:53067 Thu Feb 13 21:52:21 2020 - Sending data to client: [Login: ] Thu Feb 13 21:52:21 2020 - Child process 87788 handling connection Thu Feb 13 21:52:21 2020 - New connection from: 114.33.127.115:53068 Thu Feb 13 21:52:21 2020 - Sending data to client: [Login: ] Thu Feb 13 21:52:21 2020 - Got data: root Thu Feb 13 21:52:22 2020 - Sending data to client: [Password: ] Thu Feb 13 21:52:22 2020 - Got data: 1234 Thu Feb 13 21:52:24 2020 - Child 87787 exiting Thu Feb 13 21:52:24 2020 - Child 87794 granting shell Thu Feb 13 21:52:24 2020 - Sending data to client: [Logged in] Thu Feb 13 21:52:24 2020 - Sending data to client: [Welcome to MX990 Embedded Linux] Thu Feb 13 21:52:24 2020 - Sending data to client: [[root@dvrdvs /]# ] Thu Feb 13 21:52:25 2020 - Got data: enable system shell sh Thu Feb 13 21:52:25 2020 - Sending data to client: [Command not found] T |
2020-02-14 19:28:11 |
| 176.113.115.138 | attack | Automatic report - Port Scan |
2020-02-14 19:19:46 |
| 201.148.64.46 | attack | Honeypot attack, port: 445, PTR: 46.201-148-64.bestelclientes.com.mx. |
2020-02-14 19:31:18 |
| 183.104.15.232 | attackbots | Honeypot attack, port: 81, PTR: PTR record not found |
2020-02-14 19:29:04 |
| 201.149.89.57 | attack | Feb 14 02:03:50 ns392434 sshd[10167]: Invalid user s1 from 201.149.89.57 port 40343 Feb 14 02:03:50 ns392434 sshd[10167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.149.89.57 Feb 14 02:03:50 ns392434 sshd[10167]: Invalid user s1 from 201.149.89.57 port 40343 Feb 14 02:03:52 ns392434 sshd[10167]: Failed password for invalid user s1 from 201.149.89.57 port 40343 ssh2 Feb 14 04:51:16 ns392434 sshd[13253]: Invalid user lzt from 201.149.89.57 port 57126 Feb 14 04:51:16 ns392434 sshd[13253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.149.89.57 Feb 14 04:51:16 ns392434 sshd[13253]: Invalid user lzt from 201.149.89.57 port 57126 Feb 14 04:51:17 ns392434 sshd[13253]: Failed password for invalid user lzt from 201.149.89.57 port 57126 ssh2 Feb 14 05:52:41 ns392434 sshd[13806]: Invalid user ts3 from 201.149.89.57 port 43785 |
2020-02-14 19:02:26 |
| 120.39.3.25 | attackspam | SSH bruteforce (Triggered fail2ban) |
2020-02-14 19:26:26 |
| 201.96.205.157 | attackbots | (sshd) Failed SSH login from 201.96.205.157 (MX/Mexico/customer-201-96-205-157.uninet-ide.com.mx): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Feb 14 11:48:16 ubnt-55d23 sshd[2212]: Invalid user apache from 201.96.205.157 port 55450 Feb 14 11:48:18 ubnt-55d23 sshd[2212]: Failed password for invalid user apache from 201.96.205.157 port 55450 ssh2 |
2020-02-14 18:55:05 |
| 119.206.63.156 | attackbots | Honeypot attack, port: 81, PTR: PTR record not found |
2020-02-14 19:12:19 |
| 119.202.43.113 | attackbotsspam | Honeypot attack, port: 81, PTR: PTR record not found |
2020-02-14 19:10:35 |
| 119.206.33.119 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-14 19:15:08 |