City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 21.0.78.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23085
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;21.0.78.138. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025031401 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 15 09:29:25 CST 2025
;; MSG SIZE rcvd: 104Host 138.78.0.21.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 138.78.0.21.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 220.74.48.104 | attack | Aug 11 07:47:49 cumulus sshd[23764]: Bad protocol version identification '' from 220.74.48.104 port 59472 Aug 11 07:47:50 cumulus sshd[23765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.74.48.104 user=r.r Aug 11 07:47:52 cumulus sshd[23765]: Failed password for r.r from 220.74.48.104 port 59511 ssh2 Aug 11 07:47:52 cumulus sshd[23765]: Connection closed by 220.74.48.104 port 59511 [preauth] Aug 11 07:47:54 cumulus sshd[23772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.74.48.104 user=r.r Aug 11 07:47:55 cumulus sshd[23772]: Failed password for r.r from 220.74.48.104 port 59754 ssh2 Aug 11 07:47:55 cumulus sshd[23772]: Connection closed by 220.74.48.104 port 59754 [preauth] Aug 11 07:47:56 cumulus sshd[23785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.74.48.104 user=r.r Aug 11 07:47:58 cumulus sshd[23785]: Failed password ........ ------------------------------- |
2020-08-12 01:01:49 |
| 66.33.212.126 | attackbotsspam | familiengesundheitszentrum-fulda.de 66.33.212.126 [11/Aug/2020:16:18:48 +0200] "POST /wp-login.php HTTP/1.1" 200 6078 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" familiengesundheitszentrum-fulda.de 66.33.212.126 [11/Aug/2020:16:18:49 +0200] "POST /wp-login.php HTTP/1.1" 200 6039 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-12 01:23:10 |
| 205.251.148.50 | attack | PTA! |
2020-08-12 01:25:52 |
| 106.13.197.159 | attackbotsspam | detected by Fail2Ban |
2020-08-12 01:40:44 |
| 2001:41d0:1:8ebd::1 | attackspam | 2001:41d0:1:8ebd::1 - - [11/Aug/2020:13:08:58 +0100] "POST /wp-login.php HTTP/1.1" 200 2345 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2001:41d0:1:8ebd::1 - - [11/Aug/2020:13:08:58 +0100] "POST /wp-login.php HTTP/1.1" 200 2329 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2001:41d0:1:8ebd::1 - - [11/Aug/2020:13:08:59 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-12 01:15:34 |
| 106.13.228.62 | attackbots | 2020-08-11T18:45:19.800077afi-git.jinr.ru sshd[2418]: Failed password for root from 106.13.228.62 port 38532 ssh2 2020-08-11T18:47:27.710202afi-git.jinr.ru sshd[3124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.228.62 user=root 2020-08-11T18:47:29.777699afi-git.jinr.ru sshd[3124]: Failed password for root from 106.13.228.62 port 57158 ssh2 2020-08-11T18:49:36.166176afi-git.jinr.ru sshd[3591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.228.62 user=root 2020-08-11T18:49:37.943760afi-git.jinr.ru sshd[3591]: Failed password for root from 106.13.228.62 port 47544 ssh2 ... |
2020-08-12 01:38:09 |
| 1.119.195.58 | attackspam | Aug 10 20:10:36 h2065291 sshd[7568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.119.195.58 user=r.r Aug 10 20:10:38 h2065291 sshd[7568]: Failed password for r.r from 1.119.195.58 port 45251 ssh2 Aug 10 20:10:38 h2065291 sshd[7568]: Received disconnect from 1.119.195.58: 11: Bye Bye [preauth] Aug 10 20:15:54 h2065291 sshd[7576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.119.195.58 user=r.r Aug 10 20:15:56 h2065291 sshd[7576]: Failed password for r.r from 1.119.195.58 port 9940 ssh2 Aug 10 20:15:56 h2065291 sshd[7576]: Received disconnect from 1.119.195.58: 11: Bye Bye [preauth] Aug 10 20:18:04 h2065291 sshd[7583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.119.195.58 user=r.r Aug 10 20:18:06 h2065291 sshd[7583]: Failed password for r.r from 1.119.195.58 port 21240 ssh2 Aug 10 20:18:06 h2065291 sshd[7583]: Received disconnect fro........ ------------------------------- |
2020-08-12 01:37:01 |
| 27.255.27.108 | attackspam | Port Scan ... |
2020-08-12 01:01:11 |
| 106.12.204.81 | attackspam | Aug 11 12:53:21 localhost sshd[33365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.204.81 user=root Aug 11 12:53:23 localhost sshd[33365]: Failed password for root from 106.12.204.81 port 44664 ssh2 Aug 11 12:58:13 localhost sshd[33920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.204.81 user=root Aug 11 12:58:15 localhost sshd[33920]: Failed password for root from 106.12.204.81 port 42184 ssh2 Aug 11 13:02:54 localhost sshd[34462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.204.81 user=root Aug 11 13:02:56 localhost sshd[34462]: Failed password for root from 106.12.204.81 port 39688 ssh2 ... |
2020-08-12 01:38:27 |
| 51.77.39.255 | attack | Automatic report - Banned IP Access |
2020-08-12 01:11:18 |
| 121.122.103.87 | attackspam | Brute-force attempt banned |
2020-08-12 01:35:38 |
| 197.46.45.195 | attack | 1597147748 - 08/11/2020 14:09:08 Host: 197.46.45.195/197.46.45.195 Port: 445 TCP Blocked |
2020-08-12 01:06:43 |
| 46.114.34.156 | attackspambots | Chat Spam |
2020-08-12 01:43:15 |
| 69.51.16.248 | attackbots | 2020-08-11T17:19:11.709033shield sshd\[30346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.51.16.248 user=root 2020-08-11T17:19:13.044914shield sshd\[30346\]: Failed password for root from 69.51.16.248 port 52098 ssh2 2020-08-11T17:21:56.393484shield sshd\[30594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.51.16.248 user=root 2020-08-11T17:21:58.381824shield sshd\[30594\]: Failed password for root from 69.51.16.248 port 39792 ssh2 2020-08-11T17:24:34.101603shield sshd\[30844\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.51.16.248 user=root |
2020-08-12 01:26:12 |
| 202.77.105.98 | attack | SSH brute-force attempt |
2020-08-12 01:05:42 |