City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 21.134.152.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7353
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;21.134.152.85. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021601 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 09:39:07 CST 2025
;; MSG SIZE rcvd: 106
Host 85.152.134.21.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 85.152.134.21.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 46.102.115.101 | attackspambots | " " |
2019-10-04 05:21:18 |
| 45.67.14.180 | attackspambots | Oct 3 16:53:31 mail sshd\[33070\]: Invalid user oracle from 45.67.14.180 Oct 3 16:53:31 mail sshd\[33070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.67.14.180 ... |
2019-10-04 05:17:33 |
| 118.193.31.19 | attackbots | Oct 3 22:48:35 SilenceServices sshd[20517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.193.31.19 Oct 3 22:48:37 SilenceServices sshd[20517]: Failed password for invalid user forums from 118.193.31.19 port 46352 ssh2 Oct 3 22:53:44 SilenceServices sshd[21846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.193.31.19 |
2019-10-04 05:12:22 |
| 181.174.166.52 | attackbotsspam | Oct 3 16:46:56 localhost kernel: [3873435.115494] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=181.174.166.52 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x20 TTL=72 ID=44699 DF PROTO=TCP SPT=64698 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 3 16:46:56 localhost kernel: [3873435.115523] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=181.174.166.52 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x20 TTL=72 ID=44699 DF PROTO=TCP SPT=64698 DPT=22 SEQ=1276275595 ACK=0 WINDOW=29200 RES=0x00 SYN URGP=0 Oct 3 16:53:31 localhost kernel: [3873830.304759] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=181.174.166.52 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=57 ID=58105 DF PROTO=TCP SPT=64175 DPT=22 SEQ=4138906939 ACK=0 WINDOW=29200 RES=0x00 SYN URGP=0 |
2019-10-04 05:18:07 |
| 180.168.141.246 | attack | Oct 3 11:05:26 hanapaa sshd\[25318\]: Invalid user jboss from 180.168.141.246 Oct 3 11:05:26 hanapaa sshd\[25318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.141.246 Oct 3 11:05:28 hanapaa sshd\[25318\]: Failed password for invalid user jboss from 180.168.141.246 port 56920 ssh2 Oct 3 11:09:23 hanapaa sshd\[25785\]: Invalid user dimas from 180.168.141.246 Oct 3 11:09:23 hanapaa sshd\[25785\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.141.246 |
2019-10-04 05:16:47 |
| 139.199.6.107 | attack | Oct 3 10:49:02 auw2 sshd\[29588\]: Invalid user ilie from 139.199.6.107 Oct 3 10:49:02 auw2 sshd\[29588\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.6.107 Oct 3 10:49:04 auw2 sshd\[29588\]: Failed password for invalid user ilie from 139.199.6.107 port 50101 ssh2 Oct 3 10:53:59 auw2 sshd\[30021\]: Invalid user gozone from 139.199.6.107 Oct 3 10:53:59 auw2 sshd\[30021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.6.107 |
2019-10-04 05:01:21 |
| 113.189.215.36 | attackbotsspam | Chat Spam |
2019-10-04 05:36:24 |
| 184.191.162.4 | attackspambots | Automatic report - Banned IP Access |
2019-10-04 05:29:14 |
| 178.32.211.153 | attackspambots | Automatic report - Banned IP Access |
2019-10-04 05:01:57 |
| 221.10.253.72 | attackbots | Oct 3 22:58:46 MK-Soft-Root2 sshd[17772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.10.253.72 Oct 3 22:58:48 MK-Soft-Root2 sshd[17772]: Failed password for invalid user postgres from 221.10.253.72 port 45438 ssh2 ... |
2019-10-04 05:09:42 |
| 119.29.195.107 | attack | Oct 3 16:49:37 xtremcommunity sshd\[152073\]: Invalid user odroid from 119.29.195.107 port 60522 Oct 3 16:49:37 xtremcommunity sshd\[152073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.195.107 Oct 3 16:49:39 xtremcommunity sshd\[152073\]: Failed password for invalid user odroid from 119.29.195.107 port 60522 ssh2 Oct 3 16:53:57 xtremcommunity sshd\[152120\]: Invalid user nas from 119.29.195.107 port 41752 Oct 3 16:53:57 xtremcommunity sshd\[152120\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.195.107 ... |
2019-10-04 05:01:45 |
| 222.186.52.107 | attackspam | Oct 3 22:57:06 nextcloud sshd\[21000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.107 user=root Oct 3 22:57:08 nextcloud sshd\[21000\]: Failed password for root from 222.186.52.107 port 45390 ssh2 Oct 3 22:57:35 nextcloud sshd\[21652\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.107 user=root ... |
2019-10-04 04:57:45 |
| 88.214.26.8 | attack | Oct 4 03:53:34 webhost01 sshd[23085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.214.26.8 Oct 4 03:53:36 webhost01 sshd[23085]: Failed password for invalid user admin from 88.214.26.8 port 42058 ssh2 ... |
2019-10-04 05:32:06 |
| 171.25.193.20 | attackspambots | www.familiengesundheitszentrum-fulda.de 171.25.193.20 \[03/Oct/2019:22:53:14 +0200\] "POST /xmlrpc.php HTTP/1.0" 301 537 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10.12\; rv:62.0\) Gecko/20100101 Firefox/62.0" familiengesundheitszentrum-fulda.de 171.25.193.20 \[03/Oct/2019:22:53:17 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 3777 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10.12\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-04 05:26:55 |
| 103.17.159.54 | attack | Oct 4 02:37:45 areeb-Workstation sshd[28405]: Failed password for root from 103.17.159.54 port 38040 ssh2 ... |
2019-10-04 05:17:10 |