City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 21.142.90.182
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22530
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;21.142.90.182. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021701 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 12:33:46 CST 2025
;; MSG SIZE rcvd: 106
Host 182.90.142.21.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 182.90.142.21.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 138.68.92.121 | attackbotsspam | Jul 19 11:19:46 root sshd[8979]: Invalid user es from 138.68.92.121 ... |
2020-07-19 16:28:35 |
| 91.134.173.100 | attackbots | Jul 19 07:53:51 plex-server sshd[3661793]: Invalid user javi from 91.134.173.100 port 36372 Jul 19 07:53:51 plex-server sshd[3661793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.173.100 Jul 19 07:53:51 plex-server sshd[3661793]: Invalid user javi from 91.134.173.100 port 36372 Jul 19 07:53:53 plex-server sshd[3661793]: Failed password for invalid user javi from 91.134.173.100 port 36372 ssh2 Jul 19 07:56:01 plex-server sshd[3662619]: Invalid user sharon from 91.134.173.100 port 46846 ... |
2020-07-19 15:58:28 |
| 182.74.25.246 | attack | invalid user jc from 182.74.25.246 port 21091 ssh2 |
2020-07-19 15:53:02 |
| 14.182.64.97 | attackbotsspam | 20/7/19@03:55:30: FAIL: Alarm-Intrusion address from=14.182.64.97 ... |
2020-07-19 16:32:05 |
| 159.65.172.240 | attack | 2020-07-19 09:55:50,340 fail2ban.actions: WARNING [ssh] Ban 159.65.172.240 |
2020-07-19 16:11:23 |
| 218.92.0.223 | attackbotsspam | 2020-07-19T11:01:02.804778afi-git.jinr.ru sshd[16041]: Failed password for root from 218.92.0.223 port 13163 ssh2 2020-07-19T11:01:06.281169afi-git.jinr.ru sshd[16041]: Failed password for root from 218.92.0.223 port 13163 ssh2 2020-07-19T11:01:09.175045afi-git.jinr.ru sshd[16041]: Failed password for root from 218.92.0.223 port 13163 ssh2 2020-07-19T11:01:09.175185afi-git.jinr.ru sshd[16041]: error: maximum authentication attempts exceeded for root from 218.92.0.223 port 13163 ssh2 [preauth] 2020-07-19T11:01:09.175199afi-git.jinr.ru sshd[16041]: Disconnecting: Too many authentication failures [preauth] ... |
2020-07-19 16:01:53 |
| 41.59.227.49 | attackspam | Jul 19 07:50:52 plex-server sshd[3660830]: Invalid user status from 41.59.227.49 port 52714 Jul 19 07:50:52 plex-server sshd[3660830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.59.227.49 Jul 19 07:50:52 plex-server sshd[3660830]: Invalid user status from 41.59.227.49 port 52714 Jul 19 07:50:54 plex-server sshd[3660830]: Failed password for invalid user status from 41.59.227.49 port 52714 ssh2 Jul 19 07:55:44 plex-server sshd[3662456]: Invalid user igor from 41.59.227.49 port 52715 ... |
2020-07-19 16:14:58 |
| 151.80.60.151 | attackspambots | Jul 19 07:47:34 jumpserver sshd[130488]: Invalid user test1 from 151.80.60.151 port 59082 Jul 19 07:47:37 jumpserver sshd[130488]: Failed password for invalid user test1 from 151.80.60.151 port 59082 ssh2 Jul 19 07:55:23 jumpserver sshd[130569]: Invalid user ftpuser1 from 151.80.60.151 port 51848 ... |
2020-07-19 16:37:00 |
| 112.85.42.176 | attackspambots | Jul 19 09:55:48 * sshd[28911]: Failed password for root from 112.85.42.176 port 14512 ssh2 Jul 19 09:56:01 * sshd[28911]: error: maximum authentication attempts exceeded for root from 112.85.42.176 port 14512 ssh2 [preauth] |
2020-07-19 15:59:58 |
| 94.102.49.65 | attack | Jul 19 06:34:14 WHD8 dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\ |
2020-07-19 15:55:04 |
| 87.251.74.62 | attackspambots | Jul 19 09:55:53 debian-2gb-nbg1-2 kernel: \[17403899.278397\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=87.251.74.62 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=16117 PROTO=TCP SPT=50082 DPT=33667 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-19 16:06:31 |
| 111.72.195.127 | attackspambots | Jul 19 09:49:50 srv1 postfix/smtpd[11214]: warning: unknown[111.72.195.127]: SASL LOGIN authentication failed: authentication failure Jul 19 09:56:58 srv1 postfix/smtpd[12080]: warning: unknown[111.72.195.127]: SASL LOGIN authentication failed: authentication failure Jul 19 09:56:59 srv1 postfix/smtpd[12080]: warning: unknown[111.72.195.127]: SASL LOGIN authentication failed: authentication failure Jul 19 09:57:00 srv1 postfix/smtpd[12080]: warning: unknown[111.72.195.127]: SASL LOGIN authentication failed: authentication failure Jul 19 09:57:02 srv1 postfix/smtpd[12080]: warning: unknown[111.72.195.127]: SASL LOGIN authentication failed: authentication failure ... |
2020-07-19 16:03:54 |
| 49.233.148.122 | attackspambots | Unauthorized access or intrusion attempt detected from Thor banned IP |
2020-07-19 16:28:18 |
| 192.99.34.42 | attack | 192.99.34.42 - - [19/Jul/2020:09:10:44 +0100] "POST /wp-login.php HTTP/1.1" 200 5742 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 192.99.34.42 - - [19/Jul/2020:09:11:33 +0100] "POST /wp-login.php HTTP/1.1" 200 5742 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 192.99.34.42 - - [19/Jul/2020:09:12:42 +0100] "POST /wp-login.php HTTP/1.1" 200 5742 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" ... |
2020-07-19 16:35:45 |
| 140.143.126.224 | attackspam | SSH authentication failure x 6 reported by Fail2Ban ... |
2020-07-19 15:54:08 |