City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 21.185.112.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50771
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;21.185.112.42. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020602 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 06:44:43 CST 2025
;; MSG SIZE rcvd: 106
Host 42.112.185.21.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 42.112.185.21.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.64.33.38 | attack | SSH brutforce |
2020-09-04 16:04:19 |
| 3.14.29.148 | attackbotsspam | mue-0 : Trying access unauthorized files=>/images/jdownloads/screenshots/update.php() |
2020-09-04 16:31:11 |
| 218.92.0.175 | attackspam | Sep 4 08:18:12 localhost sshd[56229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.175 user=root Sep 4 08:18:15 localhost sshd[56229]: Failed password for root from 218.92.0.175 port 52062 ssh2 Sep 4 08:18:17 localhost sshd[56229]: Failed password for root from 218.92.0.175 port 52062 ssh2 Sep 4 08:18:12 localhost sshd[56229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.175 user=root Sep 4 08:18:15 localhost sshd[56229]: Failed password for root from 218.92.0.175 port 52062 ssh2 Sep 4 08:18:17 localhost sshd[56229]: Failed password for root from 218.92.0.175 port 52062 ssh2 Sep 4 08:18:12 localhost sshd[56229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.175 user=root Sep 4 08:18:15 localhost sshd[56229]: Failed password for root from 218.92.0.175 port 52062 ssh2 Sep 4 08:18:17 localhost sshd[56229]: Failed password fo ... |
2020-09-04 16:18:40 |
| 51.83.125.8 | attack | <6 unauthorized SSH connections |
2020-09-04 16:03:19 |
| 86.108.43.243 | attackspam | SMB Server BruteForce Attack |
2020-09-04 15:53:17 |
| 183.100.236.215 | attack | Sep 4 08:13:32 vm1 sshd[31416]: Failed password for root from 183.100.236.215 port 51796 ssh2 ... |
2020-09-04 16:31:51 |
| 118.27.19.93 | attack | Sep 4 03:36:39 webhost01 sshd[15392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.27.19.93 Sep 4 03:36:41 webhost01 sshd[15392]: Failed password for invalid user public from 118.27.19.93 port 34618 ssh2 ... |
2020-09-04 16:13:11 |
| 5.160.243.153 | attack | Sep 4 08:11:15 sigma sshd\[5343\]: Invalid user admin from 5.160.243.153Sep 4 08:11:17 sigma sshd\[5343\]: Failed password for invalid user admin from 5.160.243.153 port 57450 ssh2 ... |
2020-09-04 16:23:15 |
| 218.92.0.246 | attack | Sep 4 04:47:51 firewall sshd[4279]: Failed password for root from 218.92.0.246 port 16241 ssh2 Sep 4 04:47:54 firewall sshd[4279]: Failed password for root from 218.92.0.246 port 16241 ssh2 Sep 4 04:47:57 firewall sshd[4279]: Failed password for root from 218.92.0.246 port 16241 ssh2 ... |
2020-09-04 16:08:28 |
| 200.9.67.48 | attackspam | Honeypot attack, port: 445, PTR: 200-9-67-48.rev.parauapebas.pa.gov.br. |
2020-09-04 16:14:55 |
| 41.86.34.45 | attackspam | Attempted connection to port 445. |
2020-09-04 16:30:21 |
| 112.85.42.89 | attackbotsspam | Sep 4 13:31:53 dhoomketu sshd[2859002]: Failed password for root from 112.85.42.89 port 23081 ssh2 Sep 4 13:33:11 dhoomketu sshd[2859011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89 user=root Sep 4 13:33:13 dhoomketu sshd[2859011]: Failed password for root from 112.85.42.89 port 33105 ssh2 Sep 4 13:34:32 dhoomketu sshd[2859030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89 user=root Sep 4 13:34:35 dhoomketu sshd[2859030]: Failed password for root from 112.85.42.89 port 10006 ssh2 ... |
2020-09-04 16:11:57 |
| 114.141.132.88 | attackbots | Sep 4 03:41:36 Tower sshd[9952]: Connection from 114.141.132.88 port 44608 on 192.168.10.220 port 22 rdomain "" Sep 4 03:41:38 Tower sshd[9952]: Invalid user philip from 114.141.132.88 port 44608 Sep 4 03:41:38 Tower sshd[9952]: error: Could not get shadow information for NOUSER Sep 4 03:41:38 Tower sshd[9952]: Failed password for invalid user philip from 114.141.132.88 port 44608 ssh2 Sep 4 03:41:39 Tower sshd[9952]: Received disconnect from 114.141.132.88 port 44608:11: Bye Bye [preauth] Sep 4 03:41:39 Tower sshd[9952]: Disconnected from invalid user philip 114.141.132.88 port 44608 [preauth] |
2020-09-04 15:56:57 |
| 111.231.90.235 | attack | 111.231.90.235 - - [04/Sep/2020:07:52:32 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 111.231.90.235 - - [04/Sep/2020:07:52:39 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 111.231.90.235 - - [04/Sep/2020:07:52:41 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-04 16:02:40 |
| 36.112.128.193 | attackbotsspam | Attempted connection to port 22046. |
2020-09-04 16:32:04 |