City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 21.234.170.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44056
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;21.234.170.66. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012102 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 09:14:35 CST 2025
;; MSG SIZE rcvd: 106Host 66.170.234.21.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 66.170.234.21.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 107.173.191.123 | attack | Honeypot attack, port: 445, PTR: 107-173-191-123-host.colocrossing.com. |
2019-10-26 20:03:54 |
| 180.76.15.27 | attackbotsspam | Automatic report - Banned IP Access |
2019-10-26 19:41:36 |
| 92.119.160.90 | attackspam | Oct 26 12:06:32 h2177944 kernel: \[4960200.537806\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.90 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54414 PROTO=TCP SPT=50663 DPT=1336 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 26 12:06:48 h2177944 kernel: \[4960216.715025\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.90 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=28464 PROTO=TCP SPT=50663 DPT=984 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 26 12:08:39 h2177944 kernel: \[4960327.152349\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.90 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=645 PROTO=TCP SPT=50663 DPT=503 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 26 12:15:40 h2177944 kernel: \[4960748.802148\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.90 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=59605 PROTO=TCP SPT=50663 DPT=806 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 26 12:46:45 h2177944 kernel: \[4962613.364951\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.90 DST=85.214.117.9 LEN= |
2019-10-26 19:25:37 |
| 154.8.164.214 | attackspambots | SSH invalid-user multiple login try |
2019-10-26 19:44:26 |
| 200.98.200.192 | attack | Honeypot attack, port: 445, PTR: 200-98-200-192.clouduol.com.br. |
2019-10-26 19:52:32 |
| 182.18.188.132 | attack | Oct 26 13:22:12 jane sshd[31356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.18.188.132 Oct 26 13:22:14 jane sshd[31356]: Failed password for invalid user krissu from 182.18.188.132 port 56526 ssh2 ... |
2019-10-26 19:29:12 |
| 180.76.15.158 | attack | Automatic report - Banned IP Access |
2019-10-26 19:35:12 |
| 92.86.179.186 | attackbotsspam | Invalid user jp from 92.86.179.186 port 43250 |
2019-10-26 20:05:29 |
| 201.116.194.210 | attack | Oct 26 11:32:43 master sshd[15304]: Failed password for root from 201.116.194.210 port 21208 ssh2 Oct 26 11:59:12 master sshd[15327]: Failed password for root from 201.116.194.210 port 16798 ssh2 Oct 26 12:03:17 master sshd[15635]: Failed password for root from 201.116.194.210 port 21050 ssh2 Oct 26 12:07:36 master sshd[15639]: Failed password for invalid user an from 201.116.194.210 port 25808 ssh2 Oct 26 12:12:04 master sshd[15679]: Failed password for root from 201.116.194.210 port 43072 ssh2 Oct 26 12:17:05 master sshd[15750]: Failed password for root from 201.116.194.210 port 5718 ssh2 Oct 26 12:21:59 master sshd[15775]: Failed password for invalid user super from 201.116.194.210 port 14720 ssh2 Oct 26 12:26:32 master sshd[15779]: Failed password for invalid user silas from 201.116.194.210 port 48695 ssh2 Oct 26 12:31:17 master sshd[16085]: Failed password for root from 201.116.194.210 port 38958 ssh2 Oct 26 12:36:19 master sshd[16093]: Failed password for invalid user michi from 201.116.194.210 port 346 |
2019-10-26 19:22:43 |
| 150.95.110.90 | attack | $f2bV_matches |
2019-10-26 20:03:29 |
| 132.232.1.62 | attack | Oct 26 11:50:18 v22019058497090703 sshd[27816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.1.62 Oct 26 11:50:20 v22019058497090703 sshd[27816]: Failed password for invalid user jenkins from 132.232.1.62 port 34906 ssh2 Oct 26 11:57:11 v22019058497090703 sshd[28318]: Failed password for root from 132.232.1.62 port 44852 ssh2 ... |
2019-10-26 20:04:42 |
| 181.48.116.50 | attack | (sshd) Failed SSH login from 181.48.116.50 (CO/Colombia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 26 12:49:26 server2 sshd[1672]: Invalid user rc from 181.48.116.50 port 58378 Oct 26 12:49:28 server2 sshd[1672]: Failed password for invalid user rc from 181.48.116.50 port 58378 ssh2 Oct 26 13:08:22 server2 sshd[2362]: Invalid user alderdice from 181.48.116.50 port 56880 Oct 26 13:08:23 server2 sshd[2362]: Failed password for invalid user alderdice from 181.48.116.50 port 56880 ssh2 Oct 26 13:11:45 server2 sshd[2449]: Invalid user prueba from 181.48.116.50 port 35572 |
2019-10-26 19:56:25 |
| 187.190.11.249 | attackbotsspam | Honeypot attack, port: 445, PTR: fixed-187-190-11-249.totalplay.net. |
2019-10-26 19:51:18 |
| 60.248.199.194 | attackspam | 2019-10-26T11:18:55.271368abusebot-5.cloudsearch.cf sshd\[17150\]: Invalid user dj from 60.248.199.194 port 53683 |
2019-10-26 19:43:47 |
| 161.117.181.251 | attack | Oct 25 22:58:40 askasleikir sshd[1103799]: Failed password for root from 161.117.181.251 port 59074 ssh2 |
2019-10-26 19:54:28 |