City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 21.57.142.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25603
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;21.57.142.2. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400
;; Query time: 198 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 08:44:25 CST 2025
;; MSG SIZE rcvd: 104Host 2.142.57.21.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 2.142.57.21.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.12.207.197 | attackspam | Jun 2 08:11:40 server1 sshd\[26755\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.207.197 user=root Jun 2 08:11:41 server1 sshd\[26755\]: Failed password for root from 106.12.207.197 port 56524 ssh2 Jun 2 08:14:58 server1 sshd\[27756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.207.197 user=root Jun 2 08:14:59 server1 sshd\[27756\]: Failed password for root from 106.12.207.197 port 41708 ssh2 Jun 2 08:18:18 server1 sshd\[28746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.207.197 user=root ... |
2020-06-02 23:01:54 |
| 130.162.71.237 | attackspambots | 2020-06-02 14:11:25,618 fail2ban.actions [937]: NOTICE [sshd] Ban 130.162.71.237 2020-06-02 14:51:52,933 fail2ban.actions [937]: NOTICE [sshd] Ban 130.162.71.237 2020-06-02 15:29:36,767 fail2ban.actions [937]: NOTICE [sshd] Ban 130.162.71.237 2020-06-02 16:08:15,991 fail2ban.actions [937]: NOTICE [sshd] Ban 130.162.71.237 2020-06-02 16:47:06,174 fail2ban.actions [937]: NOTICE [sshd] Ban 130.162.71.237 ... |
2020-06-02 22:50:35 |
| 62.33.211.129 | attack | 2020-06-0214:05:161jg5fP-0004wi-HN\<=info@whatsup2013.chH=\(localhost\)[45.180.150.34]:38086P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3009id=8745580b002bfef2d59026758146ccc0f300f6ec@whatsup2013.chT="tojosuem3215"forjosuem3215@gmail.comwesleywatson80@gmail.comalbertguerrero3606@icloud.com2020-06-0214:05:421jg5fp-0004y6-5z\<=info@whatsup2013.chH=\(localhost\)[113.57.110.154]:37622P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2978id=0ecf9f7c775c897a59a7510209dde4486b81b1ada2@whatsup2013.chT="tomealplan45"formealplan45@gmail.comprandall4225@gmail.commarkarjohn@yahoo.com2020-06-0214:05:071jg5fG-0004vv-EK\<=info@whatsup2013.chH=\(localhost\)[113.177.134.57]:40881P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3042id=a67fdd494269bc4f6c9264373ce8d17d5eb4fe7757@whatsup2013.chT="tochillip37"forchillip37@gmail.comdiancamilobravogarzon@gmail.combgodbey81@gmail.com2020-06-0214:05:1 |
2020-06-02 23:18:35 |
| 190.98.218.178 | attackspambots | 20/6/2@08:05:47: FAIL: Alarm-Intrusion address from=190.98.218.178 ... |
2020-06-02 23:20:46 |
| 195.144.21.225 | attackbotsspam | Port scan of tcp/0 and tcp/65535 across multiple subnets that started on 06/01/2020. |
2020-06-02 23:19:53 |
| 64.227.60.77 | attackbots | Jun 2 00:49:10 h2034429 sshd[10889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.60.77 user=r.r Jun 2 00:49:12 h2034429 sshd[10889]: Failed password for r.r from 64.227.60.77 port 49144 ssh2 Jun 2 00:49:12 h2034429 sshd[10889]: Received disconnect from 64.227.60.77 port 49144:11: Bye Bye [preauth] Jun 2 00:49:12 h2034429 sshd[10889]: Disconnected from 64.227.60.77 port 49144 [preauth] Jun 2 00:54:29 h2034429 sshd[10962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.60.77 user=r.r Jun 2 00:54:32 h2034429 sshd[10962]: Failed password for r.r from 64.227.60.77 port 58038 ssh2 Jun 2 00:54:32 h2034429 sshd[10962]: Received disconnect from 64.227.60.77 port 58038:11: Bye Bye [preauth] Jun 2 00:54:32 h2034429 sshd[10962]: Disconnected from 64.227.60.77 port 58038 [preauth] Jun 2 00:55:58 h2034429 sshd[10975]: pam_unix(sshd:auth): authentication failure; logname= uid=........ ------------------------------- |
2020-06-02 22:44:54 |
| 111.53.98.29 | attack | Unauthorized access or intrusion attempt detected from Thor banned IP |
2020-06-02 22:42:46 |
| 5.13.236.29 | attackspam | ft-1848-basketball.de 5.13.236.29 [02/Jun/2020:14:05:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 408 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" ft-1848-basketball.de 5.13.236.29 [02/Jun/2020:14:05:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 408 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" |
2020-06-02 23:12:40 |
| 118.25.97.227 | attack | Wordpress attack |
2020-06-02 23:04:12 |
| 193.42.99.162 | attackspam |
|
2020-06-02 22:47:12 |
| 103.224.49.34 | attackspambots | T: f2b postfix aggressive 3x |
2020-06-02 22:53:16 |
| 91.238.103.49 | attack | Jun 2 07:31:45 mxgate1 sshd[22710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.238.103.49 user=r.r Jun 2 07:31:47 mxgate1 sshd[22710]: Failed password for r.r from 91.238.103.49 port 44256 ssh2 Jun 2 07:31:47 mxgate1 sshd[22710]: Received disconnect from 91.238.103.49 port 44256:11: Bye Bye [preauth] Jun 2 07:31:47 mxgate1 sshd[22710]: Disconnected from 91.238.103.49 port 44256 [preauth] Jun 2 07:46:06 mxgate1 sshd[23214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.238.103.49 user=r.r Jun 2 07:46:08 mxgate1 sshd[23214]: Failed password for r.r from 91.238.103.49 port 53900 ssh2 Jun 2 07:46:08 mxgate1 sshd[23214]: Received disconnect from 91.238.103.49 port 53900:11: Bye Bye [preauth] Jun 2 07:46:08 mxgate1 sshd[23214]: Disconnected from 91.238.103.49 port 53900 [preauth] Jun 2 07:49:41 mxgate1 sshd[23263]: pam_unix(sshd:auth): authentication failure; logname= uid=0........ ------------------------------- |
2020-06-02 23:21:35 |
| 113.177.134.57 | attackbotsspam | 2020-06-0214:05:161jg5fP-0004wi-HN\<=info@whatsup2013.chH=\(localhost\)[45.180.150.34]:38086P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3009id=8745580b002bfef2d59026758146ccc0f300f6ec@whatsup2013.chT="tojosuem3215"forjosuem3215@gmail.comwesleywatson80@gmail.comalbertguerrero3606@icloud.com2020-06-0214:05:421jg5fp-0004y6-5z\<=info@whatsup2013.chH=\(localhost\)[113.57.110.154]:37622P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2978id=0ecf9f7c775c897a59a7510209dde4486b81b1ada2@whatsup2013.chT="tomealplan45"formealplan45@gmail.comprandall4225@gmail.commarkarjohn@yahoo.com2020-06-0214:05:071jg5fG-0004vv-EK\<=info@whatsup2013.chH=\(localhost\)[113.177.134.57]:40881P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3042id=a67fdd494269bc4f6c9264373ce8d17d5eb4fe7757@whatsup2013.chT="tochillip37"forchillip37@gmail.comdiancamilobravogarzon@gmail.combgodbey81@gmail.com2020-06-0214:05:1 |
2020-06-02 23:23:11 |
| 104.248.92.124 | attackbots | (sshd) Failed SSH login from 104.248.92.124 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 2 14:49:42 s1 sshd[26537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.92.124 user=root Jun 2 14:49:44 s1 sshd[26537]: Failed password for root from 104.248.92.124 port 47676 ssh2 Jun 2 15:03:03 s1 sshd[27367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.92.124 user=root Jun 2 15:03:05 s1 sshd[27367]: Failed password for root from 104.248.92.124 port 52280 ssh2 Jun 2 15:06:14 s1 sshd[27883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.92.124 user=root |
2020-06-02 22:57:52 |
| 31.184.199.114 | attack | Jun 2 20:52:16 itv-usvr-01 sshd[6155]: Invalid user 0 from 31.184.199.114 |
2020-06-02 23:03:23 |