City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.21.249.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56011
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.21.249.134. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400
;; Query time: 46 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 23:32:23 CST 2025
;; MSG SIZE rcvd: 106
Host 134.249.21.54.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 134.249.21.54.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 52.152.235.76 | attackspam | Sep 7 19:33:58 srv-ubuntu-dev3 sshd[120712]: Invalid user postgres from 52.152.235.76 Sep 7 19:33:58 srv-ubuntu-dev3 sshd[120711]: Invalid user oracle from 52.152.235.76 Sep 7 19:33:58 srv-ubuntu-dev3 sshd[120716]: Invalid user centos from 52.152.235.76 Sep 7 19:33:58 srv-ubuntu-dev3 sshd[120715]: Invalid user ec2-user from 52.152.235.76 Sep 7 19:33:58 srv-ubuntu-dev3 sshd[120713]: Invalid user ubuntu from 52.152.235.76 ... |
2020-09-08 16:34:38 |
| 122.54.8.10 | attackspam | Honeypot attack, port: 445, PTR: igate10.fastcargo.com.ph. |
2020-09-08 16:32:09 |
| 200.199.144.132 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-09-08 16:49:56 |
| 183.83.240.163 | attackspam | Honeypot attack, port: 445, PTR: broadband.actcorp.in. |
2020-09-08 16:58:40 |
| 111.241.109.183 | attackspambots | Honeypot attack, port: 445, PTR: 111-241-109-183.dynamic-ip.hinet.net. |
2020-09-08 16:30:44 |
| 37.187.113.197 | attackbotsspam | 37.187.113.197 - - [08/Sep/2020:09:17:12 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 37.187.113.197 - - [08/Sep/2020:09:26:00 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-08 16:50:57 |
| 62.210.185.4 | attackbotsspam | CMS (WordPress or Joomla) login attempt. |
2020-09-08 17:06:27 |
| 206.81.16.252 | attackspam | windhundgang.de 206.81.16.252 [08/Sep/2020:06:22:40 +0200] "POST /wp-login.php HTTP/1.1" 200 8422 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" windhundgang.de 206.81.16.252 [08/Sep/2020:06:22:40 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4216 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-08 16:45:04 |
| 110.80.17.26 | attackbots | Aug 30 05:16:50 server sshd[5786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.80.17.26 Aug 30 05:16:51 server sshd[5786]: Failed password for invalid user sshusr from 110.80.17.26 port 33644 ssh2 Aug 30 05:28:47 server sshd[6210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.80.17.26 Aug 30 05:28:49 server sshd[6210]: Failed password for invalid user mha from 110.80.17.26 port 58554 ssh2 |
2020-09-08 16:35:35 |
| 218.237.253.167 | attackspam | SSH login attempts. |
2020-09-08 17:06:02 |
| 91.212.38.68 | attack | $f2bV_matches |
2020-09-08 16:42:57 |
| 179.51.3.252 | attackbots | 179.51.3.252 - [07/Sep/2020:19:49:17 +0300] "POST /xmlrpc.php HTTP/1.1" 404 87433 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-" 179.51.3.252 - [07/Sep/2020:19:50:19 +0300] "POST /xmlrpc.php HTTP/1.1" 404 87433 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-" ... |
2020-09-08 16:30:56 |
| 121.122.172.117 | attackspambots | firewall-block, port(s): 23/tcp |
2020-09-08 16:31:43 |
| 156.220.23.221 | attackspambots | Honeypot attack, port: 445, PTR: host-156.220.221.23-static.tedata.net. |
2020-09-08 16:55:34 |
| 120.131.3.91 | attackspambots | SIP/5060 Probe, BF, Hack - |
2020-09-08 16:32:59 |