City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 64.21.167.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18807
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;64.21.167.140. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 01:09:21 CST 2025
;; MSG SIZE rcvd: 106
140.167.21.64.in-addr.arpa domain name pointer this.ptr.is.named.in.honor.of.arin.nac.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
140.167.21.64.in-addr.arpa name = this.ptr.is.named.in.honor.of.arin.nac.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.146.132.2 | attack | 103.146.132.2 - - [12/Jul/2020:21:36:52 +0200] "POST /xmlrpc.php HTTP/1.1" 403 31 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.146.132.2 - - [12/Jul/2020:22:00:39 +0200] "POST /xmlrpc.php HTTP/1.1" 403 31 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-07-13 07:10:57 |
| 222.186.173.183 | attackbots | Jul 13 01:12:44 pve1 sshd[30874]: Failed password for root from 222.186.173.183 port 33516 ssh2 Jul 13 01:12:48 pve1 sshd[30874]: Failed password for root from 222.186.173.183 port 33516 ssh2 ... |
2020-07-13 07:14:29 |
| 180.76.37.36 | attackbots | Invalid user opr from 180.76.37.36 port 46352 |
2020-07-13 06:49:17 |
| 94.102.51.16 | attackbots | ET DROP Dshield Block Listed Source group 1 - port: 1120 proto: tcp cat: Misc Attackbytes: 60 |
2020-07-13 07:04:59 |
| 202.147.206.182 | attack | xmlrpc attack |
2020-07-13 06:41:44 |
| 208.109.11.34 | attackbotsspam | Jul 12 21:42:19 main sshd[3525]: Failed password for invalid user admin from 208.109.11.34 port 41134 ssh2 |
2020-07-13 06:46:28 |
| 192.3.163.120 | attack | Jul 12 16:48:12 server1 sshd\[13135\]: Failed password for invalid user er from 192.3.163.120 port 34704 ssh2 Jul 12 16:51:50 server1 sshd\[14412\]: Invalid user jira from 192.3.163.120 Jul 12 16:51:50 server1 sshd\[14412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.163.120 Jul 12 16:51:52 server1 sshd\[14412\]: Failed password for invalid user jira from 192.3.163.120 port 60794 ssh2 Jul 12 16:55:40 server1 sshd\[15760\]: Invalid user stream from 192.3.163.120 ... |
2020-07-13 06:58:53 |
| 94.180.247.20 | attackspam | Jul 12 23:42:01 buvik sshd[3686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.180.247.20 Jul 12 23:42:03 buvik sshd[3686]: Failed password for invalid user bt from 94.180.247.20 port 50182 ssh2 Jul 12 23:45:11 buvik sshd[4249]: Invalid user alisa from 94.180.247.20 ... |
2020-07-13 07:09:07 |
| 51.77.212.179 | attack | 943. On Jul 12 2020 experienced a Brute Force SSH login attempt -> 50 unique times by 51.77.212.179. |
2020-07-13 07:01:50 |
| 195.54.161.46 | attackbots | 07/12/2020-18:23:50.299882 195.54.161.46 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-07-13 07:12:08 |
| 144.217.42.212 | attackspam | Jul 12 12:15:26 main sshd[28948]: Failed password for invalid user monitoramento from 144.217.42.212 port 43002 ssh2 |
2020-07-13 07:17:38 |
| 142.93.239.197 | attackspambots | Jul 12 00:00:38 main sshd[16924]: Failed password for invalid user yangzishuang from 142.93.239.197 port 32980 ssh2 Jul 12 00:03:28 main sshd[16960]: Failed password for invalid user srajuser3 from 142.93.239.197 port 57494 ssh2 Jul 12 00:06:18 main sshd[17000]: Failed password for invalid user icinga from 142.93.239.197 port 53780 ssh2 Jul 12 00:09:15 main sshd[17085]: Failed password for invalid user oracle from 142.93.239.197 port 50062 ssh2 Jul 12 00:12:12 main sshd[17114]: Failed password for invalid user tym from 142.93.239.197 port 46346 ssh2 Jul 12 00:15:06 main sshd[17148]: Failed password for invalid user latona from 142.93.239.197 port 42628 ssh2 |
2020-07-13 07:18:03 |
| 49.233.148.2 | attackspam | Jul 12 22:00:55 h2427292 sshd\[29606\]: Invalid user fred from 49.233.148.2 Jul 12 22:00:55 h2427292 sshd\[29606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.148.2 Jul 12 22:00:57 h2427292 sshd\[29606\]: Failed password for invalid user fred from 49.233.148.2 port 43818 ssh2 ... |
2020-07-13 06:44:22 |
| 54.152.100.171 | attack | Email rejected due to spam filtering |
2020-07-13 07:09:47 |
| 41.139.242.217 | attackspam | Unauthorized connection attempt from IP address 41.139.242.217 on Port 445(SMB) |
2020-07-13 06:50:56 |