City: unknown
Region: unknown
Country: Sweden
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.234.164.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35949
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;81.234.164.21. IN A
;; AUTHORITY SECTION:
. 57 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011002 1800 900 604800 86400
;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 11 09:19:46 CST 2022
;; MSG SIZE rcvd: 10621.164.234.81.in-addr.arpa domain name pointer 81-234-164-21-no265.tbcn.telia.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
21.164.234.81.in-addr.arpa name = 81-234-164-21-no265.tbcn.telia.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 41.75.122.30 | attack | Nov 26 09:39:07 MK-Soft-VM8 sshd[32745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.75.122.30 Nov 26 09:39:09 MK-Soft-VM8 sshd[32745]: Failed password for invalid user abdellaziz from 41.75.122.30 port 3403 ssh2 ... |
2019-11-26 18:38:08 |
| 121.142.111.222 | attackspam | Nov 26 09:19:48 vps647732 sshd[5760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.142.111.222 Nov 26 09:19:50 vps647732 sshd[5760]: Failed password for invalid user pepe from 121.142.111.222 port 33570 ssh2 ... |
2019-11-26 18:49:57 |
| 162.241.192.138 | attackbots | Lines containing failures of 162.241.192.138 Nov 26 07:53:56 shared11 sshd[23674]: Invalid user j0k3r from 162.241.192.138 port 37396 Nov 26 07:53:56 shared11 sshd[23674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.192.138 Nov 26 07:53:58 shared11 sshd[23674]: Failed password for invalid user j0k3r from 162.241.192.138 port 37396 ssh2 Nov 26 07:53:58 shared11 sshd[23674]: Received disconnect from 162.241.192.138 port 37396:11: Bye Bye [preauth] Nov 26 07:53:58 shared11 sshd[23674]: Disconnected from invalid user j0k3r 162.241.192.138 port 37396 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=162.241.192.138 |
2019-11-26 18:45:02 |
| 5.249.159.139 | attackspambots | Invalid user prova from 5.249.159.139 port 34542 |
2019-11-26 18:48:26 |
| 139.217.234.68 | attackbots | Nov 26 00:04:09 tdfoods sshd\[14839\]: Invalid user test from 139.217.234.68 Nov 26 00:04:09 tdfoods sshd\[14839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.234.68 Nov 26 00:04:11 tdfoods sshd\[14839\]: Failed password for invalid user test from 139.217.234.68 port 45266 ssh2 Nov 26 00:11:51 tdfoods sshd\[15603\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.234.68 user=www-data Nov 26 00:11:53 tdfoods sshd\[15603\]: Failed password for www-data from 139.217.234.68 port 54224 ssh2 |
2019-11-26 19:04:30 |
| 106.75.6.229 | attackspambots | Nov 26 06:17:07 XXXXXX sshd[22196]: Invalid user moosbrugger from 106.75.6.229 port 60444 |
2019-11-26 19:12:19 |
| 106.13.105.88 | attack | $f2bV_matches |
2019-11-26 19:04:59 |
| 172.105.89.161 | attackbotsspam | 172.105.89.161 was recorded 14 times by 14 hosts attempting to connect to the following ports: 55384,56920. Incident counter (4h, 24h, all-time): 14, 83, 1946 |
2019-11-26 18:36:45 |
| 54.190.185.147 | attackbots | 26.11.2019 07:24:48 - Bad Robot Ignore Robots.txt |
2019-11-26 18:57:37 |
| 62.182.198.75 | attackspam | port scan and connect, tcp 80 (http) |
2019-11-26 19:05:34 |
| 58.87.67.142 | attackbotsspam | Nov 26 08:49:00 lnxweb62 sshd[24742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.67.142 |
2019-11-26 19:10:31 |
| 106.54.50.232 | attack | $f2bV_matches |
2019-11-26 19:08:59 |
| 188.166.54.199 | attackspam | Nov 26 00:08:06 hpm sshd\[23191\]: Invalid user gumption from 188.166.54.199 Nov 26 00:08:06 hpm sshd\[23191\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.54.199 Nov 26 00:08:08 hpm sshd\[23191\]: Failed password for invalid user gumption from 188.166.54.199 port 60761 ssh2 Nov 26 00:14:10 hpm sshd\[23811\]: Invalid user efemena from 188.166.54.199 Nov 26 00:14:10 hpm sshd\[23811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.54.199 |
2019-11-26 18:53:15 |
| 213.135.154.57 | attackspam | Port 1433 Scan |
2019-11-26 19:09:21 |
| 183.129.54.83 | attackbots | Nov 24 18:54:15 mxgate1 postfix/postscreen[6529]: CONNECT from [183.129.54.83]:58504 to [176.31.12.44]:25 Nov 24 18:54:15 mxgate1 postfix/dnsblog[6544]: addr 183.129.54.83 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 24 18:54:15 mxgate1 postfix/dnsblog[6541]: addr 183.129.54.83 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Nov 24 18:54:15 mxgate1 postfix/dnsblog[6544]: addr 183.129.54.83 listed by domain zen.spamhaus.org as 127.0.0.11 Nov 24 18:54:15 mxgate1 postfix/dnsblog[6543]: addr 183.129.54.83 listed by domain bl.spamcop.net as 127.0.0.2 Nov 24 18:54:15 mxgate1 postfix/dnsblog[6545]: addr 183.129.54.83 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 24 18:54:15 mxgate1 postfix/dnsblog[6542]: addr 183.129.54.83 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 24 18:54:21 mxgate1 postfix/postscreen[6529]: DNSBL rank 6 for [183.129.54.83]:58504 Nov x@x Nov 24 18:54:22 mxgate1 postfix/postscreen[6529]: DISCONNECT [183.129.54.83]:58504 Nov 26 07:19:........ ------------------------------- |
2019-11-26 18:41:44 |