City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.22.55.74 | attack | test |
2023-11-03 07:27:36 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.22.5.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36672
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.22.5.8. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 03:37:41 CST 2022
;; MSG SIZE rcvd: 103Host 8.5.22.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 8.5.22.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 107.77.215.160 | attackproxynormal | In the info about my phone(s): always has manufacture name ie; LGE, AT&T. Never has; ISP name;__________ Host;_______________ My phones are very obviously, hacked but this information is missing. Why would that be? isp or host name: missing |
2020-04-11 12:08:29 |
| 92.118.160.45 | attackspambots | Unauthorized connection attempt detected from IP address 92.118.160.45 to port 6002 |
2020-04-11 08:15:09 |
| 45.143.220.48 | attack | Multiport scan : 5 ports scanned 5090 5091 5092 5160 5260 |
2020-04-11 08:33:34 |
| 106.12.5.77 | attackbotsspam | Apr 11 05:56:21 debian-2gb-nbg1-2 kernel: \[8836386.704602\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=106.12.5.77 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=47877 PROTO=TCP SPT=46933 DPT=17064 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-11 12:14:00 |
| 51.91.126.182 | attack | Apr 10 23:51:17 debian-2gb-nbg1-2 kernel: \[8814483.360969\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=51.91.126.182 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=41821 PROTO=TCP SPT=32767 DPT=8545 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-11 08:30:56 |
| 92.118.37.99 | attackspam | Apr 11 02:00:56 debian-2gb-nbg1-2 kernel: \[8822261.635694\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.118.37.99 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=11117 PROTO=TCP SPT=45456 DPT=10613 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-11 08:16:01 |
| 80.82.77.139 | attack | Fail2Ban Ban Triggered |
2020-04-11 08:22:13 |
| 34.222.102.133 | attackspam | Bad bot/spoofed identity |
2020-04-11 12:12:45 |
| 89.248.168.202 | attack | Apr 11 01:49:20 debian-2gb-nbg1-2 kernel: \[8821566.126970\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=89.248.168.202 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=13048 PROTO=TCP SPT=49528 DPT=5991 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-11 08:18:36 |
| 87.251.74.12 | attackbotsspam | Port-scan: detected 168 distinct ports within a 24-hour window. |
2020-04-11 08:20:30 |
| 77.247.108.119 | attackspam | Apr 11 02:14:06 debian-2gb-nbg1-2 kernel: \[8823051.667240\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=77.247.108.119 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x20 TTL=242 ID=60492 PROTO=TCP SPT=57849 DPT=5038 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-11 08:25:23 |
| 71.6.232.8 | attackbots | trying to access non-authorized port |
2020-04-11 08:25:46 |
| 92.118.161.17 | attackbotsspam | port scan and connect, tcp 8443 (https-alt) |
2020-04-11 08:14:36 |
| 51.158.31.243 | attackbotsspam | Scanned 1 times in the last 24 hours on port 5060 |
2020-04-11 08:30:43 |
| 138.197.164.222 | attackspam | Apr 11 05:48:29 ourumov-web sshd\[19334\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222 user=root Apr 11 05:48:31 ourumov-web sshd\[19334\]: Failed password for root from 138.197.164.222 port 45958 ssh2 Apr 11 05:56:28 ourumov-web sshd\[19823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.164.222 user=root ... |
2020-04-11 12:08:02 |