104.44.134.136

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Microsoft Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	page not found 07/26/2020 - 12:25 site/wp-admin/setup-config.php Anonymous warning page not found 07/26/2020 - 12:25 test/wp-admin/setup-config.php Anonymous warning page not found 07/26/2020 - 12:25 blog/wp-admin/setup-config.php Anonymous warning page not found 07/26/2020 - 12:25 wp/wp-admin/setup-config.php Anonymous warning page not found 07/26/2020 - 12:25 wordpress/wp-admin/setup-config.php Anonymous warning page not found 07/26/2020 - 12:25 wp-admin/setup-config.php Anonymous warning page not found 07/26/2020 - 12:25 .env Anonymous warning page not found 07/26/2020 - 12:25 fckeditor/editor/filemanager/connectors/php/upload.php Anonymous warning page not found 07/26/2020 - 12:25 vendor/phpunit/phpunit/build.xml Anonymous warning page not found 07/26/2020 - 12:25 js/header-rollup-554.js Anonymous warning page not found 07/26/2020 - 12:25 images/editor/separator.gif Anonymous warning access denied 07/26/2020 - 12:25 admin/includes/general.js Anonymous warning access denied 07/26/2020 - 12:25 admin/view/javascript/common.js Anonymous warning page not found 07/26/2020 - 12:25 misc/ajax.js Anonymous warning page not found 07/26/2020 - 12:25 administrator Anonymous warning page not found 07/26/2020 - 12:25 plugins/system/debug/debug.xml Anonymous warning page not found 07/26/2020 - 12:25 administrator/language/en-GB/install.xml Anonymous warning page not found 07/26/2020 - 12:25 administrator/help/en-GB/toc.json Anonymous warning page not found 07/26/2020 - 12:25 wp-includes/js/jquery/jquery.js Anonymous	2020-07-27 03:17:47
attackspam	Forbidden directory scan :: 2020/05/22 11:49:39 [error] 1046#1046: *1138463 access forbidden by rule, client: 104.44.134.136, server: [censored_1], request: "GET /wp-content/plugins/iwp-client/readme.txt HTTP/1.1", host: "www.[censored_1]"	2020-05-23 02:08:21

Type

Details

Datetime

attack

page not found	07/26/2020 - 12:25	site/wp-admin/setup-config.php	Anonymous	
warning	page not found	07/26/2020 - 12:25	test/wp-admin/setup-config.php	Anonymous	
warning	page not found	07/26/2020 - 12:25	blog/wp-admin/setup-config.php	Anonymous	
warning	page not found	07/26/2020 - 12:25	wp/wp-admin/setup-config.php	Anonymous	
warning	page not found	07/26/2020 - 12:25	wordpress/wp-admin/setup-config.php	Anonymous	
warning	page not found	07/26/2020 - 12:25	wp-admin/setup-config.php	Anonymous	
warning	page not found	07/26/2020 - 12:25	.env	Anonymous	
warning	page not found	07/26/2020 - 12:25	fckeditor/editor/filemanager/connectors/php/upload.php	Anonymous	
warning	page not found	07/26/2020 - 12:25	vendor/phpunit/phpunit/build.xml	Anonymous	
warning	page not found	07/26/2020 - 12:25	js/header-rollup-554.js	Anonymous	
warning	page not found	07/26/2020 - 12:25	images/editor/separator.gif	Anonymous	
warning	access denied	07/26/2020 - 12:25	admin/includes/general.js	Anonymous	
warning	access denied	07/26/2020 - 12:25	admin/view/javascript/common.js	Anonymous	
warning	page not found	07/26/2020 - 12:25	misc/ajax.js	Anonymous	
warning	page not found	07/26/2020 - 12:25	administrator	Anonymous	
warning	page not found	07/26/2020 - 12:25	plugins/system/debug/debug.xml	Anonymous	
warning	page not found	07/26/2020 - 12:25	administrator/language/en-GB/install.xml	Anonymous	
warning	page not found	07/26/2020 - 12:25	administrator/help/en-GB/toc.json	Anonymous	
warning	page not found	07/26/2020 - 12:25	wp-includes/js/jquery/jquery.js	Anonymous

2020-07-27 03:17:47

attackspam

Forbidden directory scan :: 2020/05/22 11:49:39 [error] 1046#1046: *1138463 access forbidden by rule, client: 104.44.134.136, server: [censored_1], request: "GET /wp-content/plugins/iwp-client/readme.txt HTTP/1.1", host: "www.[censored_1]"

2020-05-23 02:08:21

Comments on same subnet:

IP	Type	Details	Datetime
104.44.134.83	attack	page not found 07/26/2020 - 12:25 site/wp-admin/setup-config.php Anonymous warning page not found 07/26/2020 - 12:25 test/wp-admin/setup-config.php Anonymous warning page not found 07/26/2020 - 12:25 blog/wp-admin/setup-config.php Anonymous warning page not found 07/26/2020 - 12:25 wp/wp-admin/setup-config.php Anonymous warning page not found 07/26/2020 - 12:25 wordpress/wp-admin/setup-config.php Anonymous warning page not found 07/26/2020 - 12:25 wp-admin/setup-config.php Anonymous warning page not found 07/26/2020 - 12:25 .env Anonymous warning page not found 07/26/2020 - 12:25 fckeditor/editor/filemanager/connectors/php/upload.php Anonymous warning page not found 07/26/2020 - 12:25 vendor/phpunit/phpunit/build.xml Anonymous warning page not found 07/26/2020 - 12:25 js/header-rollup-554.js Anonymous warning page not found 07/26/2020 - 12:25 images/editor/separator.gif Anonymous warning access denied 07/26/2020 - 12:25 admin/includes/general.js Anonymous warning access denied 07/26/2020 - 12:25 admin/view/javascript/common.js Anonymous warning page not found 07/26/2020 - 12:25 misc/ajax.js Anonymous warning page not found 07/26/2020 - 12:25 administrator Anonymous warning page not found 07/26/2020 - 12:25 plugins/system/debug/debug.xml Anonymous warning page not found 07/26/2020 - 12:25 administrator/language/en-GB/install.xml Anonymous warning page not found 07/26/2020 - 12:25 administrator/help/en-GB/toc.json Anonymous warning page not found 07/26/2020 - 12:25 wp-includes/js/jquery/jquery.js Anonymous	2020-07-27 03:19:17

Type

Details

Datetime

104.44.134.83

attack

page not found	07/26/2020 - 12:25	site/wp-admin/setup-config.php	Anonymous	
warning	page not found	07/26/2020 - 12:25	test/wp-admin/setup-config.php	Anonymous	
warning	page not found	07/26/2020 - 12:25	blog/wp-admin/setup-config.php	Anonymous	
warning	page not found	07/26/2020 - 12:25	wp/wp-admin/setup-config.php	Anonymous	
warning	page not found	07/26/2020 - 12:25	wordpress/wp-admin/setup-config.php	Anonymous	
warning	page not found	07/26/2020 - 12:25	wp-admin/setup-config.php	Anonymous	
warning	page not found	07/26/2020 - 12:25	.env	Anonymous	
warning	page not found	07/26/2020 - 12:25	fckeditor/editor/filemanager/connectors/php/upload.php	Anonymous	
warning	page not found	07/26/2020 - 12:25	vendor/phpunit/phpunit/build.xml	Anonymous	
warning	page not found	07/26/2020 - 12:25	js/header-rollup-554.js	Anonymous	
warning	page not found	07/26/2020 - 12:25	images/editor/separator.gif	Anonymous	
warning	access denied	07/26/2020 - 12:25	admin/includes/general.js	Anonymous	
warning	access denied	07/26/2020 - 12:25	admin/view/javascript/common.js	Anonymous	
warning	page not found	07/26/2020 - 12:25	misc/ajax.js	Anonymous	
warning	page not found	07/26/2020 - 12:25	administrator	Anonymous	
warning	page not found	07/26/2020 - 12:25	plugins/system/debug/debug.xml	Anonymous	
warning	page not found	07/26/2020 - 12:25	administrator/language/en-GB/install.xml	Anonymous	
warning	page not found	07/26/2020 - 12:25	administrator/help/en-GB/toc.json	Anonymous	
warning	page not found	07/26/2020 - 12:25	wp-includes/js/jquery/jquery.js	Anonymous

2020-07-27 03:19:17

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.44.134.136
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4835
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.44.134.136.			IN	A

;; AUTHORITY SECTION:
.			532	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052201 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 23 02:08:16 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 136.134.44.104.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 136.134.44.104.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
112.33.39.2	attack	(pop3d) Failed POP3 login from 112.33.39.2 (CN/China/-): 10 in the last 3600 secs	2019-08-25 22:36:19
193.32.163.182	attackbotsspam	2019-08-25T14:05:08.164230abusebot-5.cloudsearch.cf sshd\[8797\]: Invalid user admin from 193.32.163.182 port 49240	2019-08-25 22:25:11
23.88.160.41	attackbotsspam	445/tcp 445/tcp 445/tcp... [2019-06-29/08-25]11pkt,1pt.(tcp)	2019-08-25 22:59:04
5.62.41.170	attackbots	\[2019-08-25 10:15:48\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '5.62.41.170:7643' - Wrong password \[2019-08-25 10:15:48\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-25T10:15:48.727-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="44534",SessionID="0x7f7b305df5a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.170/56102",Challenge="41f302d5",ReceivedChallenge="41f302d5",ReceivedHash="afdd089fff85ad583ac82bf1a481874e" \[2019-08-25 10:16:49\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '5.62.41.170:7738' - Wrong password \[2019-08-25 10:16:49\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-25T10:16:49.898-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="48350",SessionID="0x7f7b305a3378",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.170/5	2019-08-25 22:20:04
61.250.138.125	attackspambots	SSHD brute force attack detected by fail2ban	2019-08-25 22:35:09
45.82.153.35	attackbots	08/25/2019-10:11:41.126673 45.82.153.35 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-08-25 22:18:37
49.234.114.189	attack	2019-08-25 03:31:14,319 fail2ban.actions [878]: NOTICE [sshd] Ban 49.234.114.189 2019-08-25 06:40:48,940 fail2ban.actions [878]: NOTICE [sshd] Ban 49.234.114.189 2019-08-25 09:46:35,118 fail2ban.actions [878]: NOTICE [sshd] Ban 49.234.114.189 ...	2019-08-25 23:05:39
111.68.97.59	attackbots	Aug 25 07:43:48 plusreed sshd[7766]: Invalid user ptiehel from 111.68.97.59 ...	2019-08-25 22:05:42
165.227.18.169	attackspam	2019-08-25T11:54:31.505018abusebot-2.cloudsearch.cf sshd\[6173\]: Invalid user toor from 165.227.18.169 port 37050	2019-08-25 22:30:17
139.59.118.88	attack	DATE:2019-08-25 12:08:29, IP:139.59.118.88, PORT:ssh SSH brute force auth (ermes)	2019-08-25 22:35:45
54.38.82.14	attackspam	Aug 25 22:06:45 lcl-usvr-01 sshd[12310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.82.14 user=root	2019-08-25 23:11:34
94.102.56.181	attackbots	firewall-block, port(s): 30180/tcp	2019-08-25 23:04:31
23.28.50.172	attackbotsspam	MYH,DEF GET /admin/	2019-08-25 22:24:41
191.53.251.198	attackbots	Aug 25 09:56:20 xeon postfix/smtpd[35534]: warning: unknown[191.53.251.198]: SASL PLAIN authentication failed: authentication failure	2019-08-25 22:32:46
139.0.12.19	attackspambots	Unauthorized connection attempt from IP address 139.0.12.19 on Port 445(SMB)	2019-08-25 22:13:06

Recently Reported IPs

85.110.63.253	123.180.138.202	45.235.37.88	212.64.19.237
114.119.162.125	190.141.186.140	162.243.139.225	114.34.4.8
137.97.192.129	208.168.231.172	129.53.37.99	35.184.213.67
156.213.167.226	198.199.78.230	252.4.130.20	78.140.134.182
45.134.147.80	171.103.142.54	114.37.68.169	155.117.126.137