City: Phoenix
Region: Arizona
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 144.24.21.60
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38754
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;144.24.21.60. IN A
;; AUTHORITY SECTION:
. 106 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024100102 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 02 07:52:40 CST 2024
;; MSG SIZE rcvd: 105Host 60.21.24.144.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 60.21.24.144.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 45.136.109.34 | attackspambots | Port scan |
2019-09-12 00:42:14 |
| 121.35.98.34 | attackspam | firewall-block, port(s): 23/tcp |
2019-09-11 23:41:42 |
| 103.122.201.89 | attackbots | Automatic report - Port Scan Attack |
2019-09-11 23:36:27 |
| 178.132.201.205 | attackbots | Port scan |
2019-09-12 00:13:16 |
| 164.132.104.58 | attackbotsspam | Sep 11 11:40:40 SilenceServices sshd[25068]: Failed password for git from 164.132.104.58 port 35152 ssh2 Sep 11 11:46:19 SilenceServices sshd[27155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.104.58 Sep 11 11:46:21 SilenceServices sshd[27155]: Failed password for invalid user steam from 164.132.104.58 port 44028 ssh2 |
2019-09-11 23:28:58 |
| 193.29.13.20 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-09-11 23:22:01 |
| 45.136.109.38 | attackspambots | Sep 10 18:28:50 lenivpn01 kernel: \[365734.849668\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.38 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=25337 PROTO=TCP SPT=50516 DPT=6006 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 10 18:34:22 lenivpn01 kernel: \[366066.642794\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.38 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=17398 PROTO=TCP SPT=50516 DPT=6800 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 10 18:36:12 lenivpn01 kernel: \[366176.962211\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.38 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=48492 PROTO=TCP SPT=50516 DPT=6074 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 10 21:04:16 lenivpn01 kernel: \[375060.613315\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.38 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID= ... |
2019-09-12 00:39:37 |
| 110.5.238.112 | attack | Port scan attempt detected by AWS-CCS, CTS, India |
2019-09-11 23:06:40 |
| 210.245.107.120 | attack | [SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(09111103) |
2019-09-11 23:16:25 |
| 46.105.99.163 | attack | xmlrpc attack |
2019-09-11 23:45:07 |
| 104.223.67.237 | attack | RU - 1H : (122) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : RU NAME ASN : ASN8100 IP : 104.223.67.237 CIDR : 104.223.64.0/21 PREFIX COUNT : 593 UNIQUE IP COUNT : 472064 WYKRYTE ATAKI Z ASN8100 : 1H - 2 3H - 4 6H - 4 12H - 7 24H - 13 INFO : Looking for resource vulnerabilities 403 Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-09-11 23:39:28 |
| 186.46.131.251 | attackbots | Sep 11 13:18:40 mail kernel: [313668.688338] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=186.46.131.251 DST=91.205.173.180 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=31375 DF PROTO=TCP SPT=53735 DPT=9200 WINDOW=14600 RES=0x00 SYN URGP=0 Sep 11 13:18:41 mail kernel: [313669.689267] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=186.46.131.251 DST=91.205.173.180 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=31376 DF PROTO=TCP SPT=53735 DPT=9200 WINDOW=14600 RES=0x00 SYN URGP=0 Sep 11 13:18:41 mail kernel: [313669.713854] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=186.46.131.251 DST=91.205.173.180 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=39519 DF PROTO=TCP SPT=48873 DPT=7002 WINDOW=14600 RES=0x00 SYN URGP=0 |
2019-09-12 00:03:09 |
| 88.198.99.142 | attackspambots | Sep 11 17:30:26 mail sshd\[27807\]: Invalid user factorio from 88.198.99.142 port 53368 Sep 11 17:30:26 mail sshd\[27807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.198.99.142 Sep 11 17:30:29 mail sshd\[27807\]: Failed password for invalid user factorio from 88.198.99.142 port 53368 ssh2 Sep 11 17:36:20 mail sshd\[28594\]: Invalid user www-upload from 88.198.99.142 port 42616 Sep 11 17:36:20 mail sshd\[28594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.198.99.142 |
2019-09-11 23:46:15 |
| 107.161.93.57 | attackspambots | RU - 1H : (121) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : RU NAME ASN : ASN8100 IP : 107.161.93.57 CIDR : 107.161.92.0/22 PREFIX COUNT : 593 UNIQUE IP COUNT : 472064 WYKRYTE ATAKI Z ASN8100 : 1H - 1 3H - 3 6H - 3 12H - 6 24H - 12 INFO : Looking for resource vulnerabilities 403 Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-09-11 23:42:27 |
| 148.66.142.135 | attack | Sep 11 14:46:44 game-panel sshd[8826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.142.135 Sep 11 14:46:47 game-panel sshd[8826]: Failed password for invalid user 1234 from 148.66.142.135 port 58556 ssh2 Sep 11 14:54:04 game-panel sshd[9177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.142.135 |
2019-09-11 23:10:26 |