City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.97.59.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34768
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;18.97.59.252. IN A
;; AUTHORITY SECTION:
. 230 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023041400 1800 900 604800 86400
;; Query time: 23 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 14 20:41:56 CST 2023
;; MSG SIZE rcvd: 105b'Host 252.59.97.18.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 18.97.59.252.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.119.160.107 | attackspam | Oct 30 19:54:34 h2177944 kernel: \[5337414.255782\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.107 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=54252 PROTO=TCP SPT=46408 DPT=42255 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 30 19:54:52 h2177944 kernel: \[5337432.389183\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.107 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=34485 PROTO=TCP SPT=46408 DPT=42061 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 30 20:01:07 h2177944 kernel: \[5337807.086719\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.107 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=37818 PROTO=TCP SPT=46408 DPT=42091 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 30 20:05:19 h2177944 kernel: \[5338059.267708\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.107 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=1492 PROTO=TCP SPT=46408 DPT=41880 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 30 20:19:02 h2177944 kernel: \[5338881.478497\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.107 DST=85.2 |
2019-10-31 03:22:56 |
| 137.74.122.5 | attack | Automatic report - SQL Injection Attempts |
2019-10-31 03:32:45 |
| 78.158.154.20 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/78.158.154.20/ CY - 1H : (2) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CY NAME ASN : ASN16229 IP : 78.158.154.20 CIDR : 78.158.154.0/24 PREFIX COUNT : 198 UNIQUE IP COUNT : 50688 ATTACKS DETECTED ASN16229 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-30 12:46:01 INFO : Server 403 - Looking for resource vulnerabilities Detected and Blocked by ADMIN - data recovery |
2019-10-31 03:29:15 |
| 122.238.64.35 | attack | Unauthorized connection attempt from IP address 122.238.64.35 on Port 445(SMB) |
2019-10-31 03:24:48 |
| 196.205.3.135 | attackbotsspam | Unauthorized connection attempt from IP address 196.205.3.135 on Port 445(SMB) |
2019-10-31 03:06:11 |
| 103.59.201.72 | attackbots | Unauthorized connection attempt from IP address 103.59.201.72 on Port 445(SMB) |
2019-10-31 03:41:18 |
| 117.248.55.34 | attackbotsspam | Unauthorized connection attempt from IP address 117.248.55.34 on Port 445(SMB) |
2019-10-31 03:41:03 |
| 149.28.66.30 | attackbotsspam | SS1,DEF GET /wp-login.php |
2019-10-31 03:18:07 |
| 14.162.95.240 | attackspambots | Unauthorized connection attempt from IP address 14.162.95.240 on Port 445(SMB) |
2019-10-31 03:21:03 |
| 14.229.80.210 | attack | Unauthorized connection attempt from IP address 14.229.80.210 on Port 445(SMB) |
2019-10-31 03:23:34 |
| 157.245.107.153 | attackbots | Oct 30 19:34:58 h2177944 sshd\[16187\]: Invalid user ucpss from 157.245.107.153 port 41864 Oct 30 19:34:58 h2177944 sshd\[16187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.107.153 Oct 30 19:35:00 h2177944 sshd\[16187\]: Failed password for invalid user ucpss from 157.245.107.153 port 41864 ssh2 Oct 30 20:07:14 h2177944 sshd\[17758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.107.153 user=root ... |
2019-10-31 03:30:22 |
| 14.161.9.148 | attackbotsspam | Unauthorized connection attempt from IP address 14.161.9.148 on Port 445(SMB) |
2019-10-31 03:30:10 |
| 223.197.89.82 | attackbotsspam | Unauthorized connection attempt from IP address 223.197.89.82 on Port 445(SMB) |
2019-10-31 03:11:22 |
| 144.217.130.102 | attack | notenschluessel-fulda.de 144.217.130.102 \[30/Oct/2019:19:08:46 +0100\] "POST /wp-login.php HTTP/1.1" 200 5902 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" notenschluessel-fulda.de 144.217.130.102 \[30/Oct/2019:19:08:47 +0100\] "POST /wp-login.php HTTP/1.1" 200 5858 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-31 03:15:03 |
| 45.136.109.173 | attack | Multiport scan : 63 ports scanned 1119 1455 1777 1995 2130 2244 2350 2485 2545 3328 3545 4040 4265 4457 4493 5001 5220 5460 5547 6185 7590 7766 7778 8135 8185 8222 8250 8265 8383 8889 8900 9235 9440 9955 9978 10230 10245 10465 10550 10580 15451 16000 20500 20902 21312 22111 25852 29792 30003 31000 31513 32032 33033 33350 33891 33894 40300 47074 51000 53053 56789 60900 62026 |
2019-10-31 03:36:29 |