City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 244.74.35.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31814
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;244.74.35.21. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013100 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 14:51:21 CST 2025
;; MSG SIZE rcvd: 105Host 21.35.74.244.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 21.35.74.244.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.52.135.166 | attack | " " |
2020-05-21 01:24:34 |
| 62.215.6.11 | attackbots | May 20 19:16:14 vps sshd[563029]: Failed password for invalid user ole from 62.215.6.11 port 39654 ssh2 May 20 19:20:12 vps sshd[582118]: Invalid user ogz from 62.215.6.11 port 42697 May 20 19:20:12 vps sshd[582118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=out02-tec.fasttelco.net May 20 19:20:13 vps sshd[582118]: Failed password for invalid user ogz from 62.215.6.11 port 42697 ssh2 May 20 19:24:06 vps sshd[596814]: Invalid user otj from 62.215.6.11 port 45740 ... |
2020-05-21 01:40:08 |
| 122.51.223.155 | attack | May 20 13:56:22 dns1 sshd[24558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.223.155 May 20 13:56:24 dns1 sshd[24558]: Failed password for invalid user nvb from 122.51.223.155 port 46212 ssh2 May 20 13:58:08 dns1 sshd[24639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.223.155 |
2020-05-21 01:13:17 |
| 203.192.204.168 | attackspambots | May 20 19:13:19 vps687878 sshd\[12455\]: Failed password for invalid user rhh from 203.192.204.168 port 37090 ssh2 May 20 19:17:03 vps687878 sshd\[12898\]: Invalid user yfv from 203.192.204.168 port 49018 May 20 19:17:03 vps687878 sshd\[12898\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.192.204.168 May 20 19:17:05 vps687878 sshd\[12898\]: Failed password for invalid user yfv from 203.192.204.168 port 49018 ssh2 May 20 19:20:59 vps687878 sshd\[13272\]: Invalid user ecn from 203.192.204.168 port 32982 May 20 19:20:59 vps687878 sshd\[13272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.192.204.168 ... |
2020-05-21 01:32:36 |
| 92.222.78.178 | attack | Fail2Ban Ban Triggered |
2020-05-21 00:57:43 |
| 36.133.28.50 | attack | May 20 19:07:14 master sshd[12653]: Failed password for invalid user spa from 36.133.28.50 port 35206 ssh2 May 20 19:24:19 master sshd[12694]: Failed password for invalid user mlm from 36.133.28.50 port 58634 ssh2 May 20 19:28:05 master sshd[12702]: Failed password for invalid user vxn from 36.133.28.50 port 35294 ssh2 May 20 19:33:41 master sshd[12732]: Failed password for invalid user ovb from 36.133.28.50 port 56746 ssh2 |
2020-05-21 01:27:13 |
| 78.128.113.77 | attackbotsspam | May 20 18:50:48 mail.srvfarm.net postfix/smtpd[1531589]: warning: unknown[78.128.113.77]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 20 18:50:48 mail.srvfarm.net postfix/smtpd[1531589]: lost connection after AUTH from unknown[78.128.113.77] May 20 18:50:54 mail.srvfarm.net postfix/smtpd[1531558]: lost connection after CONNECT from unknown[78.128.113.77] May 20 18:50:54 mail.srvfarm.net postfix/smtpd[1536328]: lost connection after CONNECT from unknown[78.128.113.77] May 20 18:50:55 mail.srvfarm.net postfix/smtpd[1534720]: lost connection after CONNECT from unknown[78.128.113.77] |
2020-05-21 01:09:13 |
| 187.189.61.8 | attack | May 20 17:55:06 icinga sshd[43767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.189.61.8 May 20 17:55:08 icinga sshd[43767]: Failed password for invalid user jez from 187.189.61.8 port 41374 ssh2 May 20 18:05:39 icinga sshd[61080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.189.61.8 ... |
2020-05-21 01:12:27 |
| 138.68.251.101 | attack | firewall-block, port(s): 31080/tcp |
2020-05-21 01:12:58 |
| 83.145.168.77 | attackspambots | May 20 17:52:06 mail.srvfarm.net postfix/smtpd[1509610]: warning: 83-145-168-77.cable-modem.tkk.net.pl[83.145.168.77]: SASL PLAIN authentication failed: May 20 17:52:06 mail.srvfarm.net postfix/smtpd[1509610]: lost connection after AUTH from 83-145-168-77.cable-modem.tkk.net.pl[83.145.168.77] May 20 17:57:33 mail.srvfarm.net postfix/smtpd[1514144]: warning: 83-145-168-77.cable-modem.tkk.net.pl[83.145.168.77]: SASL PLAIN authentication failed: May 20 17:57:33 mail.srvfarm.net postfix/smtpd[1514144]: lost connection after AUTH from 83-145-168-77.cable-modem.tkk.net.pl[83.145.168.77] May 20 18:00:08 mail.srvfarm.net postfix/smtps/smtpd[1507717]: warning: 83-145-168-77.cable-modem.tkk.net.pl[83.145.168.77]: SASL PLAIN authentication failed: |
2020-05-21 00:58:12 |
| 2a01:4f8:211:359::2 | attack | 2020/05/20 17:54:30 [error] 2970044#2970044: *131797 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 2a01:4f8:211:359::2, server: _, request: "GET /wp-login.php HTTP/1.1", host: "host-germany.com" 2020/05/20 17:54:31 [error] 2970044#2970044: *131797 open() "/usr/share/nginx/html/wp-login.php" failed (2: No such file or directory), client: 2a01:4f8:211:359::2, server: _, request: "POST /wp-login.php HTTP/1.1", host: "host-germany.com" |
2020-05-21 01:03:12 |
| 37.139.1.197 | attack | May 20 18:54:38 srv-ubuntu-dev3 sshd[12475]: Invalid user irp from 37.139.1.197 May 20 18:54:38 srv-ubuntu-dev3 sshd[12475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.1.197 May 20 18:54:38 srv-ubuntu-dev3 sshd[12475]: Invalid user irp from 37.139.1.197 May 20 18:54:40 srv-ubuntu-dev3 sshd[12475]: Failed password for invalid user irp from 37.139.1.197 port 57017 ssh2 May 20 18:58:58 srv-ubuntu-dev3 sshd[13092]: Invalid user rtz from 37.139.1.197 May 20 18:58:58 srv-ubuntu-dev3 sshd[13092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.1.197 May 20 18:58:58 srv-ubuntu-dev3 sshd[13092]: Invalid user rtz from 37.139.1.197 May 20 18:59:01 srv-ubuntu-dev3 sshd[13092]: Failed password for invalid user rtz from 37.139.1.197 port 60064 ssh2 May 20 19:03:30 srv-ubuntu-dev3 sshd[13908]: Invalid user pcu from 37.139.1.197 ... |
2020-05-21 01:21:47 |
| 213.92.204.253 | attackbots | May 20 17:46:14 mail.srvfarm.net postfix/smtps/smtpd[1512838]: warning: unknown[213.92.204.253]: SASL PLAIN authentication failed: May 20 17:46:14 mail.srvfarm.net postfix/smtps/smtpd[1512838]: lost connection after AUTH from unknown[213.92.204.253] May 20 17:48:46 mail.srvfarm.net postfix/smtpd[1512839]: warning: unknown[213.92.204.253]: SASL PLAIN authentication failed: May 20 17:48:46 mail.srvfarm.net postfix/smtpd[1512839]: lost connection after AUTH from unknown[213.92.204.253] May 20 17:50:38 mail.srvfarm.net postfix/smtpd[1512860]: warning: unknown[213.92.204.253]: SASL PLAIN authentication failed: |
2020-05-21 01:03:33 |
| 177.190.88.230 | attackbots | May 20 17:37:10 mail.srvfarm.net postfix/smtps/smtpd[1509545]: warning: 177-190-88-230.adsnet-telecom.net.br[177.190.88.230]: SASL PLAIN authentication failed: May 20 17:44:44 mail.srvfarm.net postfix/smtpd[1512880]: warning: 177-190-88-230.adsnet-telecom.net.br[177.190.88.230]: SASL PLAIN authentication failed: May 20 17:44:45 mail.srvfarm.net postfix/smtpd[1512880]: lost connection after AUTH from 177-190-88-230.adsnet-telecom.net.br[177.190.88.230] May 20 17:45:41 mail.srvfarm.net postfix/smtps/smtpd[1512857]: warning: 177-190-88-230.adsnet-telecom.net.br[177.190.88.230]: SASL PLAIN authentication failed: May 20 17:45:42 mail.srvfarm.net postfix/smtps/smtpd[1512857]: lost connection after AUTH from 177-190-88-230.adsnet-telecom.net.br[177.190.88.230] |
2020-05-21 01:06:20 |
| 213.217.0.133 | attack | May 20 19:17:19 debian-2gb-nbg1-2 kernel: \[12253865.167268\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=213.217.0.133 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=35661 PROTO=TCP SPT=53560 DPT=61542 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-21 01:19:02 |