City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 26.14.99.135
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28739
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;26.14.99.135. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012101 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 05:38:20 CST 2025
;; MSG SIZE rcvd: 105Host 135.99.14.26.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 135.99.14.26.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 113.125.41.217 | attack | Automatic report - Banned IP Access |
2019-10-31 01:19:57 |
| 104.248.199.34 | attack | Here more information about 104.248.199.34 info: [Netherlands] 14061 DighostnamealOcean, LLC Connected: 49 servere(s) Reason: ssh Ports: 23 Services: telnet servere: Europe/Moscow (UTC+3) Found at blocklist: abuseat.org, abuseIPDB.com myIP:89.179.244.250 [2019-10-28 07:11:48] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:13:53] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:14:17] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:14:32] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:19:28] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:20:27] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:20:30] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:21:10] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:21:30] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:22:21] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:22:27] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:24:08] (tcp) myIP:23 <- 104.248.199.34:555........ --------------------------------- |
2019-10-31 01:10:59 |
| 45.136.110.44 | attack | Oct 30 17:11:05 h2177944 kernel: \[5327606.780482\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.44 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=65226 PROTO=TCP SPT=54188 DPT=2371 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 30 17:13:24 h2177944 kernel: \[5327746.102609\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.44 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=58505 PROTO=TCP SPT=54188 DPT=3297 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 30 17:37:29 h2177944 kernel: \[5329190.110979\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.44 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=14085 PROTO=TCP SPT=54188 DPT=3321 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 30 17:54:14 h2177944 kernel: \[5330195.103883\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.44 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=11800 PROTO=TCP SPT=54188 DPT=2101 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 30 17:55:14 h2177944 kernel: \[5330255.501575\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.44 DST=85.214.117.9 |
2019-10-31 01:02:21 |
| 103.82.235.10 | attack | "POST /FCKeditor/editor/filemanager/connectors/asp/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F HTTP/1.1" 404 "POST /admin_aspcms/_system/AspCms_SiteSetting.asp HTTP/1.1" 404 "POST /plus/90sec.php HTTP/1.1" 404 "POST /utility/convert/index.php?a=config&source=d7.2_x2.0 HTTP/1.1" 404 "POST /utility/convert/data/config.inc.php HTTP/1.1" 404 "POST /uploads/dede/sys_verifies.php?action=down HTTP/1.1" 404 "POST /index.php/api/Uploadify/preview HTTP/1.1" 404 "POST /fdgq.php HTTP/1.1" 404 "POST /xbodk.php HTTP/1.1" 404 "POST /ysyqq.php HTTP/1.1" 404 |
2019-10-31 01:26:07 |
| 85.204.51.25 | attack | Lines containing failures of 85.204.51.25 Oct 29 11:25:17 shared11 postfix/smtpd[24719]: connect from lifestyleclub.live[85.204.51.25] Oct 29 11:25:17 shared11 policyd-spf[26433]: prepend Received-SPF: Pass (mailfrom) identhostnamey=mailfrom; client-ip=85.204.51.25; helo=lifestyleclub.live; envelope-from=x@x Oct x@x Oct 29 11:25:17 shared11 postfix/smtpd[24719]: disconnect from lifestyleclub.live[85.204.51.25] ehlo=1 mail=1 rcpt=0/1 data=0/1 eclipset=1 quhostname=1 commands=4/6 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=85.204.51.25 |
2019-10-31 01:09:32 |
| 85.75.88.168 | attackspam | Automatic report - XMLRPC Attack |
2019-10-31 01:24:10 |
| 139.59.46.243 | attack | Oct 30 06:56:08 eddieflores sshd\[32533\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.46.243 user=root Oct 30 06:56:10 eddieflores sshd\[32533\]: Failed password for root from 139.59.46.243 port 53218 ssh2 Oct 30 07:00:35 eddieflores sshd\[422\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.46.243 user=root Oct 30 07:00:37 eddieflores sshd\[422\]: Failed password for root from 139.59.46.243 port 35958 ssh2 Oct 30 07:05:13 eddieflores sshd\[857\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.46.243 user=root |
2019-10-31 01:18:51 |
| 92.222.181.159 | attackbotsspam | Oct 30 14:25:20 server sshd\[3870\]: Invalid user 123\#TradeLinuxKi!l\|iN6\#Th3Ph03$%nix@NdR3b!irD from 92.222.181.159 port 52961 Oct 30 14:25:20 server sshd\[3870\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.181.159 Oct 30 14:25:22 server sshd\[3870\]: Failed password for invalid user 123\#TradeLinuxKi!l\|iN6\#Th3Ph03$%nix@NdR3b!irD from 92.222.181.159 port 52961 ssh2 Oct 30 14:29:16 server sshd\[24950\]: Invalid user tijdelijk from 92.222.181.159 port 44395 Oct 30 14:29:16 server sshd\[24950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.181.159 |
2019-10-31 00:57:50 |
| 121.237.167.157 | attack | Oct 29 17:07:52 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 121.237.167.157 port 57512 ssh2 (target: 158.69.100.143:22, password: r.r) Oct 29 17:07:52 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 121.237.167.157 port 58466 ssh2 (target: 158.69.100.154:22, password: r.r) Oct 29 17:07:52 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 121.237.167.157 port 37386 ssh2 (target: 158.69.100.153:22, password: r.r) Oct 29 17:07:53 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 121.237.167.157 port 48416 ssh2 (target: 158.69.100.140:22, password: r.r) Oct 29 17:07:53 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 121.237.167.157 port 50164 ssh2 (target: 158.69.100.157:22, password: r.r) Oct 29 17:07:53 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 121.237.167.157 port 39202 ssh2 (target: 158.69.100.155:22, password: r.r) Oct 29 17:07:53 wildwolf ssh-honeypotd[26164]: Failed password for r.r from 121........ ------------------------------ |
2019-10-31 01:27:38 |
| 222.186.175.151 | attack | SSH Bruteforce attempt |
2019-10-31 01:39:52 |
| 106.13.56.72 | attackspambots | Oct 30 16:58:47 localhost sshd\[18679\]: Invalid user administrator from 106.13.56.72 port 39842 Oct 30 16:58:47 localhost sshd\[18679\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.72 Oct 30 16:58:49 localhost sshd\[18679\]: Failed password for invalid user administrator from 106.13.56.72 port 39842 ssh2 Oct 30 17:03:32 localhost sshd\[18793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.56.72 user=root Oct 30 17:03:34 localhost sshd\[18793\]: Failed password for root from 106.13.56.72 port 46992 ssh2 ... |
2019-10-31 01:14:08 |
| 110.139.253.194 | attackspam | Automatic report - Port Scan Attack |
2019-10-31 00:54:21 |
| 82.196.14.222 | attackspambots | SSH invalid-user multiple login try |
2019-10-31 01:00:33 |
| 73.189.112.132 | attackspam | Oct 30 17:32:49 server sshd\[32506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-73-189-112-132.hsd1.ca.comcast.net user=root Oct 30 17:32:50 server sshd\[32506\]: Failed password for root from 73.189.112.132 port 36630 ssh2 Oct 30 17:50:21 server sshd\[4310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-73-189-112-132.hsd1.ca.comcast.net user=root Oct 30 17:50:23 server sshd\[4310\]: Failed password for root from 73.189.112.132 port 33568 ssh2 Oct 30 17:54:14 server sshd\[4879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-73-189-112-132.hsd1.ca.comcast.net user=root ... |
2019-10-31 01:19:34 |
| 182.180.62.207 | attackbotsspam | Brute forcing RDP port 3389 |
2019-10-31 01:12:42 |