City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 33.74.194.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3027
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;33.74.194.54. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022703 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 09:18:22 CST 2025
;; MSG SIZE rcvd: 105b'Host 54.194.74.33.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 33.74.194.54.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 89.72.112.41 | attackbotsspam | localhost 89.72.112.41 - - [14/Oct/2019:19:48:17 +0800] "GET /mysql/admin/index.php?lang=en HTTP/1.1" 404 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36" VLOG=- localhost 89.72.112.41 - - [14/Oct/2019:19:48:17 +0800] "GET /mysql/dbadmin/index.php?lang=en HTTP/1.1" 404 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36" VLOG=- localhost 89.72.112.41 - - [14/Oct/2019:19:48:18 +0800] "GET /mysql/sqlmanager/index.php?lang=en HTTP/1.1" 404 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36" VLOG=- localhost 89.72.112.41 - - [14/Oct/2019:19:48:20 +0800] "GET /mysql/mysqlmanager/index.php?lang=en HTTP/1.1" 404 261 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36" VLOG=- localhost 89.72.112.41 - - [14 ... |
2019-10-15 00:11:58 |
| 115.31.175.70 | attackspambots | port scan and connect, tcp 1433 (ms-sql-s) |
2019-10-15 00:12:33 |
| 103.57.80.84 | attackspam | postfix (unknown user, SPF fail or relay access denied) |
2019-10-15 00:06:38 |
| 157.230.11.154 | attackspambots | xmlrpc attack |
2019-10-15 00:27:33 |
| 49.235.7.47 | attackbotsspam | Oct 14 06:55:15 vzmaster sshd[26929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.7.47 user=r.r Oct 14 06:55:16 vzmaster sshd[26929]: Failed password for r.r from 49.235.7.47 port 37966 ssh2 Oct 14 07:03:38 vzmaster sshd[10434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.7.47 user=r.r Oct 14 07:03:40 vzmaster sshd[10434]: Failed password for r.r from 49.235.7.47 port 38976 ssh2 Oct 14 07:08:24 vzmaster sshd[19357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.7.47 user=r.r Oct 14 07:08:26 vzmaster sshd[19357]: Failed password for r.r from 49.235.7.47 port 44624 ssh2 Oct 14 07:12:45 vzmaster sshd[27614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.7.47 user=r.r Oct 14 07:12:48 vzmaster sshd[27614]: Failed password for r.r from 49.235.7.47 port 50254 ssh2 Oct 14 07:16........ ------------------------------- |
2019-10-15 00:24:15 |
| 45.136.109.239 | attack | firewall-block, port(s): 3349/tcp, 3537/tcp, 3783/tcp, 4010/tcp, 4020/tcp, 4411/tcp, 4433/tcp, 4450/tcp, 4600/tcp, 5443/tcp, 5525/tcp, 5544/tcp, 5592/tcp, 7775/tcp |
2019-10-15 00:28:55 |
| 89.248.168.217 | attackspambots | 10/14/2019-17:48:49.331475 89.248.168.217 Protocol: 17 ET DROP Dshield Block Listed Source group 1 |
2019-10-15 00:40:39 |
| 218.242.55.86 | attack | Oct 10 20:02:54 heissa sshd\[14486\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.242.55.86 user=root Oct 10 20:02:55 heissa sshd\[14486\]: Failed password for root from 218.242.55.86 port 54304 ssh2 Oct 10 20:07:16 heissa sshd\[15176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.242.55.86 user=root Oct 10 20:07:18 heissa sshd\[15176\]: Failed password for root from 218.242.55.86 port 34308 ssh2 Oct 10 20:11:28 heissa sshd\[15876\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.242.55.86 user=root |
2019-10-15 00:42:02 |
| 217.182.196.164 | attackbotsspam | Trying ports that it shouldn't be. |
2019-10-15 00:13:59 |
| 138.68.4.8 | attackspam | 2019-10-14T12:00:14.784406shield sshd\[23415\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.4.8 user=root 2019-10-14T12:00:16.956361shield sshd\[23415\]: Failed password for root from 138.68.4.8 port 57244 ssh2 2019-10-14T12:04:05.672661shield sshd\[23749\]: Invalid user git from 138.68.4.8 port 40006 2019-10-14T12:04:05.676981shield sshd\[23749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.4.8 2019-10-14T12:04:07.894198shield sshd\[23749\]: Failed password for invalid user git from 138.68.4.8 port 40006 ssh2 |
2019-10-15 00:11:08 |
| 192.42.116.25 | attackspambots | Oct 14 13:47:44 sso sshd[11210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.42.116.25 Oct 14 13:47:46 sso sshd[11210]: Failed password for invalid user 101 from 192.42.116.25 port 42178 ssh2 ... |
2019-10-15 00:30:40 |
| 202.120.38.28 | attack | Oct 14 17:10:35 vmanager6029 sshd\[15235\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.120.38.28 user=root Oct 14 17:10:37 vmanager6029 sshd\[15235\]: Failed password for root from 202.120.38.28 port 10817 ssh2 Oct 14 17:16:58 vmanager6029 sshd\[15356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.120.38.28 user=root |
2019-10-15 00:12:22 |
| 51.15.131.232 | attack | Oct 14 12:16:34 archiv sshd[30118]: Address 51.15.131.232 maps to 232-131-15-51.rev.cloud.scaleway.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 14 12:16:34 archiv sshd[30118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.131.232 user=r.r Oct 14 12:16:36 archiv sshd[30118]: Failed password for r.r from 51.15.131.232 port 39212 ssh2 Oct 14 12:16:36 archiv sshd[30118]: Received disconnect from 51.15.131.232 port 39212:11: Bye Bye [preauth] Oct 14 12:16:36 archiv sshd[30118]: Disconnected from 51.15.131.232 port 39212 [preauth] Oct 14 12:23:00 archiv sshd[30190]: Address 51.15.131.232 maps to 232-131-15-51.rev.cloud.scaleway.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 14 12:23:00 archiv sshd[30190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.131.232 user=r.r Oct 14 12:23:03 archiv sshd[30190]: Failed pas........ ------------------------------- |
2019-10-15 00:10:47 |
| 82.98.142.9 | attack | fail2ban |
2019-10-15 00:28:40 |
| 121.134.174.236 | attackbots | postfix (unknown user, SPF fail or relay access denied) |
2019-10-15 00:01:43 |