City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 44.74.135.193
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17206
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;44.74.135.193. IN A
;; AUTHORITY SECTION:
. 264 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022052101 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 22 08:12:08 CST 2022
;; MSG SIZE rcvd: 106Host 193.135.74.44.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 193.135.74.44.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 178.54.140.129 | attackspam | 445/tcp [2019-06-21]1pkt |
2019-06-22 04:53:03 |
| 91.205.210.82 | attackbotsspam | Jun 21 21:39:46 mail kernel: \[191531.626448\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=91.205.210.82 DST=91.205.173.180 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=48607 DF PROTO=TCP SPT=26165 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 Jun 21 21:40:55 mail kernel: \[191600.622641\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=91.205.210.82 DST=91.205.173.180 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=58811 DF PROTO=TCP SPT=49836 DPT=7547 WINDOW=14600 RES=0x00 SYN URGP=0 Jun 21 21:46:38 mail kernel: \[191943.621421\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=91.205.210.82 DST=91.205.173.180 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=6602 DF PROTO=TCP SPT=59278 DPT=8291 WINDOW=14600 RES=0x00 SYN URGP=0 |
2019-06-22 04:32:56 |
| 196.52.43.66 | attackbotsspam | firewall-block, port(s): 5289/tcp, 37777/tcp |
2019-06-22 04:42:32 |
| 201.1.116.246 | attackspambots | Request: "GET / HTTP/1.1" |
2019-06-22 04:52:32 |
| 199.249.230.69 | attack | Request: "GET /wp-content/plugins/css-ready-selectors/file.php HTTP/1.1" Request: "GET /res.php HTTP/1.1" Request: "GET /01.php HTTP/1.1" Request: "GET /wp-content/plugins/qetf0.php HTTP/1.1" Request: "GET /wp-content/plugins/server.php HTTP/1.1" Request: "GET /Dwsonv.php HTTP/1.1" Request: "GET /bak.php?login=canshu HTTP/1.1" Request: "GET /wp-content/aw.php HTTP/1.1" Request: "GET /wp-content/plugins/options.php HTTP/1.1" Request: "GET /wp-content/batman.php HTTP/1.1" Request: "GET /date.php HTTP/1.1" Request: "GET /xkl.php HTTP/1.1" Request: "GET /wp-cofigs.php HTTP/1.1" Request: "GET /error_log.php?kudax=w00tz HTTP/1.1" Request: "GET /xyz.php HTTP/1.1" Request: "GET /res.php HTTP/1.1" Request: "GET /res.php HTTP/1.1" Request: "GET /01.php HTTP/1.1" Request: "GET /01.php HTTP/1.1" Request: "GET /Dwsonv.php HTTP/1.1" Request: "GET /Dwsonv.php HTTP/1.1" Request: "GET /bak.php?login=canshu HTTP/1.1" Request: "GET /bak.php?login=canshu HTTP/1.1" Request: "GET /date.php HTTP/1.1" Request: "GET /date.php HTTP/1. |
2019-06-22 04:34:36 |
| 51.158.21.198 | attackspam | Bad Request: "" Request: "GET / HTTP/1.1" |
2019-06-22 05:02:32 |
| 103.4.165.230 | attackspambots | Request: "GET / HTTP/1.1" |
2019-06-22 05:04:28 |
| 84.127.137.26 | attackspam | Jun 16 21:50:51 cumulus sshd[4022]: Bad protocol version identification '' from 84.127.137.26 port 56958 Jun 16 22:12:50 cumulus sshd[5285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.127.137.26 user=r.r Jun 16 22:12:52 cumulus sshd[5285]: Failed password for r.r from 84.127.137.26 port 46304 ssh2 Jun 16 22:12:53 cumulus sshd[5285]: Connection closed by 84.127.137.26 port 46304 [preauth] Jun 16 22:17:14 cumulus sshd[5448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.127.137.26 user=r.r Jun 16 22:17:16 cumulus sshd[5448]: Failed password for r.r from 84.127.137.26 port 34148 ssh2 Jun 16 22:22:30 cumulus sshd[5767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.127.137.26 user=r.r Jun 16 22:22:32 cumulus sshd[5767]: Failed password for r.r from 84.127.137.26 port 58554 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?i |
2019-06-22 04:33:29 |
| 89.44.202.182 | attackspam | Request: "GET / HTTP/1.1" |
2019-06-22 04:54:24 |
| 158.69.241.140 | attack | 5061/tcp [2019-06-21]1pkt |
2019-06-22 05:02:51 |
| 51.15.138.232 | attack | Bad Request: "GET /xmlrpc.php HTTP/1.1" |
2019-06-22 04:57:18 |
| 113.15.211.211 | attackspam | Jun 19 19:19:54 xb0 sshd[16577]: Failed password for invalid user info from 113.15.211.211 port 17042 ssh2 Jun 19 19:19:55 xb0 sshd[16577]: Received disconnect from 113.15.211.211: 11: Bye Bye [preauth] Jun 19 19:22:17 xb0 sshd[11438]: Failed password for invalid user ubuntu from 113.15.211.211 port 13459 ssh2 Jun 19 19:22:17 xb0 sshd[11438]: Received disconnect from 113.15.211.211: 11: Bye Bye [preauth] Jun 19 19:24:31 xb0 sshd[16513]: Failed password for invalid user jenkins from 113.15.211.211 port 14047 ssh2 Jun 19 19:24:32 xb0 sshd[16513]: Received disconnect from 113.15.211.211: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=113.15.211.211 |
2019-06-22 04:59:29 |
| 80.24.191.81 | attackbots | Request: "GET /manager/html HTTP/1.1" Request: "GET /manager/html HTTP/1.1" |
2019-06-22 04:50:51 |
| 185.254.120.6 | attackspambots | Jun 21 21:46:36 * sshd[19398]: Failed password for root from 185.254.120.6 port 43027 ssh2 Jun 21 21:46:36 * sshd[19398]: error: Received disconnect from 185.254.120.6 port 43027:3: com.jcraft.jsch.JSchException: Auth fail [preauth] |
2019-06-22 04:35:36 |
| 115.28.154.44 | attackbotsspam | xmlrpc attack |
2019-06-22 04:48:36 |