City: unknown
Region: unknown
Country: Switzerland
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.63.194.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28668
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;81.63.194.138. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 21:05:29 CST 2025
;; MSG SIZE rcvd: 106Host 138.194.63.81.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 138.194.63.81.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 186.37.53.35 | attackbots | Unauthorised access (Jul 2) SRC=186.37.53.35 LEN=52 TTL=113 ID=8932 DF TCP DPT=445 WINDOW=8192 SYN |
2019-07-03 00:38:51 |
| 51.75.17.228 | attackspambots | 2019-07-02T14:31:07.022175abusebot-8.cloudsearch.cf sshd\[6817\]: Invalid user varnish from 51.75.17.228 port 37262 |
2019-07-03 00:18:25 |
| 189.68.182.86 | attack | Feb 26 22:31:22 motanud sshd\[27665\]: Invalid user nagios from 189.68.182.86 port 52107 Feb 26 22:31:22 motanud sshd\[27665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.68.182.86 Feb 26 22:31:24 motanud sshd\[27665\]: Failed password for invalid user nagios from 189.68.182.86 port 52107 ssh2 |
2019-07-03 00:21:58 |
| 167.249.242.254 | attack | Unauthorized connection attempt from IP address 167.249.242.254 on Port 445(SMB) |
2019-07-03 00:18:01 |
| 193.112.72.180 | attack | 2019-07-02T13:58:13.525489abusebot-4.cloudsearch.cf sshd\[31314\]: Invalid user lois from 193.112.72.180 port 36892 |
2019-07-03 00:37:26 |
| 14.169.180.163 | attack | SMTP Fraud Orders |
2019-07-03 00:58:44 |
| 191.5.135.126 | attack | Unauthorized connection attempt from IP address 191.5.135.126 on Port 445(SMB) |
2019-07-03 00:10:08 |
| 192.241.230.96 | attackbots | MultiHost/MultiPort Probe, Scan, Hack - |
2019-07-03 00:30:18 |
| 183.87.35.162 | attackbots | 2019-07-02T16:35:31.049312abusebot-6.cloudsearch.cf sshd\[21764\]: Invalid user cdoran from 183.87.35.162 port 40576 |
2019-07-03 00:36:03 |
| 182.74.219.150 | attackbotsspam | Jul 2 16:22:58 mail sshd\[5514\]: Invalid user ocadmin from 182.74.219.150 port 58875 Jul 2 16:22:58 mail sshd\[5514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.74.219.150 Jul 2 16:23:00 mail sshd\[5514\]: Failed password for invalid user ocadmin from 182.74.219.150 port 58875 ssh2 Jul 2 16:25:31 mail sshd\[5869\]: Invalid user tftpd from 182.74.219.150 port 42641 Jul 2 16:25:31 mail sshd\[5869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.74.219.150 |
2019-07-03 00:45:20 |
| 142.111.118.66 | attack | TCP port 445 (SMB) attempt blocked by firewall. [2019-07-02 15:57:19] |
2019-07-03 00:37:04 |
| 85.24.211.67 | attack | Unauthorised access (Jul 2) SRC=85.24.211.67 LEN=40 TTL=54 ID=1328 TCP DPT=23 WINDOW=64470 SYN Unauthorised access (Jul 2) SRC=85.24.211.67 LEN=40 TTL=54 ID=62130 TCP DPT=23 WINDOW=64470 SYN |
2019-07-03 01:00:46 |
| 103.208.152.225 | attackbotsspam | Jul 2 10:09:00 TORMINT sshd\[15012\]: Invalid user admin from 103.208.152.225 Jul 2 10:09:00 TORMINT sshd\[15012\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.208.152.225 Jul 2 10:09:02 TORMINT sshd\[15012\]: Failed password for invalid user admin from 103.208.152.225 port 55018 ssh2 ... |
2019-07-03 00:48:14 |
| 134.209.26.166 | attack | 134.209.26.166 - - [02/Jul/2019:15:52:13 +0200] "GET /wp-login.php HTTP/1.1" 200 4405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.26.166 - - [02/Jul/2019:15:52:14 +0200] "POST /wp-login.php HTTP/1.1" 200 4405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.26.166 - - [02/Jul/2019:15:52:14 +0200] "GET /wp-login.php HTTP/1.1" 200 4405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.26.166 - - [02/Jul/2019:15:52:14 +0200] "POST /wp-login.php HTTP/1.1" 200 4405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.26.166 - - [02/Jul/2019:15:52:14 +0200] "GET /wp-login.php HTTP/1.1" 200 4405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.26.166 - - [02/Jul/2019:15:52:15 +0200] "POST /wp-login.php HTTP/1.1" 200 4405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-07-03 01:08:50 |
| 181.231.55.102 | attack | Trying to deliver email spam, but blocked by RBL |
2019-07-03 00:40:29 |