City: unknown
Region: unknown
Country: Russian Federation
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.140.254.75
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20833
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.140.254.75. IN A
;; AUTHORITY SECTION:
. 353 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022100602 1800 900 604800 86400
;; Query time: 23 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 07 06:21:02 CST 2022
;; MSG SIZE rcvd: 106
Host 75.254.140.94.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 75.254.140.94.in-addr.arpa: NXDOMAIN
IP | Type | Details | Datetime |
---|---|---|---|
104.131.37.34 | attackbotsspam | Oct 22 22:26:11 ns381471 sshd[7748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.37.34 Oct 22 22:26:13 ns381471 sshd[7748]: Failed password for invalid user sadf21sadg from 104.131.37.34 port 55975 ssh2 Oct 22 22:31:16 ns381471 sshd[7950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.37.34 |
2019-10-23 04:36:07 |
190.16.18.36 | attack | Spam Timestamp : 22-Oct-19 20:56 BlockList Provider combined abuse (726) |
2019-10-23 04:32:43 |
45.115.178.195 | attackbotsspam | Oct 22 22:37:38 meumeu sshd[27216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.115.178.195 Oct 22 22:37:40 meumeu sshd[27216]: Failed password for invalid user admin from 45.115.178.195 port 48649 ssh2 Oct 22 22:45:15 meumeu sshd[28392]: Failed password for root from 45.115.178.195 port 44683 ssh2 ... |
2019-10-23 05:02:53 |
58.214.255.41 | attackspambots | Oct 22 16:45:44 plusreed sshd[3598]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.214.255.41 user=root Oct 22 16:45:47 plusreed sshd[3598]: Failed password for root from 58.214.255.41 port 64688 ssh2 ... |
2019-10-23 04:58:48 |
112.29.135.180 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/112.29.135.180/ CN - 1H : (414) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN9808 IP : 112.29.135.180 CIDR : 112.29.135.0/24 PREFIX COUNT : 3598 UNIQUE IP COUNT : 18819072 ATTACKS DETECTED ASN9808 : 1H - 1 3H - 2 6H - 2 12H - 4 24H - 7 DateTime : 2019-10-22 22:11:11 INFO : Server 403 - Looking for resource vulnerabilities Detected and Blocked by ADMIN - data recovery |
2019-10-23 04:53:59 |
45.136.109.249 | attack | Oct 22 21:41:15 h2177944 kernel: \[4649139.825708\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.249 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=45321 PROTO=TCP SPT=55312 DPT=5528 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 21:47:32 h2177944 kernel: \[4649516.776744\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.249 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=57623 PROTO=TCP SPT=55312 DPT=4992 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 22:09:45 h2177944 kernel: \[4650849.819298\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.249 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=27951 PROTO=TCP SPT=55312 DPT=4982 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 22:11:13 h2177944 kernel: \[4650937.858393\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.249 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=64394 PROTO=TCP SPT=55312 DPT=5165 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 22:21:22 h2177944 kernel: \[4651546.839401\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.249 DST=85.214. |
2019-10-23 04:54:25 |
51.75.23.62 | attack | Oct 22 22:26:41 SilenceServices sshd[20178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.23.62 Oct 22 22:26:43 SilenceServices sshd[20178]: Failed password for invalid user testtest from 51.75.23.62 port 58690 ssh2 Oct 22 22:30:28 SilenceServices sshd[21176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.23.62 |
2019-10-23 04:36:27 |
51.83.76.36 | attack | Oct 22 22:11:20 ArkNodeAT sshd\[14662\]: Invalid user npmaseko from 51.83.76.36 Oct 22 22:11:20 ArkNodeAT sshd\[14662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.76.36 Oct 22 22:11:22 ArkNodeAT sshd\[14662\]: Failed password for invalid user npmaseko from 51.83.76.36 port 39324 ssh2 |
2019-10-23 04:48:25 |
45.252.249.240 | attackbotsspam | Brute-Force attempts in wordpress websites |
2019-10-23 04:50:35 |
94.176.207.66 | attack | Unauthorised access (Oct 22) SRC=94.176.207.66 LEN=52 TTL=115 ID=24956 DF TCP DPT=1433 WINDOW=8192 SYN Unauthorised access (Oct 22) SRC=94.176.207.66 LEN=52 TTL=115 ID=142 DF TCP DPT=1433 WINDOW=8192 SYN |
2019-10-23 04:46:23 |
168.205.36.29 | attack | 445/tcp 445/tcp [2019-10-04/22]2pkt |
2019-10-23 04:56:05 |
106.13.47.10 | attackbotsspam | 2019-10-22T20:43:06.616774abusebot-2.cloudsearch.cf sshd\[7349\]: Invalid user msi from 106.13.47.10 port 37884 |
2019-10-23 04:56:47 |
160.119.141.196 | attackspambots | detected by Fail2Ban |
2019-10-23 05:01:07 |
92.75.227.83 | attack | Spam Timestamp : 22-Oct-19 19:46 BlockList Provider combined abuse (720) |
2019-10-23 04:37:00 |
106.13.8.103 | attack | 2019-10-22T20:30:42.160704shield sshd\[13736\]: Invalid user pico-nf-8100 from 106.13.8.103 port 57828 2019-10-22T20:30:42.164948shield sshd\[13736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.8.103 2019-10-22T20:30:44.414258shield sshd\[13736\]: Failed password for invalid user pico-nf-8100 from 106.13.8.103 port 57828 ssh2 2019-10-22T20:40:20.743030shield sshd\[15629\]: Invalid user zaqwsx123! from 106.13.8.103 port 37414 2019-10-22T20:40:20.747767shield sshd\[15629\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.8.103 |
2019-10-23 04:45:45 |