City: unknown
Region: unknown
Country: Australia
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 0.42.163.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21374
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;0.42.163.140. IN A
;; AUTHORITY SECTION:
. 144 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022092501 1800 900 604800 86400
;; Query time: 183 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 26 05:39:24 CST 2022
;; MSG SIZE rcvd: 105Host 140.163.42.0.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 140.163.42.0.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 129.211.157.209 | attack | Feb 21 17:02:19 plusreed sshd[9664]: Invalid user rr from 129.211.157.209 ... |
2020-02-22 06:05:58 |
| 138.186.31.64 | attack | Unauthorized connection attempt from IP address 138.186.31.64 on Port 445(SMB) |
2020-02-22 05:55:12 |
| 5.101.0.209 | attackbotsspam | [Sat Feb 22 04:31:13.125916 2020] [:error] [pid 12863:tid 140080266069760] [client 5.101.0.209:60264] [client 5.101.0.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197:80"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/solr/admin/info/system"] [unique_id "XlBMF20LDB0zxIxC9xQMwgAAAfI"] ... |
2020-02-22 06:18:23 |
| 91.14.90.172 | attackspambots | Lines containing failures of 91.14.90.172 Feb 20 14:52:29 dns01 sshd[8278]: Invalid user guest from 91.14.90.172 port 49135 Feb 20 14:52:29 dns01 sshd[8278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.14.90.172 Feb 20 14:52:32 dns01 sshd[8278]: Failed password for invalid user guest from 91.14.90.172 port 49135 ssh2 Feb 20 14:52:32 dns01 sshd[8278]: Received disconnect from 91.14.90.172 port 49135:11: Bye Bye [preauth] Feb 20 14:52:32 dns01 sshd[8278]: Disconnected from invalid user guest 91.14.90.172 port 49135 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=91.14.90.172 |
2020-02-22 06:01:35 |
| 181.57.158.66 | attackbots | Unauthorized connection attempt from IP address 181.57.158.66 on Port 445(SMB) |
2020-02-22 05:43:48 |
| 218.92.0.212 | attackspambots | SSH Brute-Force attacks |
2020-02-22 06:11:42 |
| 91.55.211.198 | attack | Unauthorized connection attempt from IP address 91.55.211.198 on Port 445(SMB) |
2020-02-22 06:17:30 |
| 158.69.194.115 | attackbots | Feb 21 22:44:36 silence02 sshd[8613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.194.115 Feb 21 22:44:37 silence02 sshd[8613]: Failed password for invalid user cpanelcabcache from 158.69.194.115 port 50765 ssh2 Feb 21 22:47:52 silence02 sshd[8794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.194.115 |
2020-02-22 05:49:56 |
| 77.28.100.91 | attackspambots | Unauthorized connection attempt from IP address 77.28.100.91 on Port 445(SMB) |
2020-02-22 06:10:02 |
| 188.166.163.251 | attackbots | frenzy |
2020-02-22 06:13:46 |
| 121.171.166.170 | attack | Feb 21 18:31:39 vps46666688 sshd[22554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.171.166.170 Feb 21 18:31:41 vps46666688 sshd[22554]: Failed password for invalid user admin from 121.171.166.170 port 33174 ssh2 ... |
2020-02-22 06:04:13 |
| 222.186.30.57 | attackbotsspam | Feb 21 22:46:26 MK-Soft-Root2 sshd[16789]: Failed password for root from 222.186.30.57 port 43532 ssh2 Feb 21 22:46:30 MK-Soft-Root2 sshd[16789]: Failed password for root from 222.186.30.57 port 43532 ssh2 ... |
2020-02-22 05:50:18 |
| 23.97.180.45 | attackspambots | Feb 21 21:55:15 web8 sshd\[31433\]: Invalid user kim from 23.97.180.45 Feb 21 21:55:15 web8 sshd\[31433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.97.180.45 Feb 21 21:55:17 web8 sshd\[31433\]: Failed password for invalid user kim from 23.97.180.45 port 49078 ssh2 Feb 21 21:57:43 web8 sshd\[495\]: Invalid user shuangbo from 23.97.180.45 Feb 21 21:57:43 web8 sshd\[495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.97.180.45 |
2020-02-22 06:15:59 |
| 177.132.71.95 | attackspam | Automatic report - SSH Brute-Force Attack |
2020-02-22 06:10:49 |
| 139.217.96.76 | attackbots | Feb 21 18:31:38 ws24vmsma01 sshd[65987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.96.76 Feb 21 18:31:40 ws24vmsma01 sshd[65987]: Failed password for invalid user huanglu from 139.217.96.76 port 53958 ssh2 ... |
2020-02-22 06:03:25 |