City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 10.16.7.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21955
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;10.16.7.42. IN A
;; AUTHORITY SECTION:
. 147 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2021123100 1800 900 604800 86400
;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 31 22:42:35 CST 2021
;; MSG SIZE rcvd: 103Host 42.7.16.10.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 42.7.16.10.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 60.246.3.79 | attack | IMAP brute force ... |
2020-04-16 00:34:28 |
| 222.186.52.139 | attackbotsspam | 04/15/2020-12:29:51.429276 222.186.52.139 Protocol: 6 ET SCAN Potential SSH Scan |
2020-04-16 00:30:49 |
| 197.156.69.34 | attackbotsspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-04-16 00:28:02 |
| 213.180.203.184 | attackspam | [Wed Apr 15 19:08:40.958261 2020] [:error] [pid 25691:tid 139897189979904] [client 213.180.203.184:38642] [client 213.180.203.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "Xpb5SIxk7T6pcaz7KNP57AAAAe8"] ... |
2020-04-16 01:03:47 |
| 49.88.112.114 | attackbots | Apr 15 12:45:37 plusreed sshd[16471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Apr 15 12:45:40 plusreed sshd[16471]: Failed password for root from 49.88.112.114 port 61395 ssh2 ... |
2020-04-16 00:57:04 |
| 110.166.82.211 | attackspam | Apr 15 18:16:09 sso sshd[873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.166.82.211 Apr 15 18:16:11 sso sshd[873]: Failed password for invalid user user from 110.166.82.211 port 58688 ssh2 ... |
2020-04-16 00:55:14 |
| 91.206.12.1 | attackspam | Apr 15 17:39:55 xeon sshd[36516]: Failed password for mysql from 91.206.12.1 port 39306 ssh2 |
2020-04-16 00:44:59 |
| 113.252.73.248 | attack | Honeypot attack, port: 5555, PTR: 248-73-252-113-on-nets.com. |
2020-04-16 00:24:05 |
| 163.172.25.234 | attackspambots | Apr 15 17:03:29 xeon sshd[33437]: Failed password for invalid user account from 163.172.25.234 port 46702 ssh2 |
2020-04-16 00:59:54 |
| 178.142.28.193 | attackspambots | Lines containing failures of 178.142.28.193 Apr 15 15:04:27 shared05 sshd[669]: Invalid user pi from 178.142.28.193 port 43780 Apr 15 15:04:27 shared05 sshd[670]: Invalid user pi from 178.142.28.193 port 43782 Apr 15 15:04:27 shared05 sshd[669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.142.28.193 Apr 15 15:04:27 shared05 sshd[670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.142.28.193 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=178.142.28.193 |
2020-04-16 01:04:07 |
| 221.120.32.25 | attackbotsspam | Apr 15 17:34:25 santamaria sshd\[24926\]: Invalid user user from 221.120.32.25 Apr 15 17:34:29 santamaria sshd\[24926\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.120.32.25 Apr 15 17:34:31 santamaria sshd\[24926\]: Failed password for invalid user user from 221.120.32.25 port 38472 ssh2 ... |
2020-04-16 00:56:00 |
| 85.93.57.53 | attackspam | Apr 15 11:14:06 ws12vmsma01 sshd[18868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.93.57.53 user=root Apr 15 11:14:09 ws12vmsma01 sshd[18868]: Failed password for root from 85.93.57.53 port 39844 ssh2 Apr 15 11:17:49 ws12vmsma01 sshd[19388]: Invalid user l4d2 from 85.93.57.53 ... |
2020-04-16 00:33:29 |
| 138.68.148.177 | attackbots | Apr 15 16:22:51 |
2020-04-16 00:58:55 |
| 211.180.175.198 | attackbots | (sshd) Failed SSH login from 211.180.175.198 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 15 17:06:39 amsweb01 sshd[1971]: Invalid user pan from 211.180.175.198 port 36761 Apr 15 17:06:41 amsweb01 sshd[1971]: Failed password for invalid user pan from 211.180.175.198 port 36761 ssh2 Apr 15 17:28:03 amsweb01 sshd[4502]: Invalid user deploy from 211.180.175.198 port 53656 Apr 15 17:28:06 amsweb01 sshd[4502]: Failed password for invalid user deploy from 211.180.175.198 port 53656 ssh2 Apr 15 17:40:40 amsweb01 sshd[6150]: Invalid user hduser from 211.180.175.198 port 58546 |
2020-04-16 00:36:13 |
| 178.32.218.192 | attackbots | Automatic report - Banned IP Access |
2020-04-16 00:33:16 |