City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.242.232.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14896
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;116.242.232.21. IN A
;; AUTHORITY SECTION:
. 161 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400
;; Query time: 28 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 05 05:03:20 CST 2022
;; MSG SIZE rcvd: 107Host 21.232.242.116.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 21.232.242.116.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 212.64.14.185 | attackspambots | Aug 15 02:39:18 php1 sshd\[29112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.14.185 user=root Aug 15 02:39:20 php1 sshd\[29112\]: Failed password for root from 212.64.14.185 port 35469 ssh2 Aug 15 02:43:50 php1 sshd\[29436\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.14.185 user=root Aug 15 02:43:52 php1 sshd\[29436\]: Failed password for root from 212.64.14.185 port 33879 ssh2 Aug 15 02:48:20 php1 sshd\[29784\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.14.185 user=root |
2020-08-15 20:52:43 |
| 180.253.10.229 | attackbotsspam | 1597463250 - 08/15/2020 05:47:30 Host: 180.253.10.229/180.253.10.229 Port: 445 TCP Blocked |
2020-08-15 20:17:36 |
| 91.134.167.236 | attack | Aug 15 06:49:11 serwer sshd\[28366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.167.236 user=root Aug 15 06:49:14 serwer sshd\[28366\]: Failed password for root from 91.134.167.236 port 37921 ssh2 Aug 15 06:52:45 serwer sshd\[30869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.167.236 user=root ... |
2020-08-15 20:33:58 |
| 49.88.112.76 | attackspambots | Aug 15 09:05:23 ws24vmsma01 sshd[169770]: Failed password for root from 49.88.112.76 port 30475 ssh2 ... |
2020-08-15 20:23:28 |
| 185.176.27.198 | attackbots | [MK-VM2] Blocked by UFW |
2020-08-15 20:26:26 |
| 45.129.33.4 | attack |
|
2020-08-15 20:48:54 |
| 164.132.145.70 | attack | Aug 15 12:41:28 ip40 sshd[25802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.145.70 Aug 15 12:41:30 ip40 sshd[25802]: Failed password for invalid user PassWord!@# from 164.132.145.70 port 57668 ssh2 ... |
2020-08-15 20:09:12 |
| 85.209.0.100 | attackspambots | nginx/honey/a4a6f |
2020-08-15 20:50:06 |
| 88.218.16.235 | attack | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-08-15 20:22:27 |
| 173.252.95.21 | attackspam | [Sat Aug 15 19:25:57.336250 2020] [:error] [pid 1165:tid 140592558245632] [client 173.252.95.21:64936] [client 173.252.95.21] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/TableFilter/system-v116.css"] [unique_id "XzfUVeniW-eKEEIJLUNKMwABxAA"] ... |
2020-08-15 20:31:58 |
| 51.68.198.75 | attack | Aug 15 05:47:29 serwer sshd\[15551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.198.75 user=root Aug 15 05:47:31 serwer sshd\[15551\]: Failed password for root from 51.68.198.75 port 36648 ssh2 Aug 15 05:49:15 serwer sshd\[16817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.198.75 user=root ... |
2020-08-15 20:14:37 |
| 211.103.222.34 | attack | Aug 15 06:52:24 master sshd[6412]: Failed password for root from 211.103.222.34 port 6930 ssh2 Aug 15 06:58:45 master sshd[6499]: Failed password for root from 211.103.222.34 port 44868 ssh2 Aug 15 07:02:47 master sshd[6984]: Failed password for root from 211.103.222.34 port 11832 ssh2 Aug 15 07:06:52 master sshd[7057]: Failed password for root from 211.103.222.34 port 43138 ssh2 Aug 15 07:10:47 master sshd[7205]: Failed password for root from 211.103.222.34 port 9872 ssh2 Aug 15 07:14:31 master sshd[7225]: Failed password for root from 211.103.222.34 port 41020 ssh2 Aug 15 07:18:27 master sshd[7312]: Failed password for root from 211.103.222.34 port 7747 ssh2 Aug 15 07:22:25 master sshd[7421]: Failed password for root from 211.103.222.34 port 38929 ssh2 Aug 15 07:26:33 master sshd[7495]: Failed password for root from 211.103.222.34 port 5135 ssh2 Aug 15 07:30:37 master sshd[7956]: Failed password for root from 211.103.222.34 port 36168 ssh2 |
2020-08-15 20:22:54 |
| 36.156.155.192 | attackspambots | Aug 15 12:50:56 vmd36147 sshd[16499]: Failed password for root from 36.156.155.192 port 13201 ssh2 Aug 15 12:52:19 vmd36147 sshd[20058]: Failed password for root from 36.156.155.192 port 19612 ssh2 ... |
2020-08-15 20:11:10 |
| 141.8.15.95 | attackspam | Aug 15 20:25:24 itachi1706steam sshd[14708]: Invalid user pi from 141.8.15.95 port 38086 Aug 15 20:25:24 itachi1706steam sshd[14707]: Invalid user pi from 141.8.15.95 port 38084 Aug 15 20:25:24 itachi1706steam sshd[14708]: Connection closed by invalid user pi 141.8.15.95 port 38086 [preauth] ... |
2020-08-15 20:51:40 |
| 101.231.166.39 | attackbotsspam | Aug 15 05:48:14 serwer sshd\[16073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.231.166.39 user=root Aug 15 05:48:15 serwer sshd\[16073\]: Failed password for root from 101.231.166.39 port 2061 ssh2 Aug 15 05:50:18 serwer sshd\[17657\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.231.166.39 user=root ... |
2020-08-15 20:23:12 |