City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 12.11.97.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19139
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;12.11.97.54. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012601 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 12:54:58 CST 2025
;; MSG SIZE rcvd: 104Host 54.97.11.12.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 54.97.11.12.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 82.223.31.244 | attackbotsspam | [TueApr2805:55:03.3436972020][:error][pid3943:tid47649443022592][client82.223.31.244:55355][client82.223.31.244]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"402"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(DisableifyouwanttoallowMSIE6\)"][severity"WARNING"][hostname"lighthouse-accessoires.ch"][uri"/@www.me6.com/"][unique_id"XqepFxa-C0@hkwfjCVuxvwAAAY4"][TueApr2805:55:03.5234782020][:error][pid4098:tid47649455630080][client82.223.31.244:55414][client82.223.31.244]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"402"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6 |
2020-04-28 12:14:20 |
| 122.160.76.68 | attackspam | Apr 28 06:31:14 vps sshd[690895]: Failed password for invalid user weiguo from 122.160.76.68 port 54616 ssh2 Apr 28 06:35:39 vps sshd[715105]: Invalid user ansible from 122.160.76.68 port 57748 Apr 28 06:35:39 vps sshd[715105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.160.76.68 Apr 28 06:35:41 vps sshd[715105]: Failed password for invalid user ansible from 122.160.76.68 port 57748 ssh2 Apr 28 06:40:01 vps sshd[735708]: Invalid user hy from 122.160.76.68 port 60892 ... |
2020-04-28 12:57:08 |
| 202.100.223.42 | attack | 2020-04-28T03:44:48.349167abusebot-5.cloudsearch.cf sshd[6297]: Invalid user jb from 202.100.223.42 port 54401 2020-04-28T03:44:48.354320abusebot-5.cloudsearch.cf sshd[6297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.100.223.42 2020-04-28T03:44:48.349167abusebot-5.cloudsearch.cf sshd[6297]: Invalid user jb from 202.100.223.42 port 54401 2020-04-28T03:44:50.726880abusebot-5.cloudsearch.cf sshd[6297]: Failed password for invalid user jb from 202.100.223.42 port 54401 ssh2 2020-04-28T03:54:08.143130abusebot-5.cloudsearch.cf sshd[6376]: Invalid user hoster from 202.100.223.42 port 45503 2020-04-28T03:54:08.149944abusebot-5.cloudsearch.cf sshd[6376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.100.223.42 2020-04-28T03:54:08.143130abusebot-5.cloudsearch.cf sshd[6376]: Invalid user hoster from 202.100.223.42 port 45503 2020-04-28T03:54:10.065974abusebot-5.cloudsearch.cf sshd[6376]: Failed passwor ... |
2020-04-28 12:54:24 |
| 118.70.185.229 | attackspam | 2020-04-28T04:38:29.092311shield sshd\[5867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.185.229 user=root 2020-04-28T04:38:30.983044shield sshd\[5867\]: Failed password for root from 118.70.185.229 port 48488 ssh2 2020-04-28T04:42:26.648654shield sshd\[6723\]: Invalid user testuser from 118.70.185.229 port 52778 2020-04-28T04:42:26.652358shield sshd\[6723\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.185.229 2020-04-28T04:42:28.412535shield sshd\[6723\]: Failed password for invalid user testuser from 118.70.185.229 port 52778 ssh2 |
2020-04-28 12:53:13 |
| 222.186.175.215 | attackspam | Apr 27 23:34:27 debian sshd[22139]: Unable to negotiate with 222.186.175.215 port 53604: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] Apr 28 00:14:25 debian sshd[24643]: Unable to negotiate with 222.186.175.215 port 13770: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ... |
2020-04-28 12:30:05 |
| 121.201.61.205 | attackbotsspam | $f2bV_matches |
2020-04-28 12:31:03 |
| 185.182.193.201 | attack | Port probing on unauthorized port 36295 |
2020-04-28 12:48:35 |
| 120.148.77.212 | attackspam | Automatic report - Port Scan Attack |
2020-04-28 12:39:36 |
| 94.177.242.123 | attackspam | Apr 28 05:47:49 sip sshd[26552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.242.123 Apr 28 05:47:51 sip sshd[26552]: Failed password for invalid user jimmy from 94.177.242.123 port 51278 ssh2 Apr 28 05:54:37 sip sshd[29025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.242.123 |
2020-04-28 12:36:29 |
| 109.116.41.170 | attack | Apr 28 06:11:20 PorscheCustomer sshd[27976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.116.41.170 Apr 28 06:11:23 PorscheCustomer sshd[27976]: Failed password for invalid user charles from 109.116.41.170 port 58550 ssh2 Apr 28 06:20:53 PorscheCustomer sshd[28353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.116.41.170 ... |
2020-04-28 12:28:46 |
| 198.199.91.162 | attackbotsspam | 2020-04-28T13:28:41.036089vivaldi2.tree2.info sshd[5314]: Invalid user ct from 198.199.91.162 2020-04-28T13:28:41.048166vivaldi2.tree2.info sshd[5314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.91.162 2020-04-28T13:28:41.036089vivaldi2.tree2.info sshd[5314]: Invalid user ct from 198.199.91.162 2020-04-28T13:28:43.219500vivaldi2.tree2.info sshd[5314]: Failed password for invalid user ct from 198.199.91.162 port 39356 ssh2 2020-04-28T13:32:45.558035vivaldi2.tree2.info sshd[5564]: Invalid user test1 from 198.199.91.162 ... |
2020-04-28 12:37:00 |
| 171.226.69.164 | attack | port scan and connect, tcp 8080 (http-proxy) |
2020-04-28 12:55:19 |
| 118.70.132.57 | attack | 20/4/27@23:54:25: FAIL: Alarm-Network address from=118.70.132.57 20/4/27@23:54:25: FAIL: Alarm-Network address from=118.70.132.57 ... |
2020-04-28 12:43:19 |
| 143.107.16.125 | attackspam | 2020-04-28T06:16:56.098855vps773228.ovh.net sshd[9558]: Invalid user niklas from 143.107.16.125 port 40926 2020-04-28T06:16:56.108481vps773228.ovh.net sshd[9558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.107.16.125 2020-04-28T06:16:56.098855vps773228.ovh.net sshd[9558]: Invalid user niklas from 143.107.16.125 port 40926 2020-04-28T06:16:58.160108vps773228.ovh.net sshd[9558]: Failed password for invalid user niklas from 143.107.16.125 port 40926 ssh2 2020-04-28T06:21:24.904825vps773228.ovh.net sshd[9590]: Invalid user lpy from 143.107.16.125 port 52040 ... |
2020-04-28 12:22:51 |
| 116.88.226.132 | attackspambots | Apr 28 05:54:17 debian-2gb-nbg1-2 kernel: \[10304985.110122\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=116.88.226.132 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=48 ID=65204 PROTO=TCP SPT=12890 DPT=26 WINDOW=11942 RES=0x00 SYN URGP=0 |
2020-04-28 12:49:29 |