City: unknown
Region: unknown
Country: Korea (the Republic of)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.58.239.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45495
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;124.58.239.148. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021601 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 11:00:29 CST 2025
;; MSG SIZE rcvd: 107Host 148.239.58.124.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 148.239.58.124.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 182.73.250.50 | attack | Sep 8 20:22:15 localhost sshd[14526]: Invalid user student from 182.73.250.50 port 54888 Sep 8 20:22:15 localhost sshd[14526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.73.250.50 Sep 8 20:22:15 localhost sshd[14526]: Invalid user student from 182.73.250.50 port 54888 Sep 8 20:22:17 localhost sshd[14526]: Failed password for invalid user student from 182.73.250.50 port 54888 ssh2 ... |
2019-09-08 20:32:26 |
| 40.112.176.70 | attackbots | Sep 8 10:13:11 pornomens sshd\[28051\]: Invalid user musikbot from 40.112.176.70 port 49540 Sep 8 10:13:11 pornomens sshd\[28051\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.112.176.70 Sep 8 10:13:13 pornomens sshd\[28051\]: Failed password for invalid user musikbot from 40.112.176.70 port 49540 ssh2 ... |
2019-09-08 21:24:31 |
| 35.232.119.162 | attackspambots | $f2bV_matches_ltvn |
2019-09-08 20:43:38 |
| 121.69.3.38 | attack | Fail2Ban - FTP Abuse Attempt |
2019-09-08 21:08:13 |
| 138.68.208.149 | attackbots | 992/tcp 465/tcp 9042/tcp... [2019-09-06/07]5pkt,5pt.(tcp) |
2019-09-08 20:47:03 |
| 51.255.168.30 | attackspam | Sep 8 03:15:03 hiderm sshd\[19733\]: Invalid user appadmin from 51.255.168.30 Sep 8 03:15:03 hiderm sshd\[19733\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=30.ip-51-255-168.eu Sep 8 03:15:05 hiderm sshd\[19733\]: Failed password for invalid user appadmin from 51.255.168.30 port 56436 ssh2 Sep 8 03:19:07 hiderm sshd\[20028\]: Invalid user gituser from 51.255.168.30 Sep 8 03:19:07 hiderm sshd\[20028\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=30.ip-51-255-168.eu |
2019-09-08 21:19:55 |
| 37.187.198.246 | attack | [SunSep0813:41:16.9883522019][:error][pid30457:tid47849223132928][client37.187.198.246:45046][client37.187.198.246]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\$mozilla\^\|mozilla/[45]\\\\\\\\.[1-9]\|\^mozilla/4\\\\\\\\.0\$\)"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"419"][id"330131"][rev"3"][msg"Atomicorp.comWAFRules:MaliciousBotBlocked\(FakeMozillaUserAgentStringDetected\)"][severity"CRITICAL"][hostname"mondo-it.ch"][uri"/wp-includes/js/tinymce/plugins/fullscreen/media-admin.php"][unique_id"XXTo3HZCtWdGikl8x8s1MAAAAAs"]\,referer:mondo-it.ch[SunSep0813:41:17.1966682019][:error][pid3042:tid47849312130816][client37.187.198.246:33890][client37.187.198.246]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\$mozilla\^\|mozilla/[45]\\\\\\\\.[1-9]\|\^mozilla/4\\\\\\\\.0\$\)"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"419"][id"330131\ |
2019-09-08 21:01:12 |
| 112.85.42.188 | attackspam | Sep 8 07:14:01 debian sshd[7533]: Unable to negotiate with 112.85.42.188 port 16163: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Sep 8 07:20:36 debian sshd[7949]: Unable to negotiate with 112.85.42.188 port 46573: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2019-09-08 20:59:40 |
| 109.157.247.234 | attack | TCP Port: 25 _ invalid blocked dnsbl-sorbs abuseat-org _ _ _ _ (767) |
2019-09-08 20:28:01 |
| 164.68.120.248 | attackbotsspam | Sep 8 14:55:15 core sshd[9679]: Invalid user rust from 164.68.120.248 port 36908 Sep 8 14:55:17 core sshd[9679]: Failed password for invalid user rust from 164.68.120.248 port 36908 ssh2 ... |
2019-09-08 21:22:49 |
| 59.37.39.174 | attackspam | *Port Scan* detected from 59.37.39.174 (CN/China/-). 4 hits in the last 201 seconds |
2019-09-08 21:09:28 |
| 119.29.53.107 | attack | Sep 8 11:11:09 server01 sshd\[8351\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.53.107 user=www-data Sep 8 11:11:11 server01 sshd\[8351\]: Failed password for www-data from 119.29.53.107 port 49495 ssh2 Sep 8 11:13:52 server01 sshd\[8414\]: Invalid user testuser from 119.29.53.107 ... |
2019-09-08 20:40:38 |
| 165.22.59.11 | attackbots | 2019-09-08T13:15:08.948075abusebot-8.cloudsearch.cf sshd\[9069\]: Invalid user password123 from 165.22.59.11 port 47820 |
2019-09-08 21:31:37 |
| 104.229.177.64 | attack | TCP Port: 25 _ invalid blocked dnsbl-sorbs abuseat-org _ _ _ _ (766) |
2019-09-08 20:31:40 |
| 141.98.9.205 | attack | Sep 8 14:55:01 relay postfix/smtpd\[22600\]: warning: unknown\[141.98.9.205\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 14:55:14 relay postfix/smtpd\[20488\]: warning: unknown\[141.98.9.205\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 14:56:00 relay postfix/smtpd\[22600\]: warning: unknown\[141.98.9.205\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 14:56:09 relay postfix/smtpd\[22531\]: warning: unknown\[141.98.9.205\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 8 14:56:56 relay postfix/smtpd\[11928\]: warning: unknown\[141.98.9.205\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-09-08 21:02:28 |