City: unknown
Region: unknown
Country: Taiwan (Province of China)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.92.42.88
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28693
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;140.92.42.88. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021501 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 16 04:37:43 CST 2025
;; MSG SIZE rcvd: 105Host 88.42.92.140.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 88.42.92.140.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.248.149.130 | attackspam | Mar 5 10:15:58 |
2020-03-05 17:23:29 |
| 222.186.30.209 | attack | Mar 5 09:31:47 MK-Soft-VM8 sshd[30580]: Failed password for root from 222.186.30.209 port 37547 ssh2 Mar 5 09:31:55 MK-Soft-VM8 sshd[30580]: Failed password for root from 222.186.30.209 port 37547 ssh2 ... |
2020-03-05 16:53:39 |
| 97.116.6.252 | attackbotsspam | Honeypot attack, port: 81, PTR: 97-116-6-252.mpls.qwest.net. |
2020-03-05 17:12:28 |
| 106.12.214.128 | attackbots | Mar 5 13:41:38 gw1 sshd[29738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.128 Mar 5 13:41:39 gw1 sshd[29738]: Failed password for invalid user es from 106.12.214.128 port 57909 ssh2 ... |
2020-03-05 16:44:43 |
| 202.67.46.12 | attackspam | [Thu Mar 05 11:49:45.299644 2020] [:error] [pid 16024:tid 140656859158272] [client 202.67.46.12:54765] [client 202.67.46.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:[\"'`]\\\\s*?(?:(?:n(?:and|ot)|(?:x?x)?or|between|\\\\|\\\\||and|div|&&)\\\\s+[\\\\s\\\\w]+=\\\\s*?\\\\w+\\\\s*?having\\\\s+|like(?:\\\\s+[\\\\s\\\\w]+=\\\\s*?\\\\w+\\\\s*?having\\\\s+|\\\\W*?[\"'`\\\\d])|[^?\\\\w\\\\s=.,;)(]++\\\\s*?[(@\"'`]*?\\\\s*?\\\\w+\\\\W+\\\\w|\\\\*\\\\s*?\\\\w+\\\\W+[\"'`])|(?:unio ..." at REQUEST_COOKIES:opera-interstitial. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "803"] [id "942260"] [msg "Detects basic SQL authentication bypass attempts 2/3"] [data "Matched Data: \\x22:1,\\x22l found within REQUEST_COOKIES:opera-interstitial: {\\x22count\\x22:1,\\x22lastShow\\x22:null}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "att
... |
2020-03-05 16:57:54 |
| 213.34.208.90 | attackbots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-03-05 17:20:39 |
| 163.172.50.9 | attack | 2020-03-05 10:31:41,195 fail2ban.actions [518]: NOTICE [wordpress-beatrice-main] Ban 163.172.50.9 ... |
2020-03-05 16:44:21 |
| 112.23.143.204 | attackspambots | Mar 4 04:42:45 server2 sshd[26762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.23.143.204 user=r.r Mar 4 04:42:47 server2 sshd[26762]: Failed password for r.r from 112.23.143.204 port 3655 ssh2 Mar 4 04:42:47 server2 sshd[26762]: Received disconnect from 112.23.143.204: 11: Normal Shutdown [preauth] Mar 4 04:50:05 server2 sshd[27253]: Invalid user www from 112.23.143.204 Mar 4 04:50:05 server2 sshd[27253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.23.143.204 Mar 4 04:50:07 server2 sshd[27253]: Failed password for invalid user www from 112.23.143.204 port 3195 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=112.23.143.204 |
2020-03-05 16:55:45 |
| 121.34.33.29 | attackspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-03-05 16:55:21 |
| 116.12.251.135 | attackspam | Mar 4 18:40:01 hpm sshd\[12061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.12.251.135 user=lp Mar 4 18:40:03 hpm sshd\[12061\]: Failed password for lp from 116.12.251.135 port 38024 ssh2 Mar 4 18:49:48 hpm sshd\[12750\]: Invalid user ec2-user from 116.12.251.135 Mar 4 18:49:48 hpm sshd\[12750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.12.251.135 Mar 4 18:49:50 hpm sshd\[12750\]: Failed password for invalid user ec2-user from 116.12.251.135 port 38350 ssh2 |
2020-03-05 16:54:02 |
| 222.222.31.70 | attackspambots | $f2bV_matches |
2020-03-05 16:57:07 |
| 92.63.194.105 | attack | 03/05/2020-02:39:58.199033 92.63.194.105 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-03-05 17:14:12 |
| 47.28.93.202 | attackspam | [portscan] Port scan |
2020-03-05 17:21:22 |
| 61.38.37.74 | attack | SSH bruteforce (Triggered fail2ban) |
2020-03-05 16:49:00 |
| 220.133.160.187 | attackbots | Honeypot attack, port: 81, PTR: 220-133-160-187.HINET-IP.hinet.net. |
2020-03-05 17:13:32 |