City: unknown
Region: unknown
Country: Canada
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.253.142.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23501
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.253.142.249. IN A
;; AUTHORITY SECTION:
. 168 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023073101 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 01 04:05:12 CST 2023
;; MSG SIZE rcvd: 108Host 249.142.253.142.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 249.142.253.142.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 138.99.216.171 | attack | Multihost portscan. |
2020-07-29 19:35:15 |
| 23.95.224.72 | attackspambots | (From reardon.hermine54@hotmail.com) Hi there, Read this if you haven’t made your first $100 from burnschiro.com online yet... I've heard it a million times... I'm going to quit my job, I'm going to start my own business, I'm going to live where I want, and I'm going to live the dream... Enough talk. Everyone's got a vision. Fine. What exactly have you done lately to make it come true? Not much, you say? If everyone suddenly got injected with the truth serum, you'd hear people talk a different game: I've got huge dreams. But I'm a failure, because I did nothing to make these dreams come true. I'm too afraid to start. I procrastinate about taking action. I will probably never do anything or amount to anything in my life, because I choose to stay in my comfort zone. Incidentally, the first step to changing your life is to be honest about how you feel. Are you afraid? Fine. Are you anxious? Fine. Do you procrastinate? Great. This means you have to start wit |
2020-07-29 19:43:28 |
| 49.232.161.5 | attackspambots | $f2bV_matches |
2020-07-29 20:10:01 |
| 45.14.150.86 | attackspambots | (sshd) Failed SSH login from 45.14.150.86 (RO/Romania/-): 5 in the last 3600 secs |
2020-07-29 20:14:48 |
| 59.41.39.82 | attackspam | Jul 29 07:17:26 XXX sshd[22476]: Invalid user kumud from 59.41.39.82 port 32361 |
2020-07-29 19:44:40 |
| 31.28.8.163 | attack | Jul 29 16:01:34 lunarastro sshd[4617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.28.8.163 Jul 29 16:01:36 lunarastro sshd[4617]: Failed password for invalid user diego from 31.28.8.163 port 54840 ssh2 |
2020-07-29 19:32:08 |
| 106.53.20.226 | attackspam | Invalid user zhaokai from 106.53.20.226 port 40610 |
2020-07-29 20:05:46 |
| 103.114.107.129 | attack | TCP port : 3389 |
2020-07-29 20:02:36 |
| 190.223.26.38 | attackbots | 2020-07-29T13:33:17+0200 Failed SSH Authentication/Brute Force Attack. (Server 5) |
2020-07-29 19:36:27 |
| 158.69.235.18 | attackbotsspam | Invalid user webdev from 158.69.235.18 port 37248 |
2020-07-29 19:46:52 |
| 39.51.102.53 | attackbotsspam | php WP PHPmyadamin ABUSE blocked for 12h |
2020-07-29 19:41:26 |
| 200.188.143.94 | attackbots |
|
2020-07-29 19:36:48 |
| 196.43.178.1 | attackbotsspam | ssh intrusion attempt |
2020-07-29 19:37:10 |
| 122.51.204.51 | attack | 2020-07-29T12:28:02.651426sd-86998 sshd[34891]: Invalid user huanglu from 122.51.204.51 port 54494 2020-07-29T12:28:02.654933sd-86998 sshd[34891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.204.51 2020-07-29T12:28:02.651426sd-86998 sshd[34891]: Invalid user huanglu from 122.51.204.51 port 54494 2020-07-29T12:28:04.572397sd-86998 sshd[34891]: Failed password for invalid user huanglu from 122.51.204.51 port 54494 ssh2 2020-07-29T12:37:58.018783sd-86998 sshd[36117]: Invalid user zhangchunxu2 from 122.51.204.51 port 35148 ... |
2020-07-29 19:40:19 |
| 66.249.90.144 | attack | [Wed Jul 29 10:48:41.912577 2020] [:error] [pid 26471:tid 140232860927744] [client 66.249.90.144:57740] [client 66.249.90.144] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "118"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "WASCTC/WASC-13"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/buku/508-buku-edisi-setiap-6-bulan-sekali/buku-prakiraan-musim/buku-prakiraan-musim-kemarau/buku-prakiraan-musim-kemarau-tahun-2017"] [unique_id "XyDxmTeYG8yqivQph9zfXQAAAfE"]
... |
2020-07-29 19:54:46 |