City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.164.69.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23034
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.164.69.52. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020602 1800 900 604800 86400
;; Query time: 41 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 10:14:23 CST 2025
;; MSG SIZE rcvd: 106Host 52.69.164.149.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 52.69.164.149.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.85.42.227 | attack | Nov 28 10:25:35 TORMINT sshd\[17756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.227 user=root Nov 28 10:25:37 TORMINT sshd\[17756\]: Failed password for root from 112.85.42.227 port 43288 ssh2 Nov 28 10:27:47 TORMINT sshd\[17978\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.227 user=root ... |
2019-11-28 23:38:35 |
| 148.70.59.114 | attack | SSH brute-force: detected 8 distinct usernames within a 24-hour window. |
2019-11-28 23:35:45 |
| 103.212.71.88 | attack | [ThuNov2815:40:19.1678162019][:error][pid31979:tid47933153044224][client103.212.71.88:35150][client103.212.71.88]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)"][severity"CRITICAL"][hostname"www.ilgiornaledelticino.ch"][uri"/04-2019.sql"][unique_id"Xd-cU4rVVANNdvmEfl138gAAANE"][ThuNov2815:40:20.7098292019][:error][pid31905:tid47933159347968][client103.212.71.88:35338][client103.212.71.88]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)"][se |
2019-11-28 23:37:08 |
| 190.79.215.238 | attackbots | Nov 28 21:41:42 webhost01 sshd[2184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.79.215.238 Nov 28 21:41:44 webhost01 sshd[2184]: Failed password for invalid user admin from 190.79.215.238 port 57208 ssh2 ... |
2019-11-28 23:07:55 |
| 115.193.235.10 | attackspambots | Automatic report - Port Scan Attack |
2019-11-28 23:19:21 |
| 196.207.191.21 | attack | Nov 28 16:16:26 nxxxxxxx sshd[16919]: refused connect from 196.207.191.21 (1= 96.207.191.21) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=196.207.191.21 |
2019-11-28 23:43:52 |
| 27.117.119.126 | attack | Unauthorised access (Nov 28) SRC=27.117.119.126 LEN=40 TTL=49 ID=20401 TCP DPT=8080 WINDOW=52944 SYN |
2019-11-28 23:36:12 |
| 49.88.112.71 | attack | 2019-11-28T15:10:48.097516abusebot-6.cloudsearch.cf sshd\[8699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.71 user=root |
2019-11-28 23:39:39 |
| 92.53.90.84 | attackbotsspam | Connection by 92.53.90.84 on port: 3578 got caught by honeypot at 11/28/2019 1:40:56 PM |
2019-11-28 23:28:59 |
| 92.118.37.83 | attackbots | Portscan or hack attempt detected by psad/fwsnort |
2019-11-28 23:37:37 |
| 222.186.175.181 | attackspambots | Nov 28 16:50:25 srv206 sshd[7972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.181 user=root Nov 28 16:50:27 srv206 sshd[7972]: Failed password for root from 222.186.175.181 port 3107 ssh2 ... |
2019-11-28 23:50:38 |
| 45.136.108.85 | attackbotsspam | $f2bV_matches_ltvn |
2019-11-28 23:12:29 |
| 218.92.0.188 | attackbotsspam | Nov 25 07:58:38 srv sshd\[10359\]: error: PAM: Authentication failure for root from 218.92.0.188 Nov 25 07:58:40 srv sshd\[10362\]: error: PAM: Authentication failure for root from 218.92.0.188 Nov 25 07:58:43 srv sshd\[10365\]: error: PAM: Authentication failure for root from 218.92.0.188 ... |
2019-11-28 23:12:53 |
| 220.134.148.200 | attackspambots | firewall-block, port(s): 23/tcp |
2019-11-28 23:40:42 |
| 210.21.9.250 | attackbotsspam | Microsoft-Windows-Security-Auditing |
2019-11-28 23:13:20 |