City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.213.197.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50338
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;149.213.197.134. IN A
;; AUTHORITY SECTION:
. 461 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019120401 1800 900 604800 86400
;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 04 22:20:58 CST 2019
;; MSG SIZE rcvd: 119Host 134.197.213.149.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 134.197.213.149.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 61.175.191.170 | attack | 445/tcp 445/tcp 445/tcp... [2019-06-28/07-09]6pkt,1pt.(tcp) |
2019-07-10 09:21:58 |
| 107.180.123.20 | attackspambots | WP_xmlrpc_attack |
2019-07-10 09:55:21 |
| 41.39.221.131 | attackspam | Unauthorized connection attempt from IP address 41.39.221.131 on Port 445(SMB) |
2019-07-10 09:32:40 |
| 182.149.199.38 | attack | Unauthorized connection attempt from IP address 182.149.199.38 on Port 445(SMB) |
2019-07-10 09:44:38 |
| 112.109.93.100 | attackbotsspam | Unauthorized connection attempt from IP address 112.109.93.100 on Port 445(SMB) |
2019-07-10 09:52:57 |
| 76.108.199.153 | attack | port scan and connect, tcp 23 (telnet) |
2019-07-10 09:46:14 |
| 223.203.201.254 | attack | [Wed Jul 10 06:31:50.457002 2019] [:error] [pid 12219:tid 139977086109440] [client 223.203.201.254:52344] [client 223.203.201.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.1.1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "792"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.1.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/TP/public/index.php"] [unique_id "XSUj5lIMVtpCcCd8oJ8VngAAABc"] [Wed Jul 10 06:31:50.698718 2019] [:error] [pid 12219:tid 139977228785408] [client 223.203.201.254:55112] [client 223.203.201.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file |
2019-07-10 10:06:29 |
| 139.199.192.159 | attackspam | Jul 10 01:34:40 tux-35-217 sshd\[22197\]: Invalid user mike from 139.199.192.159 port 41182 Jul 10 01:34:40 tux-35-217 sshd\[22197\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.192.159 Jul 10 01:34:41 tux-35-217 sshd\[22197\]: Failed password for invalid user mike from 139.199.192.159 port 41182 ssh2 Jul 10 01:36:52 tux-35-217 sshd\[22201\]: Invalid user administrateur from 139.199.192.159 port 60152 Jul 10 01:36:52 tux-35-217 sshd\[22201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.192.159 ... |
2019-07-10 09:21:32 |
| 138.229.101.206 | attackbotsspam | Automatic report - Web App Attack |
2019-07-10 09:54:57 |
| 36.67.20.207 | attackspambots | Unauthorized connection attempt from IP address 36.67.20.207 on Port 445(SMB) |
2019-07-10 09:45:45 |
| 36.255.91.70 | attack | Unauthorized connection attempt from IP address 36.255.91.70 on Port 445(SMB) |
2019-07-10 09:24:53 |
| 185.216.132.15 | attack | 2019-07-09T08:00:39.702194wiz-ks3 sshd[27273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.216.132.15 user=root 2019-07-09T08:00:42.126282wiz-ks3 sshd[27273]: Failed password for root from 185.216.132.15 port 12054 ssh2 2019-07-09T08:00:42.858173wiz-ks3 sshd[27276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.216.132.15 user=root 2019-07-09T08:00:45.361895wiz-ks3 sshd[27276]: Failed password for root from 185.216.132.15 port 12476 ssh2 2019-07-09T08:00:42.858173wiz-ks3 sshd[27276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.216.132.15 user=root 2019-07-09T08:00:45.361895wiz-ks3 sshd[27276]: Failed password for root from 185.216.132.15 port 12476 ssh2 2019-07-09T08:00:46.079516wiz-ks3 sshd[27278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.216.132.15 user=root 2019-07-09T08:00:48.132113wiz-ks3 sshd[27278]: Failed pa |
2019-07-10 09:49:33 |
| 221.226.11.218 | attackspam | Jul 10 01:33:06 ns41 sshd[22293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.226.11.218 Jul 10 01:33:08 ns41 sshd[22293]: Failed password for invalid user suporte from 221.226.11.218 port 53306 ssh2 Jul 10 01:38:12 ns41 sshd[22520]: Failed password for root from 221.226.11.218 port 43679 ssh2 |
2019-07-10 10:09:59 |
| 201.211.156.39 | attack | Unauthorized connection attempt from IP address 201.211.156.39 on Port 445(SMB) |
2019-07-10 10:01:05 |
| 46.166.151.47 | attack | \[2019-07-09 21:39:45\] SECURITY\[13451\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-09T21:39:45.635-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="081046406829453",SessionID="0x7f02f8f2dd48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.47/50428",ACLName="no_extension_match" \[2019-07-09 21:46:58\] SECURITY\[13451\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-09T21:46:58.077-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01246313113291",SessionID="0x7f02f9572cd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.47/59274",ACLName="no_extension_match" \[2019-07-09 21:48:21\] SECURITY\[13451\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-09T21:48:21.058-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="90046812400638",SessionID="0x7f02f94cdc98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.47/50575",ACLName="no_ex |
2019-07-10 10:00:44 |