City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 16.139.82.71
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12434
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;16.139.82.71. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012601 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 03:41:28 CST 2025
;; MSG SIZE rcvd: 105Host 71.82.139.16.in-addr.arpa not found: 2(SERVFAIL)
server can't find 16.139.82.71.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 115.29.3.34 | attackspam | Invalid user ajanta from 115.29.3.34 port 60285 |
2020-01-31 07:11:44 |
| 150.109.182.197 | attackbots | Unauthorized connection attempt detected from IP address 150.109.182.197 to port 8088 [J] |
2020-01-31 07:21:21 |
| 45.64.134.179 | attack | Honeypot attack, port: 445, PTR: mail.cross-world.com. |
2020-01-31 07:13:45 |
| 89.248.160.193 | attackspambots | Multiport scan : 78 ports scanned 10004 10036 10052 10054 10086 10102 10117 10203 10236 10243 10252 10264 10280 10315 10342 10350 10363 10364 10369 10370 10374 10380 10384 10396 10406 10412 10441 10450 10460 10461 10474 10493 10530 10541 10574 10590 10606 10612 10638 10674 10695 10699 10727 10752 10759 10768 10835 10851 10861 10867 10877 10910 11106 11113 11131 11177 11196 11204 11209 11212 11240 11241 11254 11263 11286 11293 11295 ..... |
2020-01-31 07:14:32 |
| 118.43.45.209 | attackbots | Honeypot attack, port: 5555, PTR: PTR record not found |
2020-01-31 07:06:55 |
| 139.59.44.173 | attackbots | Invalid user sambhav from 139.59.44.173 port 54112 |
2020-01-31 07:28:05 |
| 94.69.17.199 | attack | Honeypot attack, port: 81, PTR: ppp-94-69-17-199.home.otenet.gr. |
2020-01-31 07:41:15 |
| 85.93.20.70 | attackbots | Unauthorized connection attempt detected from IP address 85.93.20.70 to port 4389 [J] |
2020-01-31 07:39:20 |
| 167.60.85.79 | attackspambots | Honeypot attack, port: 81, PTR: r167-60-85-79.dialup.adsl.anteldata.net.uy. |
2020-01-31 07:38:48 |
| 216.143.135.241 | attackbots | Honeypot attack, port: 445, PTR: PTR record not found |
2020-01-31 07:42:18 |
| 49.88.112.62 | attackspam | Jan 30 23:23:29 sd-53420 sshd\[32276\]: User root from 49.88.112.62 not allowed because none of user's groups are listed in AllowGroups Jan 30 23:23:29 sd-53420 sshd\[32276\]: Failed none for invalid user root from 49.88.112.62 port 53304 ssh2 Jan 30 23:23:29 sd-53420 sshd\[32276\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.62 user=root Jan 30 23:23:31 sd-53420 sshd\[32276\]: Failed password for invalid user root from 49.88.112.62 port 53304 ssh2 Jan 30 23:23:34 sd-53420 sshd\[32276\]: Failed password for invalid user root from 49.88.112.62 port 53304 ssh2 ... |
2020-01-31 06:58:20 |
| 217.182.252.63 | attackbotsspam | Unauthorized connection attempt detected from IP address 217.182.252.63 to port 2220 [J] |
2020-01-31 07:23:25 |
| 222.186.30.248 | attackspambots | 2020-01-30T23:18:37.441996shield sshd\[13664\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.248 user=root 2020-01-30T23:18:39.333598shield sshd\[13664\]: Failed password for root from 222.186.30.248 port 53881 ssh2 2020-01-30T23:18:41.764438shield sshd\[13664\]: Failed password for root from 222.186.30.248 port 53881 ssh2 2020-01-30T23:18:44.274760shield sshd\[13664\]: Failed password for root from 222.186.30.248 port 53881 ssh2 2020-01-30T23:19:35.169076shield sshd\[13791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.248 user=root |
2020-01-31 07:22:09 |
| 96.47.239.237 | attack | [Thu Jan 30 18:38:46.483896 2020] [:error] [pid 149321] [client 96.47.239.237:55568] [client 96.47.239.237] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 21)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "127.0.0.1"] [uri "/cgi-bin/ViewLog.asp"] [unique_id "XjNM5nDtJO1lJRnuCCgMpgAAAAo"] ... |
2020-01-31 06:55:44 |
| 87.57.158.22 | attack | Automatic report - Windows Brute-Force Attack |
2020-01-31 07:10:50 |