City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 16.149.130.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32812
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;16.149.130.64. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021300 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 14:40:09 CST 2025
;; MSG SIZE rcvd: 106Host 64.130.149.16.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 64.130.149.16.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 138.219.188.221 | attackspambots | Unauthorized connection attempt from IP address 138.219.188.221 on Port 587(SMTP-MSA) |
2019-08-06 13:47:56 |
| 167.99.173.171 | attack | Aug 6 00:35:02 debian sshd\[18040\]: Invalid user francoise from 167.99.173.171 port 42402 Aug 6 00:35:02 debian sshd\[18040\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.173.171 Aug 6 00:35:04 debian sshd\[18040\]: Failed password for invalid user francoise from 167.99.173.171 port 42402 ssh2 ... |
2019-08-06 13:03:18 |
| 222.175.53.214 | attack | Unauthorized connection attempt from IP address 222.175.53.214 on Port 445(SMB) |
2019-08-06 13:26:28 |
| 37.59.103.173 | attack | Aug 6 07:04:28 ks10 sshd[11149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.103.173 Aug 6 07:04:30 ks10 sshd[11149]: Failed password for invalid user usuario2 from 37.59.103.173 port 39244 ssh2 ... |
2019-08-06 13:39:00 |
| 85.163.230.163 | attackbots | SSH Brute Force, server-1 sshd[14319]: Failed password for invalid user vilma from 85.163.230.163 port 43664 ssh2 |
2019-08-06 13:10:45 |
| 193.29.15.60 | attackspambots | Port scan: Attacks repeated for a week |
2019-08-06 13:44:30 |
| 49.83.32.165 | attackbotsspam | Automatic report - Port Scan Attack |
2019-08-06 13:16:50 |
| 103.29.249.59 | attackspam | 2019-07-31T02:51:58.033029wiz-ks3 sshd[6675]: Invalid user pao from 103.29.249.59 port 24897 2019-07-31T02:51:58.035080wiz-ks3 sshd[6675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.29.249.59 2019-07-31T02:51:58.033029wiz-ks3 sshd[6675]: Invalid user pao from 103.29.249.59 port 24897 2019-07-31T02:51:59.917174wiz-ks3 sshd[6675]: Failed password for invalid user pao from 103.29.249.59 port 24897 ssh2 2019-07-31T03:00:33.620107wiz-ks3 sshd[6710]: Invalid user trash from 103.29.249.59 port 29185 2019-07-31T03:00:33.622194wiz-ks3 sshd[6710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.29.249.59 2019-07-31T03:00:33.620107wiz-ks3 sshd[6710]: Invalid user trash from 103.29.249.59 port 29185 2019-07-31T03:00:35.539193wiz-ks3 sshd[6710]: Failed password for invalid user trash from 103.29.249.59 port 29185 ssh2 2019-07-31T03:26:41.101749wiz-ks3 sshd[6771]: Invalid user prueba from 103.29.249.59 port 29441 2019-07-31T03:26:4 |
2019-08-06 12:56:08 |
| 122.166.52.111 | attackbotsspam | Aug 6 07:40:17 server sshd\[14299\]: Invalid user superman from 122.166.52.111 port 52766 Aug 6 07:40:17 server sshd\[14299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.166.52.111 Aug 6 07:40:19 server sshd\[14299\]: Failed password for invalid user superman from 122.166.52.111 port 52766 ssh2 Aug 6 07:47:55 server sshd\[21561\]: User root from 122.166.52.111 not allowed because listed in DenyUsers Aug 6 07:47:55 server sshd\[21561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.166.52.111 user=root |
2019-08-06 12:55:41 |
| 51.68.231.147 | attack | Aug 6 06:12:51 localhost sshd\[28413\]: Invalid user polycom from 51.68.231.147 port 40224 Aug 6 06:12:51 localhost sshd\[28413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.231.147 ... |
2019-08-06 13:28:50 |
| 180.248.249.178 | attackbotsspam | Unauthorized connection attempt from IP address 180.248.249.178 on Port 445(SMB) |
2019-08-06 13:22:33 |
| 150.242.110.5 | attack | Automatic report - Banned IP Access |
2019-08-06 13:50:32 |
| 206.189.184.9 | attackspam | [TueAug0603:32:16.6903652019][:error][pid22420:tid47942473561856][client206.189.184.9:51874][client206.189.184.9]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)"][severity"CRITICAL"][hostname"fit-easy.com"][uri"/currency.sql"][unique_id"XUjYoDSl5ahJ74UDFCatIQAAAQc"][TueAug0603:32:22.7374612019][:error][pid5257:tid47942500878080][client206.189.184.9:52692][client206.189.184.9]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)"][severity"CRITIC |
2019-08-06 13:52:49 |
| 51.68.243.1 | attack | Aug 6 01:10:14 xtremcommunity sshd\[18869\]: Invalid user george from 51.68.243.1 port 38628 Aug 6 01:10:14 xtremcommunity sshd\[18869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.243.1 Aug 6 01:10:16 xtremcommunity sshd\[18869\]: Failed password for invalid user george from 51.68.243.1 port 38628 ssh2 Aug 6 01:14:32 xtremcommunity sshd\[18974\]: Invalid user seidel from 51.68.243.1 port 33698 Aug 6 01:14:32 xtremcommunity sshd\[18974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.243.1 ... |
2019-08-06 13:20:25 |
| 104.206.128.42 | attack | Honeypot attack, port: 23, PTR: 42-128.206.104.serverhubrdns.in-addr.arpa. |
2019-08-06 13:40:35 |