City: Atsugi
Region: Kanagawa
Country: Japan
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 161.34.72.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12325
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;161.34.72.142. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025011101 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 12 11:07:30 CST 2025
;; MSG SIZE rcvd: 106Host 142.72.34.161.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 142.72.34.161.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 5.188.84.226 | attackbots | Malformed Query strings (403) |
2020-08-20 13:54:21 |
| 179.104.37.33 | attackbots | Automatic report - Port Scan Attack |
2020-08-20 13:35:45 |
| 2001:1be0:1000:169:800f:5661:aefa:2574 | attack | [ThuAug2005:53:49.4899762020][:error][pid10867:tid47414988408576][client2001:1be0:1000:169:800f:5661:aefa:2574:58261][client2001:1be0:1000:169:800f:5661:aefa:2574]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:mo\(\?:rfeusfuckingscanner\|siac1\)\|internet\(\?:-exprorer\|ninja\)\|s\\\\\\\\.t\\\\\\\\.a\\\\\\\\.l\\\\\\\\.k\\\\\\\\.e\\\\\\\\.r\\\\\\\\.\|kenjinspider\|neuralbot/\|obot\|shell_exec\|if\\\\\\\\\(\|r00t\|intelium\|cybeye\|\\\\\\\\bcaptch\|\^apitool\$\)"atREQUEST_HEADERS:User-Agent.[file"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf"][line"303"][id"330082"][rev"4"][msg"Atomicorp.comWAFRules:KnownExploitUserAgent"][severity"CRITICAL"][hostname"mg-directory.com"][uri"/"][unique_id"Xz3zzWLkIL@x-h1G8cgjCAAAAMU"][ThuAug2005:53:50.8426512020][:error][pid10930:tid47414980003584][client2001:1be0:1000:169:800f:5661:aefa:2574:58264][client2001:1be0:1000:169:800f:5661:aefa:2574]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:mo\(\?:rfeusfuckingscanne |
2020-08-20 14:05:45 |
| 157.230.251.115 | attackbots | Aug 20 08:11:21 host sshd[29448]: Invalid user csadmin from 157.230.251.115 port 53648 ... |
2020-08-20 14:13:17 |
| 111.53.40.7 | attack | Port Scan ... |
2020-08-20 13:51:46 |
| 71.6.233.206 | attackspam | Aug 20 06:53:54 MikroTik IMAP amplification attack TCP: in:BelPak out:K-Lan, src-mac 4c:b1:6c:f6:99:48, proto TCP (SYN), 71.6.233.206:993->192.168.216.3:993, NAT 71.6.233.206:993->(82.209.199.58:993->192.168.216.3:993), len 40 |
2020-08-20 14:03:49 |
| 103.145.13.118 | attackbotsspam | SSH login attempts with user root. |
2020-08-20 13:41:37 |
| 31.13.191.85 | attackbots | 31.13.191.85 - - [20/Aug/2020:07:34:26 +0200] "GET /phpmyadmin/ HTTP/1.1" 404 507 ... |
2020-08-20 14:15:00 |
| 218.92.0.223 | attack | Aug 20 07:56:19 ip106 sshd[2258]: Failed password for root from 218.92.0.223 port 63829 ssh2 Aug 20 07:56:23 ip106 sshd[2258]: Failed password for root from 218.92.0.223 port 63829 ssh2 ... |
2020-08-20 14:11:56 |
| 198.71.239.15 | attack | Automatic report - XMLRPC Attack |
2020-08-20 13:55:39 |
| 51.68.227.98 | attack | Aug 20 07:56:17 * sshd[2126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.227.98 Aug 20 07:56:19 * sshd[2126]: Failed password for invalid user thh from 51.68.227.98 port 57266 ssh2 |
2020-08-20 14:02:02 |
| 61.177.172.177 | attack | Aug 20 07:28:44 plg sshd[11062]: Failed none for invalid user root from 61.177.172.177 port 3674 ssh2 Aug 20 07:28:44 plg sshd[11062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.177 user=root Aug 20 07:28:47 plg sshd[11062]: Failed password for invalid user root from 61.177.172.177 port 3674 ssh2 Aug 20 07:28:50 plg sshd[11062]: Failed password for invalid user root from 61.177.172.177 port 3674 ssh2 Aug 20 07:28:54 plg sshd[11062]: Failed password for invalid user root from 61.177.172.177 port 3674 ssh2 Aug 20 07:28:58 plg sshd[11062]: Failed password for invalid user root from 61.177.172.177 port 3674 ssh2 Aug 20 07:29:02 plg sshd[11062]: Failed password for invalid user root from 61.177.172.177 port 3674 ssh2 Aug 20 07:29:02 plg sshd[11062]: error: maximum authentication attempts exceeded for invalid user root from 61.177.172.177 port 3674 ssh2 [preauth] ... |
2020-08-20 13:41:22 |
| 117.144.212.250 | attackspam | Unwanted checking 80 or 443 port ... |
2020-08-20 13:55:52 |
| 46.229.168.163 | attackspam | Malicious Traffic/Form Submission |
2020-08-20 13:40:14 |
| 62.234.167.126 | attackspambots | Invalid user karol from 62.234.167.126 port 35138 |
2020-08-20 14:04:47 |