City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 166.242.122.251
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55448
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;166.242.122.251. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 10:55:16 CST 2025
;; MSG SIZE rcvd: 108251.122.242.166.in-addr.arpa domain name pointer 251.sub-166-242-122.myvzw.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
251.122.242.166.in-addr.arpa name = 251.sub-166-242-122.myvzw.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.13.79.58 | attackbots | 2020-03-16T23:17:03.927448ionos.janbro.de sshd[61489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.79.58 user=root 2020-03-16T23:17:06.201747ionos.janbro.de sshd[61489]: Failed password for root from 106.13.79.58 port 37602 ssh2 2020-03-16T23:22:18.412844ionos.janbro.de sshd[61514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.79.58 user=root 2020-03-16T23:22:20.247510ionos.janbro.de sshd[61514]: Failed password for root from 106.13.79.58 port 34970 ssh2 2020-03-16T23:27:34.842883ionos.janbro.de sshd[61526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.79.58 user=root 2020-03-16T23:27:36.711620ionos.janbro.de sshd[61526]: Failed password for root from 106.13.79.58 port 60574 ssh2 2020-03-16T23:32:56.176039ionos.janbro.de sshd[61535]: Invalid user oracle from 106.13.79.58 port 57942 2020-03-16T23:32:58.905106ionos.janbro.de sshd[61535] ... |
2020-03-17 11:59:17 |
| 14.186.11.238 | attackbots | (smtpauth) Failed SMTP AUTH login from 14.186.11.238 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-03-17 03:04:01 plain authenticator failed for ([127.0.0.1]) [14.186.11.238]: 535 Incorrect authentication data (set_id=info@sinayar.com) |
2020-03-17 11:32:01 |
| 54.38.242.164 | attackspam | [TueMar1700:33:44.1408382020][:error][pid28280:tid47485661804288][client54.38.242.164:41360][client54.38.242.164]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boot\\\\\\\\.ini\|web.config\)\\\\\\\\b\|\(\|\^\|\\\\\\\\.\\\\\\\\.\)/etc/\|/\\\\\\\\.\(\?:history\|bash_history\|sh_history\|env\)\$\)"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"211"][id"390709"][rev"30"][msg"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely"][data"/.env"][severity"CRITICAL"][hostname"fit-easy.com"][uri"/.env"][unique_id"XnAM2DznIPW7lSPm5YLbdgAAAM8"][TueMar1700:33:45.0075242020][:error][pid28454:tid47485672310528][client54.38.242.164:41492][client54.38.242.164]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|bo |
2020-03-17 11:40:06 |
| 1.27.233.96 | attackspambots | 5555/tcp [2020-03-16]1pkt |
2020-03-17 11:26:49 |
| 125.167.41.59 | attackbotsspam | Unauthorized connection attempt from IP address 125.167.41.59 on Port 445(SMB) |
2020-03-17 11:57:02 |
| 43.225.194.75 | attackbots | Mar 17 03:21:19 lnxweb62 sshd[762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.225.194.75 |
2020-03-17 11:59:47 |
| 194.26.69.106 | attackbotsspam | Mar 17 04:23:12 debian-2gb-nbg1-2 kernel: \[6674510.059382\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.69.106 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x00 TTL=241 ID=63905 PROTO=TCP SPT=46236 DPT=9888 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-03-17 11:34:09 |
| 183.88.243.42 | attackspambots | (smtpauth) Failed SMTP AUTH login from 183.88.243.42 (TH/Thailand/mx-ll-183.88.243-42.dynamic.3bb.in.th): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-03-17 03:04:05 plain authenticator failed for ([127.0.0.1]) [183.88.243.42]: 535 Incorrect authentication data (set_id=info) |
2020-03-17 11:28:33 |
| 71.38.38.5 | attackspambots | 8080/tcp [2020-03-16]1pkt |
2020-03-17 11:21:24 |
| 106.12.6.136 | attackspam | $f2bV_matches |
2020-03-17 11:39:14 |
| 178.33.252.96 | attackspam | Brute force attack against VPN service |
2020-03-17 11:52:00 |
| 80.250.53.195 | attackspambots | Unauthorised access (Mar 17) SRC=80.250.53.195 LEN=52 TTL=124 ID=12431 DF TCP DPT=445 WINDOW=8192 SYN |
2020-03-17 11:25:51 |
| 45.5.0.7 | attackspam | Scanned 3 times in the last 24 hours on port 22 |
2020-03-17 11:36:43 |
| 45.140.207.51 | attack | B: Magento admin pass test (wrong country) |
2020-03-17 11:21:44 |
| 210.7.2.48 | attackbotsspam | 8080/tcp [2020-03-16]1pkt |
2020-03-17 11:20:10 |