City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 168.21.118.26
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48830
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;168.21.118.26. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025030101 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 02 12:50:24 CST 2025
;; MSG SIZE rcvd: 106Host 26.118.21.168.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 26.118.21.168.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 117.239.149.94 | attackbots | [Wed Aug 26 10:53:34.803560 2020] [:error] [pid 30543:tid 139707031746304] [client 117.239.149.94:63017] [client 117.239.149.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197:80"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/manager/html"] [unique_id "X0XcviXBG@3tAFpdD8koaAAAAnY"] ... |
2020-08-26 15:14:11 |
| 218.92.0.158 | attack | 2020-08-26T08:42:31.248070vps773228.ovh.net sshd[31817]: Failed password for root from 218.92.0.158 port 54705 ssh2 2020-08-26T08:42:34.993674vps773228.ovh.net sshd[31817]: Failed password for root from 218.92.0.158 port 54705 ssh2 2020-08-26T08:42:38.289725vps773228.ovh.net sshd[31817]: Failed password for root from 218.92.0.158 port 54705 ssh2 2020-08-26T08:42:41.329505vps773228.ovh.net sshd[31817]: Failed password for root from 218.92.0.158 port 54705 ssh2 2020-08-26T08:42:45.724939vps773228.ovh.net sshd[31817]: Failed password for root from 218.92.0.158 port 54705 ssh2 ... |
2020-08-26 15:02:03 |
| 202.65.118.74 | attack | Aug 26 04:40:25 shivevps sshd[24118]: Bad protocol version identification '\024' from 202.65.118.74 port 54965 Aug 26 04:42:35 shivevps sshd[27464]: Bad protocol version identification '\024' from 202.65.118.74 port 35147 Aug 26 04:44:31 shivevps sshd[31463]: Bad protocol version identification '\024' from 202.65.118.74 port 39227 ... |
2020-08-26 15:22:17 |
| 41.224.59.242 | attack | 2020-08-26T06:58:52.133903ionos.janbro.de sshd[73409]: Invalid user tsbot from 41.224.59.242 port 52570 2020-08-26T06:58:54.108225ionos.janbro.de sshd[73409]: Failed password for invalid user tsbot from 41.224.59.242 port 52570 ssh2 2020-08-26T07:02:52.216727ionos.janbro.de sshd[73452]: Invalid user yum from 41.224.59.242 port 56437 2020-08-26T07:02:52.511805ionos.janbro.de sshd[73452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.224.59.242 2020-08-26T07:02:52.216727ionos.janbro.de sshd[73452]: Invalid user yum from 41.224.59.242 port 56437 2020-08-26T07:02:54.323342ionos.janbro.de sshd[73452]: Failed password for invalid user yum from 41.224.59.242 port 56437 ssh2 2020-08-26T07:06:40.144751ionos.janbro.de sshd[73456]: Invalid user m1 from 41.224.59.242 port 60299 2020-08-26T07:06:40.308717ionos.janbro.de sshd[73456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.224.59.242 2020-08-26T07:06:40.1 ... |
2020-08-26 15:07:48 |
| 51.15.188.101 | attack | Aug 26 04:37:20 shivevps sshd[18539]: Bad protocol version identification '\024' from 51.15.188.101 port 54997 Aug 26 04:38:23 shivevps sshd[20659]: Bad protocol version identification '\024' from 51.15.188.101 port 33618 Aug 26 04:42:21 shivevps sshd[26657]: Bad protocol version identification '\024' from 51.15.188.101 port 58346 Aug 26 04:42:31 shivevps sshd[27308]: Bad protocol version identification '\024' from 51.15.188.101 port 52025 ... |
2020-08-26 14:47:58 |
| 61.133.87.228 | attack | Aug 26 04:38:20 shivevps sshd[20580]: Bad protocol version identification '\024' from 61.133.87.228 port 40062 Aug 26 04:42:18 shivevps sshd[26383]: Bad protocol version identification '\024' from 61.133.87.228 port 42218 Aug 26 04:43:32 shivevps sshd[29283]: Bad protocol version identification '\024' from 61.133.87.228 port 43371 Aug 26 04:43:32 shivevps sshd[29315]: Bad protocol version identification '\024' from 61.133.87.228 port 43377 ... |
2020-08-26 15:04:43 |
| 180.183.246.110 | attack | Aug 26 04:44:25 shivevps sshd[31272]: Bad protocol version identification '\024' from 180.183.246.110 port 32941 Aug 26 04:44:40 shivevps sshd[31698]: Bad protocol version identification '\024' from 180.183.246.110 port 33411 Aug 26 04:45:55 shivevps sshd[32453]: Bad protocol version identification '\024' from 180.183.246.110 port 35120 ... |
2020-08-26 14:58:37 |
| 222.186.190.2 | attackspam | Aug 26 09:14:48 * sshd[1073]: Failed password for root from 222.186.190.2 port 57990 ssh2 Aug 26 09:15:01 * sshd[1073]: error: maximum authentication attempts exceeded for root from 222.186.190.2 port 57990 ssh2 [preauth] |
2020-08-26 15:26:54 |
| 191.36.244.230 | attackspam | Aug 26 04:38:07 shivevps sshd[20072]: Bad protocol version identification '\024' from 191.36.244.230 port 43477 Aug 26 04:42:24 shivevps sshd[26879]: Bad protocol version identification '\024' from 191.36.244.230 port 47666 Aug 26 04:42:52 shivevps sshd[28199]: Bad protocol version identification '\024' from 191.36.244.230 port 47942 Aug 26 04:43:35 shivevps sshd[29493]: Bad protocol version identification '\024' from 191.36.244.230 port 48371 ... |
2020-08-26 14:49:25 |
| 36.239.100.14 | attackspambots | Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-08-26 14:55:13 |
| 112.78.169.98 | attackbots | Aug 26 04:44:15 shivevps sshd[30805]: Bad protocol version identification '\024' from 112.78.169.98 port 50156 Aug 26 04:44:17 shivevps sshd[30912]: Bad protocol version identification '\024' from 112.78.169.98 port 50316 Aug 26 04:44:21 shivevps sshd[31139]: Bad protocol version identification '\024' from 112.78.169.98 port 50567 ... |
2020-08-26 15:09:25 |
| 182.253.115.90 | attack | Aug 26 04:39:18 shivevps sshd[22378]: Bad protocol version identification '\024' from 182.253.115.90 port 35738 Aug 26 04:40:22 shivevps sshd[24076]: Bad protocol version identification '\024' from 182.253.115.90 port 59515 Aug 26 04:44:18 shivevps sshd[30961]: Bad protocol version identification '\024' from 182.253.115.90 port 36814 ... |
2020-08-26 14:50:08 |
| 94.247.16.29 | attackspam | spam |
2020-08-26 15:06:50 |
| 122.51.221.250 | attackspambots | Aug 26 07:51:01 vps647732 sshd[9571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.221.250 Aug 26 07:51:03 vps647732 sshd[9571]: Failed password for invalid user cct from 122.51.221.250 port 47326 ssh2 ... |
2020-08-26 15:03:45 |
| 205.158.57.2 | attack | Aug 26 04:44:09 shivevps sshd[30682]: Bad protocol version identification '\024' from 205.158.57.2 port 37069 Aug 26 04:44:22 shivevps sshd[31160]: Bad protocol version identification '\024' from 205.158.57.2 port 37276 Aug 26 04:44:25 shivevps sshd[31263]: Bad protocol version identification '\024' from 205.158.57.2 port 37381 ... |
2020-08-26 14:49:06 |