City: unknown
Region: unknown
Country: France
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 193.139.19.234
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25363
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;193.139.19.234. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 42 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 12:38:13 CST 2025
;; MSG SIZE rcvd: 107Host 234.19.139.193.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 234.19.139.193.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 181.114.137.63 | attackspambots | Unauthorized connection attempt detected from IP address 181.114.137.63 to port 80 |
2020-02-24 18:40:37 |
| 157.47.219.191 | attack | Unauthorized connection attempt from IP address 157.47.219.191 on Port 445(SMB) |
2020-02-24 19:06:06 |
| 3.234.208.66 | attackspambots | [Mon Feb 24 11:46:35.451949 2020] [:error] [pid 3440:tid 140455651776256] [client 3.234.208.66:33958] [client 3.234.208.66] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "118"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "WASCTC/WASC-13"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [hostname "staklim-malang.info"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-hujan-bulanan/prakiraan-curah-hujan-bulanan/555557608-prakiraan-bulanan-curah-hujan-bulan-januari-tahun-2020-update-dari-analisis-bulan-september-2019"] [unique_id "XlNU6XUOwbZwP42Mw4b9wgAAAbk"]
... |
2020-02-24 18:38:39 |
| 46.101.214.122 | attackspambots | Feb 24 11:43:39 server2 sshd\[1167\]: User root from 46.101.214.122 not allowed because not listed in AllowUsers Feb 24 11:43:55 server2 sshd\[1171\]: Invalid user oracle from 46.101.214.122 Feb 24 11:44:11 server2 sshd\[1203\]: User root from 46.101.214.122 not allowed because not listed in AllowUsers Feb 24 11:44:26 server2 sshd\[1205\]: Invalid user postgres from 46.101.214.122 Feb 24 11:44:41 server2 sshd\[1214\]: User root from 46.101.214.122 not allowed because not listed in AllowUsers Feb 24 11:44:55 server2 sshd\[1222\]: Invalid user hadoop from 46.101.214.122 |
2020-02-24 18:55:11 |
| 1.55.109.245 | attack | Unauthorized connection attempt from IP address 1.55.109.245 on Port 445(SMB) |
2020-02-24 18:53:08 |
| 91.174.121.84 | attackspam | trying to access non-authorized port |
2020-02-24 19:13:49 |
| 125.161.128.66 | attackbots | 1582519610 - 02/24/2020 05:46:50 Host: 125.161.128.66/125.161.128.66 Port: 445 TCP Blocked |
2020-02-24 18:41:12 |
| 51.91.11.23 | attack | [munged]::443 51.91.11.23 - - [24/Feb/2020:11:22:38 +0100] "POST /[munged]: HTTP/1.1" 200 6859 "-" "-" [munged]::443 51.91.11.23 - - [24/Feb/2020:11:22:54 +0100] "POST /[munged]: HTTP/1.1" 200 6859 "-" "-" [munged]::443 51.91.11.23 - - [24/Feb/2020:11:23:10 +0100] "POST /[munged]: HTTP/1.1" 200 6859 "-" "-" [munged]::443 51.91.11.23 - - [24/Feb/2020:11:23:26 +0100] "POST /[munged]: HTTP/1.1" 200 6859 "-" "-" [munged]::443 51.91.11.23 - - [24/Feb/2020:11:23:41 +0100] "POST /[munged]: HTTP/1.1" 200 6859 "-" "-" [munged]::443 51.91.11.23 - - [24/Feb/2020:11:23:58 +0100] "POST /[munged]: HTTP/1.1" 200 6859 "-" "-" [munged]::443 51.91.11.23 - - [24/Feb/2020:11:24:14 +0100] "POST /[munged]: HTTP/1.1" 200 6859 "-" "-" [munged]::443 51.91.11.23 - - [24/Feb/2020:11:24:30 +0100] "POST /[munged]: HTTP/1.1" 200 6859 "-" "-" [munged]::443 51.91.11.23 - - [24/Feb/2020:11:24:46 +0100] "POST /[munged]: HTTP/1.1" 200 6859 "-" "-" [munged]::443 51.91.11.23 - - [24/Feb/2020:11:25:02 +0100] "POST /[munged]: HTTP/1.1" 200 6859 "- |
2020-02-24 19:08:01 |
| 45.248.163.109 | attackspam | Unauthorised access (Feb 24) SRC=45.248.163.109 LEN=52 TTL=119 ID=27010 DF TCP DPT=445 WINDOW=8192 SYN |
2020-02-24 18:41:45 |
| 46.16.121.200 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/46.16.121.200/ CZ - 1H : (1) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CZ NAME ASN : ASN44430 IP : 46.16.121.200 CIDR : 46.16.120.0/21 PREFIX COUNT : 2 UNIQUE IP COUNT : 2304 ATTACKS DETECTED ASN44430 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2020-02-24 05:46:44 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery |
2020-02-24 18:42:31 |
| 192.253.249.228 | attack | Unauthorized connection attempt from IP address 192.253.249.228 on Port 445(SMB) |
2020-02-24 18:49:43 |
| 59.153.252.208 | attackbots | Unauthorized connection attempt from IP address 59.153.252.208 on Port 445(SMB) |
2020-02-24 18:47:21 |
| 192.198.118.176 | attack | (From impressivedesignz4u@gmail.com) Hello, Do you feel that your website is somehow lagging behind your competition? How do you feel when you don't see your website on top of Google searches for the exact keywords that you have been vying for? Are you ready to solve your problems? I'm a freelance online marketer looking for new clients who are interested in boosting their website's productivity so they can generate more sales. Most websites listed on the first page of search results tend to be more trusted by consumers and they also get a massive amount of traffic from being in the top spots. This makes their profits go up substantially. Meanwhile, the sites found on the next few pages are overshadowed, thus missing out on a lot of opportunities. Is your site able to make a good amount profit for your business? If not, then I'd like to offer you some professional help. If you'd like to learn more about my services and how I can help you in making your website more profitable, please write back to |
2020-02-24 19:10:33 |
| 78.128.113.174 | attackspambots | 2020-02-24 11:57:06 dovecot_login authenticator failed for \(\[78.128.113.174\]\) \[78.128.113.174\]: 535 Incorrect authentication data \(set_id=admin123@no-server.de\) 2020-02-24 11:57:14 dovecot_login authenticator failed for \(\[78.128.113.174\]\) \[78.128.113.174\]: 535 Incorrect authentication data \(set_id=admin123\) 2020-02-24 11:57:25 dovecot_login authenticator failed for \(\[78.128.113.174\]\) \[78.128.113.174\]: 535 Incorrect authentication data 2020-02-24 11:57:41 dovecot_login authenticator failed for \(\[78.128.113.174\]\) \[78.128.113.174\]: 535 Incorrect authentication data 2020-02-24 11:57:49 dovecot_login authenticator failed for \(\[78.128.113.174\]\) \[78.128.113.174\]: 535 Incorrect authentication data ... |
2020-02-24 19:05:07 |
| 149.200.148.111 | attackbotsspam | Automatic report - Port Scan Attack |
2020-02-24 18:38:15 |