City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.70.244.147
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30735
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;2.70.244.147. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 19:55:51 CST 2025
;; MSG SIZE rcvd: 105147.244.70.2.in-addr.arpa domain name pointer 2.70.244.147.mobile.tre.se.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
147.244.70.2.in-addr.arpa name = 2.70.244.147.mobile.tre.se.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 24.133.104.90 | attackspam | [FriOct0414:22:41.9612802019][:error][pid20129:tid46955271034624][client24.133.104.90:56538][client24.133.104.90]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)"][severity"CRITICAL"][hostname"grottolabaita.ch"][uri"/grottolabaita1.sql"][unique_id"XZc5kXd@6NU-XnSKU7XdQAAAAEw"][FriOct0414:22:48.7758762019][:error][pid20129:tid46955177735936][client24.133.104.90:56773][client24.133.104.90]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith. |
2019-10-05 02:14:19 |
| 78.189.189.199 | attackspambots | Automatic report - Port Scan Attack |
2019-10-05 02:26:12 |
| 81.22.45.133 | attackbotsspam | 10/04/2019-12:09:28.368810 81.22.45.133 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-05 02:00:05 |
| 185.176.27.246 | attackbotsspam | 10/04/2019-13:46:13.762633 185.176.27.246 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-10-05 02:17:07 |
| 46.14.175.19 | attackbots | Oct414:21:41server2kernel:Firewall:\*PortFlood\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=46.14.175.19DST=136.243.224.50LEN=52TOS=0x00PREC=0x00TTL=51ID=49432DFPROTO=TCPSPT=14005DPT=80WINDOW=64240RES=0x00SYNURGP=0Oct414:21:41server2kernel:Firewall:\*PortFlood\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=46.14.175.19DST=136.243.224.50LEN=52TOS=0x00PREC=0x00TTL=52ID=49435DFPROTO=TCPSPT=35428DPT=80WINDOW=64240RES=0x00SYNURGP=0Oct414:21:41server2kernel:Firewall:\*PortFlood\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=46.14.175.19DST=136.243.224.50LEN=52TOS=0x00PREC=0x00TTL=52ID=49446DFPROTO=TCPSPT=34545DPT=80WINDOW=64240RES=0x00SYNURGP=0Oct414:21:41server2kernel:Firewall:\*PortFlood\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00SRC=46.14.175.19DST=136.243.224.50LEN=52TOS=0x00PREC=0x00TTL=52ID=49483DFPROTO=TCPSPT=2362DPT=80WINDOW=64240RES=0x00SYNURGP=0Oct414:21:41server2kernel:Firewall:\*PortFlood\*IN=eth0OUT=MAC=00:16:3e:3f:7a:43:52:54:00:a2:7f:43:08:00S |
2019-10-05 02:36:03 |
| 188.221.197.147 | attack | Automatic report - Port Scan Attack |
2019-10-05 02:29:31 |
| 80.23.50.94 | attackbotsspam | invalid user |
2019-10-05 02:18:32 |
| 100.15.155.132 | attackbotsspam | Oct 4 16:19:09 ovpn sshd\[29528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=100.15.155.132 user=root Oct 4 16:19:11 ovpn sshd\[29528\]: Failed password for root from 100.15.155.132 port 43811 ssh2 Oct 4 16:29:05 ovpn sshd\[8164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=100.15.155.132 user=root Oct 4 16:29:06 ovpn sshd\[8164\]: Failed password for root from 100.15.155.132 port 35398 ssh2 Oct 4 16:34:17 ovpn sshd\[10510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=100.15.155.132 user=root |
2019-10-05 01:57:45 |
| 113.164.79.129 | attackbotsspam | 445/tcp 445/tcp 445/tcp... [2019-09-03/10-04]4pkt,1pt.(tcp) |
2019-10-05 02:27:51 |
| 62.234.95.55 | attackbots | Automated report - ssh fail2ban: Oct 4 19:20:54 wrong password, user=root, port=47270, ssh2 Oct 4 19:25:51 wrong password, user=root, port=53652, ssh2 |
2019-10-05 02:25:23 |
| 92.63.194.115 | attackbots | firewall-block, port(s): 32854/tcp |
2019-10-05 02:10:07 |
| 178.128.223.243 | attackbotsspam | Oct 4 21:00:14 www sshd\[13181\]: Invalid user Oscar2017 from 178.128.223.243Oct 4 21:00:16 www sshd\[13181\]: Failed password for invalid user Oscar2017 from 178.128.223.243 port 59416 ssh2Oct 4 21:04:41 www sshd\[13316\]: Invalid user Heslo1@ from 178.128.223.243 ... |
2019-10-05 02:22:40 |
| 119.3.56.0 | attack | 27017/tcp 27017/tcp 27017/tcp... [2019-09-04/10-04]32pkt,1pt.(tcp) |
2019-10-05 02:31:34 |
| 165.227.46.222 | attack | Oct 4 15:56:05 dedicated sshd[20924]: Invalid user Lyon1@3 from 165.227.46.222 port 51634 |
2019-10-05 02:24:54 |
| 221.7.222.172 | attack | 60001/tcp 20001/tcp 50001/tcp... [2019-09-30/10-03]11pkt,6pt.(tcp) |
2019-10-05 02:26:23 |