City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 216.109.248.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11722
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;216.109.248.249. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013101 1800 900 604800 86400
;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 01 06:11:09 CST 2025
;; MSG SIZE rcvd: 108Host 249.248.109.216.in-addr.arpa not found: 2(SERVFAIL)
server can't find 216.109.248.249.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 93.174.95.106 | attackspambots | Apr 10 23:34:07 debian-2gb-nbg1-2 kernel: \[8813453.844681\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=93.174.95.106 DST=195.201.40.59 LEN=44 TOS=0x10 PREC=0x00 TTL=120 ID=34882 PROTO=TCP SPT=20368 DPT=1515 WINDOW=49850 RES=0x00 SYN URGP=0 |
2020-04-11 05:52:15 |
| 54.174.221.36 | attack | [FriApr1022:34:42.0026692020][:error][pid1696:tid47172303202048][client54.174.221.36:54704][client54.174.221.36]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"218"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][hostname"viadifuga.org"][uri"/"][unique_id"XpDYYVvvovObxRUxuWp-UQAAAMg"][FriApr1022:34:43.6937622020][:error][pid1800:tid47172324214528][client54.174.221.36:50820][client54.174.221.36]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"218"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][hostname" |
2020-04-11 06:18:20 |
| 140.238.145.45 | attack | 2020-04-10T20:28:58.051919abusebot-2.cloudsearch.cf sshd[7865]: Invalid user www-data from 140.238.145.45 port 39838 2020-04-10T20:28:58.060125abusebot-2.cloudsearch.cf sshd[7865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.238.145.45 2020-04-10T20:28:58.051919abusebot-2.cloudsearch.cf sshd[7865]: Invalid user www-data from 140.238.145.45 port 39838 2020-04-10T20:28:59.497444abusebot-2.cloudsearch.cf sshd[7865]: Failed password for invalid user www-data from 140.238.145.45 port 39838 ssh2 2020-04-10T20:34:49.029552abusebot-2.cloudsearch.cf sshd[8155]: Invalid user www2 from 140.238.145.45 port 43154 2020-04-10T20:34:49.038597abusebot-2.cloudsearch.cf sshd[8155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.238.145.45 2020-04-10T20:34:49.029552abusebot-2.cloudsearch.cf sshd[8155]: Invalid user www2 from 140.238.145.45 port 43154 2020-04-10T20:34:50.997449abusebot-2.cloudsearch.cf sshd[8155]: ... |
2020-04-11 06:10:11 |
| 51.77.137.211 | attackbots | (sshd) Failed SSH login from 51.77.137.211 (FR/France/211.ip-51-77-137.eu): 5 in the last 3600 secs |
2020-04-11 05:54:43 |
| 159.203.30.50 | attack | 2020-04-10T18:05:27.611423mail.thespaminator.com sshd[8815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.30.50 user=root 2020-04-10T18:05:29.445856mail.thespaminator.com sshd[8815]: Failed password for root from 159.203.30.50 port 60330 ssh2 ... |
2020-04-11 06:16:04 |
| 139.59.95.149 | attackspambots | 2020-04-10T21:07:48.841833shield sshd\[30344\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.95.149 user=root 2020-04-10T21:07:51.149874shield sshd\[30344\]: Failed password for root from 139.59.95.149 port 50060 ssh2 2020-04-10T21:11:59.091886shield sshd\[31682\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.95.149 user=root 2020-04-10T21:12:00.863870shield sshd\[31682\]: Failed password for root from 139.59.95.149 port 58688 ssh2 2020-04-10T21:16:08.067016shield sshd\[390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.95.149 user=root |
2020-04-11 05:45:43 |
| 185.234.219.110 | attackbotsspam | $f2bV_matches |
2020-04-11 06:12:25 |
| 192.241.238.209 | attackbots | 1911/tcp 992/tcp 9300/tcp... [2020-03-14/04-10]22pkt,19pt.(tcp),1pt.(udp) |
2020-04-11 06:16:53 |
| 178.62.21.80 | attackbots | SSH Invalid Login |
2020-04-11 06:04:40 |
| 222.186.175.182 | attack | Apr 10 23:59:48 nextcloud sshd\[15839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182 user=root Apr 10 23:59:50 nextcloud sshd\[15839\]: Failed password for root from 222.186.175.182 port 1442 ssh2 Apr 10 23:59:54 nextcloud sshd\[15839\]: Failed password for root from 222.186.175.182 port 1442 ssh2 |
2020-04-11 06:08:42 |
| 45.133.99.7 | attack | Apr 10 23:55:18 relay postfix/smtpd\[12414\]: warning: unknown\[45.133.99.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 10 23:55:49 relay postfix/smtpd\[16527\]: warning: unknown\[45.133.99.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 10 23:56:06 relay postfix/smtpd\[16529\]: warning: unknown\[45.133.99.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 10 23:57:22 relay postfix/smtpd\[18073\]: warning: unknown\[45.133.99.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 10 23:57:39 relay postfix/smtpd\[20023\]: warning: unknown\[45.133.99.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-04-11 06:11:54 |
| 157.245.110.95 | attackbotsspam | Apr 10 23:22:51 meumeu sshd[17938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.110.95 Apr 10 23:22:53 meumeu sshd[17938]: Failed password for invalid user mysql from 157.245.110.95 port 33652 ssh2 Apr 10 23:27:07 meumeu sshd[18529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.110.95 ... |
2020-04-11 05:44:19 |
| 2.224.168.43 | attackbots | Apr 10 23:03:42 eventyay sshd[19584]: Failed password for root from 2.224.168.43 port 54418 ssh2 Apr 10 23:07:13 eventyay sshd[19724]: Failed password for root from 2.224.168.43 port 58315 ssh2 ... |
2020-04-11 05:46:45 |
| 134.175.118.251 | attack | [MK-Root1] Blocked by UFW |
2020-04-11 06:01:37 |
| 212.83.154.20 | attack | Apr 10 23:35:46 pve sshd[6301]: Failed password for root from 212.83.154.20 port 59998 ssh2 Apr 10 23:39:18 pve sshd[12223]: Failed password for root from 212.83.154.20 port 39230 ssh2 |
2020-04-11 06:13:41 |