City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 241.14.212.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50634
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;241.14.212.140. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 18:10:14 CST 2025
;; MSG SIZE rcvd: 107Host 140.212.14.241.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 140.212.14.241.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.45.178.181 | attackspambots | [TueOct0105:46:13.9318752019][:error][pid27946:tid47845809862400][client103.45.178.181:14730][client103.45.178.181]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\\\\\\\\\(chr\?\\\\\\\\\(\?[0-9]{1\,3}\?\\\\\\\\\)\|\?=\?f\(\?:open\|write\)\?\\\\\\\\\(\|\\\\\\\\b\(\?:passthru\|serialize\|php_uname\|phpinfo\|shell_exec\|preg_\\\\\\\\w \|mysql_query\|exec\|eval\|base64_decode\|decode_base64\|rot13\|base64_url_decode\|gz\(\?:inflate\|decode\|uncompress\)\|strrev\|zlib_\\\\\\\\w \)\\\\\\\\b\?\(\?..."atARGS:widgetConfig[code].[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"767"][id"340095"][rev"53"][msg"Atomicorp.comWAFRules:AttackBlocked-PHPfunctioninArgument-thismaybeanattack."][data"die\(@md5\,ARGS:widgetConfig[code]"][severity"CRITICAL"][hostname"81.17.25.251"][uri"/index.php"][unique_id"XZLMBSil-gGFqzc@IFP0fAAAAAs"][TueOct0105:46:14.3426622019][:error][pid27958:tid47845814064896][client103.45.178.181:14881][client103.45.178.181]ModSecurity:Accessdeniedwithc |
2019-10-01 19:31:31 |
| 78.230.208.54 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/78.230.208.54/ FR - 1H : (85) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : FR NAME ASN : ASN12322 IP : 78.230.208.54 CIDR : 78.224.0.0/11 PREFIX COUNT : 16 UNIQUE IP COUNT : 11051008 WYKRYTE ATAKI Z ASN12322 : 1H - 3 3H - 7 6H - 9 12H - 17 24H - 23 DateTime : 2019-10-01 05:46:34 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery |
2019-10-01 19:16:36 |
| 45.56.153.30 | attack | RDP Bruteforce |
2019-10-01 19:15:14 |
| 36.75.142.84 | attack | Lines containing failures of 36.75.142.84 Oct 1 05:19:53 www sshd[32668]: Invalid user rancid from 36.75.142.84 port 40749 Oct 1 05:19:53 www sshd[32668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.75.142.84 Oct 1 05:19:56 www sshd[32668]: Failed password for invalid user rancid from 36.75.142.84 port 40749 ssh2 Oct 1 05:19:56 www sshd[32668]: Received disconnect from 36.75.142.84 port 40749:11: Bye Bye [preauth] Oct 1 05:19:56 www sshd[32668]: Disconnected from invalid user rancid 36.75.142.84 port 40749 [preauth] Oct 1 05:26:04 www sshd[792]: Invalid user jium5 from 36.75.142.84 port 23918 Oct 1 05:26:04 www sshd[792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.75.142.84 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=36.75.142.84 |
2019-10-01 19:03:12 |
| 91.187.117.3 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/91.187.117.3/ XK - 1H : (5) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : XK NAME ASN : ASN21246 IP : 91.187.117.3 CIDR : 91.187.117.0/24 PREFIX COUNT : 124 UNIQUE IP COUNT : 77824 WYKRYTE ATAKI Z ASN21246 : 1H - 1 3H - 2 6H - 2 12H - 3 24H - 5 DateTime : 2019-10-01 05:46:34 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery |
2019-10-01 19:16:16 |
| 88.186.192.115 | attack | Automatic report - Port Scan Attack |
2019-10-01 19:08:12 |
| 5.188.210.18 | attackspambots | 0,20-02/19 [bc03/m15] concatform PostRequest-Spammer scoring: maputo01_x2b |
2019-10-01 19:28:27 |
| 211.41.212.37 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/211.41.212.37/ KR - 1H : (224) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : KR NAME ASN : ASN9943 IP : 211.41.212.37 CIDR : 211.41.212.0/22 PREFIX COUNT : 130 UNIQUE IP COUNT : 225536 WYKRYTE ATAKI Z ASN9943 : 1H - 1 3H - 2 6H - 2 12H - 2 24H - 2 DateTime : 2019-10-01 05:45:59 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery |
2019-10-01 19:41:02 |
| 180.183.122.24 | attack | Oct 1 05:39:03 mail1 sshd[4052]: Invalid user admin from 180.183.122.24 port 41297 Oct 1 05:39:03 mail1 sshd[4052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.183.122.24 Oct 1 05:39:05 mail1 sshd[4052]: Failed password for invalid user admin from 180.183.122.24 port 41297 ssh2 Oct 1 05:39:06 mail1 sshd[4052]: Connection closed by 180.183.122.24 port 41297 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=180.183.122.24 |
2019-10-01 19:40:18 |
| 71.6.135.131 | attack | 10/01/2019-13:01:45.566760 71.6.135.131 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 71 |
2019-10-01 19:08:39 |
| 144.217.15.161 | attack | Oct 1 06:47:46 bouncer sshd\[27341\]: Invalid user tmp from 144.217.15.161 port 50288 Oct 1 06:47:46 bouncer sshd\[27341\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.15.161 Oct 1 06:47:49 bouncer sshd\[27341\]: Failed password for invalid user tmp from 144.217.15.161 port 50288 ssh2 ... |
2019-10-01 19:42:40 |
| 212.83.138.75 | attack | Lines containing failures of 212.83.138.75 Oct 1 05:11:38 *** sshd[19300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.83.138.75 user=r.r Oct 1 05:11:41 *** sshd[19300]: Failed password for r.r from 212.83.138.75 port 47142 ssh2 Oct 1 05:11:41 *** sshd[19300]: Received disconnect from 212.83.138.75 port 47142:11: Bye Bye [preauth] Oct 1 05:11:41 *** sshd[19300]: Disconnected from authenticating user r.r 212.83.138.75 port 47142 [preauth] Oct 1 05:33:21 *** sshd[21413]: Invalid user denise from 212.83.138.75 port 45040 Oct 1 05:33:21 *** sshd[21413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.83.138.75 Oct 1 05:33:23 *** sshd[21413]: Failed password for invalid user denise from 212.83.138.75 port 45040 ssh2 Oct 1 05:33:23 *** sshd[21413]: Received disconnect from 212.83.138.75 port 45040:11: Bye Bye [preauth] Oct 1 05:33:23 *** sshd[21413]: Disconnected from invalid ........ ------------------------------ |
2019-10-01 19:34:52 |
| 37.59.38.216 | attack | 2019-10-01T10:57:26.656269abusebot-7.cloudsearch.cf sshd\[28619\]: Invalid user sales from 37.59.38.216 port 60916 |
2019-10-01 19:11:38 |
| 118.97.188.105 | attack | Oct 1 04:44:50 Tower sshd[15191]: Connection from 118.97.188.105 port 47630 on 192.168.10.220 port 22 Oct 1 04:44:51 Tower sshd[15191]: Invalid user fatimac from 118.97.188.105 port 47630 Oct 1 04:44:51 Tower sshd[15191]: error: Could not get shadow information for NOUSER Oct 1 04:44:51 Tower sshd[15191]: Failed password for invalid user fatimac from 118.97.188.105 port 47630 ssh2 Oct 1 04:44:52 Tower sshd[15191]: Received disconnect from 118.97.188.105 port 47630:11: Bye Bye [preauth] Oct 1 04:44:52 Tower sshd[15191]: Disconnected from invalid user fatimac 118.97.188.105 port 47630 [preauth] |
2019-10-01 19:25:45 |
| 103.209.140.92 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/103.209.140.92/ IN - 1H : (95) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : IN NAME ASN : ASN138730 IP : 103.209.140.92 CIDR : 103.209.140.0/24 PREFIX COUNT : 20 UNIQUE IP COUNT : 5120 WYKRYTE ATAKI Z ASN138730 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-01 05:46:34 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery |
2019-10-01 19:15:51 |