City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 247.208.80.41
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64457
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;247.208.80.41. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020300 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 03 15:25:04 CST 2025
;; MSG SIZE rcvd: 106Host 41.80.208.247.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 41.80.208.247.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.132.53.14 | attackbotsspam | Oct 9 01:11:02 elp-server sshd[85411]: Unable to negotiate with 185.132.53.14 port 48206: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Oct 9 01:11:19 elp-server sshd[85417]: Unable to negotiate with 185.132.53.14 port 48212: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Oct 9 01:11:36 elp-server sshd[85423]: Unable to negotiate with 185.132.53.14 port 48258: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2020-10-09 07:35:57 |
| 167.248.133.36 | attack | Multiple HTTP calls attempting to GET resources using common/malformed API calls or formats on port 8080 |
2020-10-09 08:01:05 |
| 62.28.222.221 | attackbots | Oct 8 09:11:19 vps647732 sshd[22505]: Failed password for root from 62.28.222.221 port 32782 ssh2 ... |
2020-10-09 07:47:41 |
| 77.40.3.118 | attackspam | Oct 8 22:09:32 mellenthin postfix/smtpd[10846]: warning: unknown[77.40.3.118]: SASL PLAIN authentication failed: Oct 8 22:46:07 mellenthin postfix/smtpd[11783]: warning: unknown[77.40.3.118]: SASL PLAIN authentication failed: |
2020-10-09 07:32:47 |
| 2.87.24.124 | attackbots | Oct 9 04:38:11 *hidden* sshd[36138]: Invalid user tester from 2.87.24.124 port 36062 Oct 9 04:38:11 *hidden* sshd[36138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.87.24.124 Oct 9 04:38:12 *hidden* sshd[36138]: Failed password for invalid user tester from 2.87.24.124 port 36062 ssh2 |
2020-10-09 12:00:59 |
| 101.51.191.21 | attackspam | 1602103454 - 10/07/2020 22:44:14 Host: 101.51.191.21/101.51.191.21 Port: 445 TCP Blocked |
2020-10-09 07:43:48 |
| 222.186.42.137 | attackbotsspam | Oct 9 01:49:13 theomazars sshd[22511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137 user=root Oct 9 01:49:15 theomazars sshd[22511]: Failed password for root from 222.186.42.137 port 64101 ssh2 |
2020-10-09 07:55:56 |
| 49.88.112.72 | attack | SSH break in attempt ... |
2020-10-09 07:54:00 |
| 195.231.11.11 | attack | Lines containing failures of 195.231.11.11 Oct 6 09:53:53 MAKserver06 sshd[1701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.231.11.11 user=r.r Oct 6 09:53:55 MAKserver06 sshd[1701]: Failed password for r.r from 195.231.11.11 port 42442 ssh2 Oct 6 09:53:55 MAKserver06 sshd[1701]: Received disconnect from 195.231.11.11 port 42442:11: Bye Bye [preauth] Oct 6 09:53:55 MAKserver06 sshd[1701]: Disconnected from authenticating user r.r 195.231.11.11 port 42442 [preauth] Oct 6 10:09:07 MAKserver06 sshd[4344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.231.11.11 user=r.r Oct 6 10:09:09 MAKserver06 sshd[4344]: Failed password for r.r from 195.231.11.11 port 55890 ssh2 Oct 6 10:09:09 MAKserver06 sshd[4344]: Received disconnect from 195.231.11.11 port 55890:11: Bye Bye [preauth] Oct 6 10:09:09 MAKserver06 sshd[4344]: Disconnected from authenticating user r.r 195.231.11.11 por........ ------------------------------ |
2020-10-09 07:45:36 |
| 49.88.112.118 | attackspambots | Oct 9 00:57:14 sip sshd[1868906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.118 user=root Oct 9 00:57:16 sip sshd[1868906]: Failed password for root from 49.88.112.118 port 18246 ssh2 Oct 9 00:57:19 sip sshd[1868906]: Failed password for root from 49.88.112.118 port 18246 ssh2 ... |
2020-10-09 07:40:39 |
| 5.188.219.13 | attackspam | C1,Magento Bruteforce Login Attack POST /index.php/admin/ |
2020-10-09 07:54:19 |
| 36.248.211.71 | attackbotsspam | /var/log/apache/pucorp.org.log:[Tue Oct 06 12:50:41 2020] [error] [client 36.248.211.71] File does not exist: /home/ovh/www/Admin62341fb0 /var/log/apache/pucorp.org.log:[Tue Oct 06 12:50:44 2020] [error] [client 36.248.211.71] File does not exist: /home/ovh/www/l.php /var/log/apache/pucorp.org.log:[Tue Oct 06 12:50:44 2020] [error] [client 36.248.211.71] File does not exist: /home/ovh/www/phpinfo.php /var/log/apache/pucorp.org.log:[Tue Oct 06 12:50:45 2020] [error] [client 36.248.211.71] File does not exist: /home/ovh/www/test.php /var/log/apache/pucorp.org.log:[Tue Oct 06 12:50:45 2020] [error] [client 36.248.211.71] File does not exist: /home/ovh/www/index.php /var/log/apache/pucorp.org.log:[Tue Oct 06 12:50:46 2020] [error] [client 36.248.211.71] File does not exist: /home/ovh/www/bbs.php /var/log/apache/pucorp.org.log:[Tue Oct 06 12:50:48 2020] [error] [client 36.248.211.71] File does not exist: /home/ovh/www/forum.php /var/log/apache/pucorp.org.log:[Tue Oct 06 12:50........ ------------------------------ |
2020-10-09 07:51:24 |
| 177.126.130.112 | attackspambots | SSH bruteforce |
2020-10-09 12:04:48 |
| 218.92.0.248 | attack | 2020-10-09T02:28:49.225898lavrinenko.info sshd[22113]: Failed password for root from 218.92.0.248 port 51344 ssh2 2020-10-09T02:28:52.870445lavrinenko.info sshd[22113]: Failed password for root from 218.92.0.248 port 51344 ssh2 2020-10-09T02:28:56.329497lavrinenko.info sshd[22113]: Failed password for root from 218.92.0.248 port 51344 ssh2 2020-10-09T02:29:01.245423lavrinenko.info sshd[22113]: Failed password for root from 218.92.0.248 port 51344 ssh2 2020-10-09T02:29:01.393613lavrinenko.info sshd[22113]: error: maximum authentication attempts exceeded for root from 218.92.0.248 port 51344 ssh2 [preauth] ... |
2020-10-09 07:44:41 |
| 185.14.184.143 | attackbots | 2020-10-08T23:29:54.096069abusebot-3.cloudsearch.cf sshd[11621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.14.184.143 user=root 2020-10-08T23:29:56.159427abusebot-3.cloudsearch.cf sshd[11621]: Failed password for root from 185.14.184.143 port 51082 ssh2 2020-10-08T23:34:21.136364abusebot-3.cloudsearch.cf sshd[11769]: Invalid user test from 185.14.184.143 port 57860 2020-10-08T23:34:21.142472abusebot-3.cloudsearch.cf sshd[11769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.14.184.143 2020-10-08T23:34:21.136364abusebot-3.cloudsearch.cf sshd[11769]: Invalid user test from 185.14.184.143 port 57860 2020-10-08T23:34:23.526909abusebot-3.cloudsearch.cf sshd[11769]: Failed password for invalid user test from 185.14.184.143 port 57860 ssh2 2020-10-08T23:38:37.603191abusebot-3.cloudsearch.cf sshd[11779]: Invalid user user from 185.14.184.143 port 36410 ... |
2020-10-09 07:48:49 |