City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 248.75.212.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51349
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;248.75.212.12. IN A
;; AUTHORITY SECTION:
. 60 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022121601 1800 900 604800 86400
;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 17 02:33:44 CST 2022
;; MSG SIZE rcvd: 106Host 12.212.75.248.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 12.212.75.248.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.68.139.151 | attackspam | Oct 6 16:15:19 vpn01 sshd[24897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.139.151 Oct 6 16:15:21 vpn01 sshd[24897]: Failed password for invalid user couchdb from 51.68.139.151 port 40636 ssh2 ... |
2019-10-07 02:58:36 |
| 168.90.89.35 | attack | Oct 6 18:37:23 localhost sshd\[72345\]: Invalid user 123 from 168.90.89.35 port 38852 Oct 6 18:37:23 localhost sshd\[72345\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.90.89.35 Oct 6 18:37:25 localhost sshd\[72345\]: Failed password for invalid user 123 from 168.90.89.35 port 38852 ssh2 Oct 6 18:42:19 localhost sshd\[72607\]: Invalid user Miss@123 from 168.90.89.35 port 58930 Oct 6 18:42:19 localhost sshd\[72607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.90.89.35 ... |
2019-10-07 02:54:13 |
| 117.34.112.248 | attack | port scan and connect, tcp 80 (http) |
2019-10-07 02:43:00 |
| 86.35.42.74 | attack | SSH-bruteforce attempts |
2019-10-07 03:11:09 |
| 177.92.247.15 | attack | Honeypot attack, port: 23, PTR: PTR record not found |
2019-10-07 03:06:32 |
| 34.67.180.216 | attack | Oct 6 18:05:05 lnxweb62 sshd[20792]: Failed password for root from 34.67.180.216 port 44902 ssh2 Oct 6 18:05:05 lnxweb62 sshd[20792]: Failed password for root from 34.67.180.216 port 44902 ssh2 |
2019-10-07 02:56:23 |
| 190.128.159.118 | attackspambots | 2019-10-06T19:30:42.657120 sshd[30550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.159.118 user=root 2019-10-06T19:30:44.810566 sshd[30550]: Failed password for root from 190.128.159.118 port 50628 ssh2 2019-10-06T19:36:12.050148 sshd[30627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.159.118 user=root 2019-10-06T19:36:13.175627 sshd[30627]: Failed password for root from 190.128.159.118 port 35226 ssh2 2019-10-06T19:41:49.181565 sshd[30720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.159.118 user=root 2019-10-06T19:41:50.572817 sshd[30720]: Failed password for root from 190.128.159.118 port 48088 ssh2 ... |
2019-10-07 02:48:50 |
| 188.166.87.238 | attack | Oct 6 16:44:16 MK-Soft-VM3 sshd[7927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.87.238 Oct 6 16:44:18 MK-Soft-VM3 sshd[7927]: Failed password for invalid user Qaz123123 from 188.166.87.238 port 33534 ssh2 ... |
2019-10-07 02:58:15 |
| 182.151.37.230 | attackspam | Oct 6 16:12:19 MK-Soft-Root1 sshd[6247]: Failed password for root from 182.151.37.230 port 36320 ssh2 ... |
2019-10-07 02:56:00 |
| 212.47.238.207 | attackspam | Oct 6 20:16:22 MK-Soft-VM7 sshd[30094]: Failed password for root from 212.47.238.207 port 41040 ssh2 ... |
2019-10-07 02:48:29 |
| 80.85.70.20 | attackspam | Oct 6 02:40:44 hanapaa sshd\[10789\]: Invalid user Qq@123 from 80.85.70.20 Oct 6 02:40:45 hanapaa sshd\[10789\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.85.70.20 Oct 6 02:40:47 hanapaa sshd\[10789\]: Failed password for invalid user Qq@123 from 80.85.70.20 port 40384 ssh2 Oct 6 02:44:05 hanapaa sshd\[11067\]: Invalid user xsw2ZAQ! from 80.85.70.20 Oct 6 02:44:05 hanapaa sshd\[11067\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.85.70.20 |
2019-10-07 02:36:14 |
| 61.5.80.9 | attack | Automatic report - Port Scan Attack |
2019-10-07 02:53:23 |
| 73.158.78.102 | attack | [SunOct0613:39:19.8073442019][:error][pid1449:tid46955271034624][client73.158.78.102:53820][client73.158.78.102]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)"][severity"CRITICAL"][hostname"capelligiusystyle.ch"][uri"/tables.sql"][unique_id"XZnSZxQeQY@yGgBfwaEBNAAAAAw"][SunOct0613:39:22.6053422019][:error][pid1384:tid46955292047104][client73.158.78.102:54484][client73.158.78.102]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)\ |
2019-10-07 02:33:52 |
| 170.238.217.154 | attackbotsspam | port scan and connect, tcp 23 (telnet) |
2019-10-07 02:50:25 |
| 51.77.140.36 | attackspambots | 2019-10-06T08:21:10.3022691495-001 sshd\[53763\]: Failed password for root from 51.77.140.36 port 54662 ssh2 2019-10-06T08:24:56.1898921495-001 sshd\[54022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.ip-51-77-140.eu user=root 2019-10-06T08:24:58.1990891495-001 sshd\[54022\]: Failed password for root from 51.77.140.36 port 37322 ssh2 2019-10-06T08:28:41.2710641495-001 sshd\[54286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.ip-51-77-140.eu user=root 2019-10-06T08:28:43.0622541495-001 sshd\[54286\]: Failed password for root from 51.77.140.36 port 48230 ssh2 2019-10-06T08:32:36.9713931495-001 sshd\[54553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.ip-51-77-140.eu user=root ... |
2019-10-07 03:09:16 |