City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 252.163.53.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6574
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;252.163.53.142. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2021123000 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 30 13:17:09 CST 2021
;; MSG SIZE rcvd: 107Host 142.53.163.252.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 142.53.163.252.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 35.239.243.107 | attack | 35.239.243.107 has been banned for [WebApp Attack] ... |
2019-11-29 18:32:34 |
| 35.242.132.76 | attackbotsspam | [FriNov2907:23:42.7885102019][:error][pid5800:tid47933159347968][client35.242.132.76:45540][client35.242.132.76]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"/wp-config.php"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf"][line"3503"][id"381206"][rev"1"][msg"Atomicorp.comWAFRules-VirtualJustInTimePatch:AccesstoWordPressconfigurationfileblocked"][data"/wp-config.php"][severity"CRITICAL"][hostname"www.ilgiornaledelticino.ch"][uri"/wp-config.php."][unique_id"XeC5bspcBDPGObVdSFod-gAAAJQ"][FriNov2907:23:43.1905412019][:error][pid5847:tid47933161449216][client35.242.132.76:45716][client35.242.132.76]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"/wp-config.php"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf"][line"3503"][id"381206"][rev"1"][msg"Atomicorp.comWAFRules-VirtualJustInTimePatch:AccesstoWordPressconfigurationfileblocked"][data"/wp-config.php"][severity"CRITICAL"][hostname"ilgiornaledeltici |
2019-11-29 18:34:25 |
| 117.169.38.69 | attack | Nov 28 23:13:35 php1 sshd\[20597\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.169.38.69 user=root Nov 28 23:13:37 php1 sshd\[20597\]: Failed password for root from 117.169.38.69 port 54566 ssh2 Nov 28 23:18:29 php1 sshd\[20989\]: Invalid user squid from 117.169.38.69 Nov 28 23:18:29 php1 sshd\[20989\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.169.38.69 Nov 28 23:18:32 php1 sshd\[20989\]: Failed password for invalid user squid from 117.169.38.69 port 55624 ssh2 |
2019-11-29 18:26:29 |
| 195.114.103.108 | attackbotsspam | RDP Bruteforce |
2019-11-29 18:50:49 |
| 182.61.4.60 | attack | Nov 28 20:19:22 web9 sshd\[19433\]: Invalid user 555555 from 182.61.4.60 Nov 28 20:19:22 web9 sshd\[19433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.4.60 Nov 28 20:19:23 web9 sshd\[19433\]: Failed password for invalid user 555555 from 182.61.4.60 port 41850 ssh2 Nov 28 20:23:21 web9 sshd\[19957\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.4.60 user=backup Nov 28 20:23:24 web9 sshd\[19957\]: Failed password for backup from 182.61.4.60 port 47550 ssh2 |
2019-11-29 18:46:53 |
| 185.143.221.7 | attackbots | 11/29/2019-01:23:54.266358 185.143.221.7 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-11-29 18:29:29 |
| 161.132.214.166 | attackspam | Automatic report - Banned IP Access |
2019-11-29 18:54:50 |
| 37.120.33.30 | attack | Nov 29 10:39:36 zeus sshd[13675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.120.33.30 Nov 29 10:39:37 zeus sshd[13675]: Failed password for invalid user servicedesk from 37.120.33.30 port 35505 ssh2 Nov 29 10:43:01 zeus sshd[13758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.120.33.30 Nov 29 10:43:03 zeus sshd[13758]: Failed password for invalid user guest from 37.120.33.30 port 53507 ssh2 |
2019-11-29 19:00:21 |
| 167.114.226.137 | attack | Nov 29 10:49:49 SilenceServices sshd[11625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.226.137 Nov 29 10:49:51 SilenceServices sshd[11625]: Failed password for invalid user vallerga from 167.114.226.137 port 43191 ssh2 Nov 29 10:52:42 SilenceServices sshd[12403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.226.137 |
2019-11-29 18:49:57 |
| 14.161.4.5 | attackspambots | Port 1433 Scan |
2019-11-29 18:46:29 |
| 168.0.81.229 | attack | Automatic report - Port Scan Attack |
2019-11-29 18:31:55 |
| 191.7.14.56 | attack | 191.7.14.56 - - \[29/Nov/2019:07:23:31 +0100\] "POST /editBlackAndWhiteList HTTP/1.1\\n" 400 0 "-" "-" |
2019-11-29 18:42:18 |
| 112.64.170.178 | attack | 2019-11-29T11:35:15.666637vps751288.ovh.net sshd\[6618\]: Invalid user romito from 112.64.170.178 port 29046 2019-11-29T11:35:15.675144vps751288.ovh.net sshd\[6618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.170.178 2019-11-29T11:35:17.742201vps751288.ovh.net sshd\[6618\]: Failed password for invalid user romito from 112.64.170.178 port 29046 ssh2 2019-11-29T11:43:19.430043vps751288.ovh.net sshd\[6620\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.170.178 user=root 2019-11-29T11:43:21.276169vps751288.ovh.net sshd\[6620\]: Failed password for root from 112.64.170.178 port 3539 ssh2 |
2019-11-29 18:57:18 |
| 154.85.39.223 | attack | Port 1433 Scan |
2019-11-29 18:41:38 |
| 14.139.173.129 | attackspam | Nov 29 05:00:18 lanister sshd[24643]: Invalid user spolillo from 14.139.173.129 Nov 29 05:00:18 lanister sshd[24643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.139.173.129 Nov 29 05:00:18 lanister sshd[24643]: Invalid user spolillo from 14.139.173.129 Nov 29 05:00:20 lanister sshd[24643]: Failed password for invalid user spolillo from 14.139.173.129 port 12175 ssh2 ... |
2019-11-29 18:33:04 |