City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 29.42.11.79
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51330
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;29.42.11.79. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021701 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 02:18:42 CST 2025
;; MSG SIZE rcvd: 104Host 79.11.42.29.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 79.11.42.29.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.77.105.100 | attackbotsspam | May 1 05:19:38 XXX sshd[54702]: Invalid user stephan from 202.77.105.100 port 49092 |
2020-05-02 08:01:22 |
| 115.84.92.115 | attackspambots | Dovecot Invalid User Login Attempt. |
2020-05-02 07:55:04 |
| 103.53.53.14 | attack | 05/01/2020-16:11:20.058248 103.53.53.14 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2020-05-02 07:56:05 |
| 218.81.33.2 | attackbots | 1588363877 - 05/01/2020 22:11:17 Host: 218.81.33.2/218.81.33.2 Port: 445 TCP Blocked |
2020-05-02 07:57:54 |
| 185.50.149.10 | attackbots | 2020-05-02 02:10:40 dovecot_login authenticator failed for \(\[185.50.149.10\]\) \[185.50.149.10\]: 535 Incorrect authentication data \(set_id=remo.martinoli@opso.it\) 2020-05-02 02:10:52 dovecot_login authenticator failed for \(\[185.50.149.10\]\) \[185.50.149.10\]: 535 Incorrect authentication data 2020-05-02 02:11:02 dovecot_login authenticator failed for \(\[185.50.149.10\]\) \[185.50.149.10\]: 535 Incorrect authentication data 2020-05-02 02:11:17 dovecot_login authenticator failed for \(\[185.50.149.10\]\) \[185.50.149.10\]: 535 Incorrect authentication data 2020-05-02 02:11:28 dovecot_login authenticator failed for \(\[185.50.149.10\]\) \[185.50.149.10\]: 535 Incorrect authentication data |
2020-05-02 08:16:36 |
| 201.143.44.22 | attack | SMB Server BruteForce Attack |
2020-05-02 08:06:43 |
| 120.76.63.70 | attack | (smtpauth) Failed SMTP AUTH login from 120.76.63.70 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-05-02 00:40:46 login authenticator failed for (ADMIN) [120.76.63.70]: 535 Incorrect authentication data (set_id=mail@sepasgroup.net) |
2020-05-02 08:20:42 |
| 176.28.54.6 | attackspam | [FriMay0122:08:41.2878842020][:error][pid11372:tid47899052459776][client176.28.54.6:52808][client176.28.54.6]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\\\\\\\\\(chr\?\\\\\\\\\(\?[0-9]{1\,3}\?\\\\\\\\\)\|\?=\?f\(\?:open\|write\)\?\\\\\\\\\(\|\\\\\\\\b\(\?:passthru\|serialize\|php_uname\|phpinfo\|shell_exec\|preg_\\\\\\\\w \|mysql_query\|exec\|include\|eval\|system\|base64_decode\|decode_base64\|base64_url_decode\|str_rot13\)\\\\\\\\b\?\(\?:\\\\\\\\\(\|\\\\\\\\:\)\)"atARGS:d.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"755"][id"340195"][rev"3"][msg"Atomicorp.comWAFRules:AttackBlocked-Base64EncodedPHPfunctioninArgument-thismaybeanattack."][data"base64_decode\("][severity"CRITICAL"][hostname"www.cdconsult.ch"][uri"/.well-known/wp-bk-report.php.suspected"][unique_id"XqyByZ-ojfrLOu8z2aSANgAAAQQ"][FriMay0122:11:16.3277842020][:error][pid11647:tid47899067168512][client176.28.54.6:45944][client176.28.54.6]ModSecurity:Accessdeniedwithcode403\(phase2\ |
2020-05-02 07:58:09 |
| 159.203.10.216 | attack | SSH-bruteforce attempts |
2020-05-02 08:17:12 |
| 114.118.7.134 | attack | Invalid user vanesa from 114.118.7.134 port 39432 |
2020-05-02 07:58:36 |
| 185.143.74.136 | attackbots | May 2 07:34:24 bacztwo courieresmtpd[30385]: error,relay=::ffff:185.143.74.136,msg="535 Authentication failed.",cmd: AUTH LOGIN niki@idv.tw May 2 07:36:22 bacztwo courieresmtpd[11364]: error,relay=::ffff:185.143.74.136,msg="535 Authentication failed.",cmd: AUTH LOGIN taiyo@idv.tw May 2 07:38:23 bacztwo courieresmtpd[16182]: error,relay=::ffff:185.143.74.136,msg="535 Authentication failed.",cmd: AUTH LOGIN lemlit@idv.tw May 2 07:40:23 bacztwo courieresmtpd[3250]: error,relay=::ffff:185.143.74.136,msg="535 Authentication failed.",cmd: AUTH LOGIN ronan@idv.tw May 2 07:42:23 bacztwo courieresmtpd[27994]: error,relay=::ffff:185.143.74.136,msg="535 Authentication failed.",cmd: AUTH LOGIN rest@idv.tw ... |
2020-05-02 07:44:59 |
| 112.85.42.195 | attack | May 2 00:11:09 game-panel sshd[28736]: Failed password for root from 112.85.42.195 port 59596 ssh2 May 2 00:11:10 game-panel sshd[28736]: Failed password for root from 112.85.42.195 port 59596 ssh2 May 2 00:11:12 game-panel sshd[28736]: Failed password for root from 112.85.42.195 port 59596 ssh2 |
2020-05-02 08:16:15 |
| 220.127.177.166 | attackbots | port 23 |
2020-05-02 07:53:15 |
| 107.170.249.243 | attack | SSH Invalid Login |
2020-05-02 08:19:03 |
| 42.101.44.158 | attackbots | Fail2Ban - SSH Bruteforce Attempt |
2020-05-02 08:19:27 |