City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 39.49.163.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13838
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;39.49.163.114. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021901 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 03:08:16 CST 2025
;; MSG SIZE rcvd: 106Host 114.163.49.39.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 114.163.49.39.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 103.192.76.228 | attack | Exploited host used to relais spam through hacked email accounts |
2019-12-08 09:50:43 |
| 103.138.108.154 | attackspam | Fail2Ban Ban Triggered |
2019-12-08 13:21:18 |
| 83.221.222.209 | attackbots | [SunDec0805:56:59.3265432019][:error][pid28661:tid47486370584320][client83.221.222.209:24008][client83.221.222.209]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\\\\\\\\\(chr\?\\\\\\\\\(\?[0-9]{1\,3}\?\\\\\\\\\)\|\?=\?f\(\?:open\|write\)\?\\\\\\\\\(\|\\\\\\\\b\(\?:passthru\|serialize\|php_uname\|phpinfo\|shell_exec\|preg_\\\\\\\\w \|mysql_query\|exec\|eval\|base64_decode\|decode_base64\|rot13\|base64_url_decode\|gz\(\?:inflate\|decode\|uncompress\)\|strrev\|zlib_\\\\\\\\w \)\\\\\\\\b\?\(\?..."atARGS:widgetConfig[code].[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"767"][id"340095"][rev"53"][msg"Atomicorp.comWAFRules:AttackBlocked-PHPfunctioninArgument-thismaybeanattack."][data"die\(@md5\,ARGS:widgetConfig[code]"][severity"CRITICAL"][hostname"136.243.224.51"][uri"/index.php"][unique_id"XeyCm-5fd3JoGllOPYOQpgAAAMk"][SunDec0805:56:59.4194762019][:error][pid28661:tid47486370584320][client83.221.222.209:24008][client83.221.222.209]ModSecurity:Accessdeniedwit |
2019-12-08 13:08:23 |
| 103.106.59.66 | attackbots | Exploited host used to relais spam through hacked email accounts |
2019-12-08 09:52:00 |
| 106.75.10.4 | attackspam | Unauthorized SSH login attempts |
2019-12-08 09:41:39 |
| 186.107.100.123 | attackbots | Automatic report - Port Scan Attack |
2019-12-08 13:09:59 |
| 125.100.6.69 | attackbotsspam | Dec 8 05:57:26 nextcloud sshd\[22937\]: Invalid user plutonium from 125.100.6.69 Dec 8 05:57:26 nextcloud sshd\[22937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.100.6.69 Dec 8 05:57:27 nextcloud sshd\[22937\]: Failed password for invalid user plutonium from 125.100.6.69 port 37762 ssh2 ... |
2019-12-08 13:00:51 |
| 92.222.91.31 | attackspambots | Dec 7 18:51:53 php1 sshd\[31886\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.ip-92-222-91.eu user=root Dec 7 18:51:54 php1 sshd\[31886\]: Failed password for root from 92.222.91.31 port 50550 ssh2 Dec 7 18:57:27 php1 sshd\[32659\]: Invalid user hodari from 92.222.91.31 Dec 7 18:57:27 php1 sshd\[32659\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.ip-92-222-91.eu Dec 7 18:57:29 php1 sshd\[32659\]: Failed password for invalid user hodari from 92.222.91.31 port 56306 ssh2 |
2019-12-08 13:07:13 |
| 203.150.128.237 | attackbots | CMS brute force ... |
2019-12-08 09:42:15 |
| 204.48.31.119 | attackspambots | [portscan] Port scan |
2019-12-08 13:15:34 |
| 182.61.130.121 | attack | Dec 8 05:57:31 vps647732 sshd[14082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.130.121 Dec 8 05:57:33 vps647732 sshd[14082]: Failed password for invalid user cisco from 182.61.130.121 port 50458 ssh2 ... |
2019-12-08 13:02:15 |
| 195.113.148.73 | attackspam | Dec 7 20:29:24 firewall sshd[6995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.113.148.73 Dec 7 20:29:24 firewall sshd[6995]: Invalid user ainnah from 195.113.148.73 Dec 7 20:29:25 firewall sshd[6995]: Failed password for invalid user ainnah from 195.113.148.73 port 59678 ssh2 ... |
2019-12-08 09:49:22 |
| 64.44.80.148 | attack | Hacking via dumped databases |
2019-12-08 10:59:52 |
| 51.15.2.67 | attackspam | Dec 7 15:25:42 eddieflores sshd\[14257\]: Invalid user metrailer from 51.15.2.67 Dec 7 15:25:42 eddieflores sshd\[14257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.2.67 Dec 7 15:25:44 eddieflores sshd\[14257\]: Failed password for invalid user metrailer from 51.15.2.67 port 40569 ssh2 Dec 7 15:31:29 eddieflores sshd\[14801\]: Invalid user skojima from 51.15.2.67 Dec 7 15:31:29 eddieflores sshd\[14801\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.2.67 |
2019-12-08 09:36:31 |
| 218.92.0.188 | attack | 2019-12-08T05:57:28.487993stark.klein-stark.info sshd\[2900\]: Failed none for root from 218.92.0.188 port 2860 ssh2 2019-12-08T05:57:28.772052stark.klein-stark.info sshd\[2900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.188 user=root 2019-12-08T05:57:31.137712stark.klein-stark.info sshd\[2900\]: Failed password for root from 218.92.0.188 port 2860 ssh2 ... |
2019-12-08 13:00:23 |