City: Kachia
Region: Kaduna
Country: Nigeria
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.139.79.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1865
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;41.139.79.139. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019090301 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Sep 04 09:18:26 CST 2019
;; MSG SIZE rcvd: 117Host 139.79.139.41.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 139.79.139.41.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 122.154.46.5 | attackbots | Sep 24 10:05:26 rpi sshd[1851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.46.5 Sep 24 10:05:28 rpi sshd[1851]: Failed password for invalid user hoppin from 122.154.46.5 port 58852 ssh2 |
2019-09-24 16:14:18 |
| 128.199.107.252 | attack | Sep 23 21:56:36 php1 sshd\[24812\]: Invalid user webadm from 128.199.107.252 Sep 23 21:56:36 php1 sshd\[24812\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.252 Sep 23 21:56:38 php1 sshd\[24812\]: Failed password for invalid user webadm from 128.199.107.252 port 55500 ssh2 Sep 23 22:05:31 php1 sshd\[25949\]: Invalid user mj from 128.199.107.252 Sep 23 22:05:31 php1 sshd\[25949\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.107.252 |
2019-09-24 16:16:50 |
| 149.202.56.194 | attackspam | Sep 24 06:43:39 monocul sshd[19429]: Invalid user weblogic from 149.202.56.194 port 46934 ... |
2019-09-24 16:22:35 |
| 18.222.22.188 | attackspam | Invalid user daw from 18.222.22.188 port 46374 |
2019-09-24 16:31:24 |
| 49.143.95.121 | attackbotsspam | [TueSep2405:52:27.1114172019][:error][pid26675:tid47560302733056][client49.143.95.121:44905][client49.143.95.121]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)"][severity"CRITICAL"][hostname"boltonholding.com"][uri"/boltonholding.sql"][unique_id"XYmS@yUY647fdT5XzKC6LAAAABU"][TueSep2405:52:29.4647092019][:error][pid26753:tid47560302733056][client49.143.95.121:45164][client49.143.95.121]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)"][sever |
2019-09-24 16:41:30 |
| 158.69.192.239 | attack | 2019-09-24T07:32:49.551415abusebot.cloudsearch.cf sshd\[31440\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=239.ip-158-69-192.net user=root |
2019-09-24 16:51:50 |
| 167.99.255.80 | attackbots | Sep 24 11:10:46 intra sshd\[41986\]: Invalid user pgsql from 167.99.255.80Sep 24 11:10:48 intra sshd\[41986\]: Failed password for invalid user pgsql from 167.99.255.80 port 40616 ssh2Sep 24 11:14:28 intra sshd\[42038\]: Invalid user snagg from 167.99.255.80Sep 24 11:14:30 intra sshd\[42038\]: Failed password for invalid user snagg from 167.99.255.80 port 54076 ssh2Sep 24 11:18:15 intra sshd\[42089\]: Invalid user admin from 167.99.255.80Sep 24 11:18:17 intra sshd\[42089\]: Failed password for invalid user admin from 167.99.255.80 port 39302 ssh2 ... |
2019-09-24 16:33:03 |
| 58.210.94.98 | attackspam | Sep 23 05:10:29 lhostnameo sshd[27531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.210.94.98 user=r.r Sep 23 05:10:31 lhostnameo sshd[27531]: Failed password for r.r from 58.210.94.98 port 27211 ssh2 Sep 23 05:14:23 lhostnameo sshd[29629]: Invalid user wei from 58.210.94.98 port 29132 Sep 23 05:14:23 lhostnameo sshd[29629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.210.94.98 Sep 23 05:14:25 lhostnameo sshd[29629]: Failed password for invalid user wei from 58.210.94.98 port 29132 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=58.210.94.98 |
2019-09-24 16:44:25 |
| 51.38.232.52 | attackbots | Invalid user dujoey from 51.38.232.52 port 34299 |
2019-09-24 16:12:18 |
| 58.250.161.97 | attack | Sep 24 05:52:35 lnxded64 sshd[22314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.250.161.97 |
2019-09-24 16:39:00 |
| 211.54.40.81 | attackbotsspam | Automatic report - Banned IP Access |
2019-09-24 16:47:42 |
| 51.38.129.20 | attackspambots | Automated report - ssh fail2ban: Sep 24 08:05:23 wrong password, user=root, port=46058, ssh2 Sep 24 08:09:40 authentication failure Sep 24 08:09:43 wrong password, user=everaldo, port=59222, ssh2 |
2019-09-24 16:17:03 |
| 177.19.181.10 | attack | Sep 24 10:17:51 vps691689 sshd[31530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.19.181.10 Sep 24 10:17:53 vps691689 sshd[31530]: Failed password for invalid user virginie from 177.19.181.10 port 35744 ssh2 ... |
2019-09-24 16:40:11 |
| 222.186.169.192 | attackspam | Sep 24 00:19:25 debian sshd[16021]: Unable to negotiate with 222.186.169.192 port 22862: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] Sep 24 04:13:36 debian sshd[26348]: Unable to negotiate with 222.186.169.192 port 28114: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ... |
2019-09-24 16:34:37 |
| 80.211.10.47 | attackspambots | Sep 24 09:56:09 dedicated sshd[14449]: Invalid user jana from 80.211.10.47 port 28078 |
2019-09-24 16:15:08 |