City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 44.0.45.248
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38675
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;44.0.45.248. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021500 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 16:17:18 CST 2025
;; MSG SIZE rcvd: 104Host 248.45.0.44.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 248.45.0.44.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 141.8.188.3 | attackspam | [Fri Mar 13 19:46:38.244266 2020] [:error] [pid 21411:tid 140257810990848] [client 141.8.188.3:35419] [client 141.8.188.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XmuArmFKeug2GUaqYmpwugAAAN0"] ... |
2020-03-14 00:37:40 |
| 148.235.57.184 | attackspambots | SSH/22 MH Probe, BF, Hack - |
2020-03-14 00:41:09 |
| 51.75.162.4 | attackbots | Mar 13 16:09:45 game-panel sshd[11037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.162.4 Mar 13 16:09:47 game-panel sshd[11037]: Failed password for invalid user gsi from 51.75.162.4 port 36972 ssh2 Mar 13 16:19:23 game-panel sshd[11358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.162.4 |
2020-03-14 00:38:51 |
| 51.178.53.194 | attackspam | k+ssh-bruteforce |
2020-03-14 00:32:17 |
| 112.119.40.139 | attack | Honeypot attack, port: 5555, PTR: n11211940139.netvigator.com. |
2020-03-14 00:27:28 |
| 148.70.178.70 | attackbots | Mar 13 16:45:13 plex sshd[10275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.178.70 user=root Mar 13 16:45:15 plex sshd[10275]: Failed password for root from 148.70.178.70 port 54800 ssh2 |
2020-03-14 00:26:43 |
| 157.245.158.250 | attackbotsspam | (From bray.zoe@googlemail.com) Precious, This specific is usually Plants from Personal Treatment Advertisings. Facial area masks around high quality which often certificated by means of FOOD AND DRUG ADMINISTRATION can easily maintain you and your current household safety. Right here we would love to tell anyone that we have some sort of a great deal involving KN95 experience hide and also medical a few tiers ply count mask together with great rate. If a person possess any interest, remember to feel free to allow you understand, we are going to mail you typically the cost intended for your type recommendation. For information, be sure to see each of our main internet site: www.face-mask.ltd and www.n95us.com Intended for wholesale contact: candace@face-mask.ltd Thanks and Best concerns, Flora |
2020-03-14 00:34:40 |
| 196.219.61.97 | attackbotsspam | Unauthorized connection attempt from IP address 196.219.61.97 on Port 445(SMB) |
2020-03-14 00:48:28 |
| 51.38.37.226 | attackspambots | Mar 11 22:22:55 xxxxxxx7446550 sshd[4752]: Invalid user java from 51.38.37.226 Mar 11 22:22:57 xxxxxxx7446550 sshd[4752]: Failed password for invalid user java from 51.38.37.226 port 39660 ssh2 Mar 11 22:22:57 xxxxxxx7446550 sshd[4753]: Received disconnect from 51.38.37.226: 11: Bye Bye Mar 11 22:31:09 xxxxxxx7446550 sshd[6769]: Failed password for r.r from 51.38.37.226 port 45640 ssh2 Mar 11 22:31:09 xxxxxxx7446550 sshd[6770]: Received disconnect from 51.38.37.226: 11: Bye Bye Mar 11 22:33:39 xxxxxxx7446550 sshd[7205]: Invalid user niiv from 51.38.37.226 Mar 11 22:33:40 xxxxxxx7446550 sshd[7205]: Failed password for invalid user niiv from 51.38.37.226 port 36422 ssh2 Mar 11 22:33:40 xxxxxxx7446550 sshd[7206]: Received disconnect from 51.38.37.226: 11: Bye Bye Mar 11 22:36:01 xxxxxxx7446550 sshd[7621]: Invalid user omega from 51.38.37.226 Mar 11 22:36:03 xxxxxxx7446550 sshd[7621]: Failed password for invalid user omega from 51.38.37.226 port 55442 ssh2 ........ ---------------------------------------------- |
2020-03-14 00:27:56 |
| 148.70.24.20 | attackbots | (sshd) Failed SSH login from 148.70.24.20 (CN/China/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 13 15:00:18 ubnt-55d23 sshd[1780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.24.20 user=root Mar 13 15:00:20 ubnt-55d23 sshd[1780]: Failed password for root from 148.70.24.20 port 60520 ssh2 |
2020-03-14 00:16:42 |
| 103.81.192.14 | attackbots | Unauthorized connection attempt from IP address 103.81.192.14 on Port 445(SMB) |
2020-03-14 00:20:51 |
| 158.69.226.107 | attack | Mar 13 11:12:52 aragorn sshd[20388]: Invalid user odoo from 158.69.226.107 Mar 13 11:12:53 aragorn sshd[20390]: Invalid user test from 158.69.226.107 Mar 13 11:12:53 aragorn sshd[20392]: User postgres from ns523267.ip-158-69-226.net not allowed because not listed in AllowUsers Mar 13 11:12:53 aragorn sshd[20394]: Invalid user oracle from 158.69.226.107 ... |
2020-03-14 00:40:37 |
| 185.6.73.111 | attack | [munged]::443 185.6.73.111 - - [13/Mar/2020:13:44:24 +0100] "POST /[munged]: HTTP/1.1" 200 6376 "-" "-" [munged]::443 185.6.73.111 - - [13/Mar/2020:13:44:40 +0100] "POST /[munged]: HTTP/1.1" 200 6241 "-" "-" [munged]::443 185.6.73.111 - - [13/Mar/2020:13:44:55 +0100] "POST /[munged]: HTTP/1.1" 200 6243 "-" "-" [munged]::443 185.6.73.111 - - [13/Mar/2020:13:45:12 +0100] "POST /[munged]: HTTP/1.1" 200 6239 "-" "-" [munged]::443 185.6.73.111 - - [13/Mar/2020:13:45:28 +0100] "POST /[munged]: HTTP/1.1" 200 6239 "-" "-" [munged]::443 185.6.73.111 - - [13/Mar/2020:13:45:43 +0100] "POST /[munged]: HTTP/1.1" 200 6239 "-" "-" [munged]::443 185.6.73.111 - - [13/Mar/2020:13:45:59 +0100] "POST /[munged]: HTTP/1.1" 200 6239 "-" "-" [munged]::443 185.6.73.111 - - [13/Mar/2020:13:46:15 +0100] "POST /[munged]: HTTP/1.1" 200 6241 "-" "-" [munged]::443 185.6.73.111 - - [13/Mar/2020:13:46:31 +0100] "POST /[munged]: HTTP/1.1" 200 6241 "-" "-" [munged]::443 185.6.73.111 - - [13/Mar/2020:13:46:47 +0100] "POST /[munged]: HTTP/1.1" 2 |
2020-03-14 00:24:21 |
| 165.227.144.125 | attack | leo_www |
2020-03-14 00:06:34 |
| 196.188.0.110 | attackbotsspam | Unauthorized connection attempt from IP address 196.188.0.110 on Port 445(SMB) |
2020-03-14 00:33:12 |