City: unknown
Region: unknown
Country: India
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.248.156.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16890
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;49.248.156.239. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021000 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 16:23:39 CST 2025
;; MSG SIZE rcvd: 107239.156.248.49.in-addr.arpa domain name pointer static-239.156.248.49-tataidc.co.in.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
239.156.248.49.in-addr.arpa name = static-239.156.248.49-tataidc.co.in.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.47.124 | attackbotsspam | 8986/tcp 32222/tcp 7000/tcp... [2020-08-07/10-02]177pkt,96pt.(tcp) |
2020-10-03 23:44:09 |
| 106.12.125.178 | attack | Oct 3 14:13:57 *** sshd[15317]: User root from 106.12.125.178 not allowed because not listed in AllowUsers |
2020-10-03 23:26:07 |
| 146.185.25.188 | attackspambots | Blocked by Sophos UTM Network Protection . / / proto=6 . srcport=3780 . dstport=3780 . (1511) |
2020-10-03 23:43:01 |
| 139.59.93.93 | attackspam | (sshd) Failed SSH login from 139.59.93.93 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 3 07:25:27 server5 sshd[3127]: Invalid user ubuntu from 139.59.93.93 Oct 3 07:25:27 server5 sshd[3127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93 Oct 3 07:25:29 server5 sshd[3127]: Failed password for invalid user ubuntu from 139.59.93.93 port 33760 ssh2 Oct 3 07:31:09 server5 sshd[5660]: Invalid user rg from 139.59.93.93 Oct 3 07:31:09 server5 sshd[5660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.93.93 |
2020-10-03 23:01:37 |
| 212.119.241.46 | attack | Oct 3 17:09:02 host1 sshd[466971]: Invalid user ppldtepe from 212.119.241.46 port 48037 Oct 3 17:09:04 host1 sshd[466971]: Failed password for invalid user ppldtepe from 212.119.241.46 port 48037 ssh2 Oct 3 17:09:02 host1 sshd[466971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.119.241.46 Oct 3 17:09:02 host1 sshd[466971]: Invalid user ppldtepe from 212.119.241.46 port 48037 Oct 3 17:09:04 host1 sshd[466971]: Failed password for invalid user ppldtepe from 212.119.241.46 port 48037 ssh2 ... |
2020-10-03 23:30:20 |
| 194.26.25.97 | attackspam | Found on CINS badguys / proto=6 . srcport=49101 . dstport=3390 . (1894) |
2020-10-03 23:13:01 |
| 120.131.13.186 | attackbotsspam | Oct 3 11:45:15 vpn01 sshd[20852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.131.13.186 Oct 3 11:45:17 vpn01 sshd[20852]: Failed password for invalid user ts3srv from 120.131.13.186 port 57256 ssh2 ... |
2020-10-03 23:18:58 |
| 62.109.6.214 | attackspam | /HNAP1/ |
2020-10-03 23:14:19 |
| 84.19.90.117 | attack | srvr3: (mod_security) mod_security (id:920350) triggered by 84.19.90.117 (CZ/-/90-117.eri.cz): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/10/02 22:38:43 [error] 70998#0: *409 [client 84.19.90.117] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "16016711236.848210"] [ref "o0,14v21,14"], client: 84.19.90.117, [redacted] request: "GET / HTTP/1.1" [redacted] |
2020-10-03 23:45:20 |
| 117.50.93.75 | attackbots | " " |
2020-10-03 22:58:47 |
| 176.31.255.63 | attackspam | Invalid user usuario2 from 176.31.255.63 port 53056 |
2020-10-03 23:37:35 |
| 91.222.236.216 | attackspambots | (mod_security) mod_security (id:210730) triggered by 91.222.236.216 (RU/Russia/-): 5 in the last 300 secs |
2020-10-03 23:44:40 |
| 79.135.73.141 | attackspam | Oct 3 15:14:51 * sshd[15901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.135.73.141 Oct 3 15:14:54 * sshd[15901]: Failed password for invalid user ircd from 79.135.73.141 port 53515 ssh2 |
2020-10-03 23:26:55 |
| 179.97.52.197 | attack | 445/tcp 445/tcp 445/tcp [2020-09-13/10-02]3pkt |
2020-10-03 23:20:52 |
| 182.140.235.149 | attackbotsspam | " " |
2020-10-03 23:18:00 |