City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 50.94.155.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64557
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;50.94.155.208. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020400 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 23:19:11 CST 2025
;; MSG SIZE rcvd: 106Host 208.155.94.50.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 208.155.94.50.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 162.243.139.158 | attackspam | May 13 12:35:56 IngegnereFirenze sshd[3594]: Did not receive identification string from 162.243.139.158 port 50958 ... |
2020-05-14 00:28:45 |
| 152.32.186.160 | attackbots | Invalid user brady from 152.32.186.160 port 49148 |
2020-05-14 00:50:33 |
| 113.255.77.207 | attackbots | May 13 16:30:09 home sshd[8586]: Failed password for root from 113.255.77.207 port 53650 ssh2 May 13 16:31:59 home sshd[8950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.255.77.207 May 13 16:32:01 home sshd[8950]: Failed password for invalid user ubuntu from 113.255.77.207 port 43330 ssh2 ... |
2020-05-14 00:20:25 |
| 186.232.119.84 | attackbotsspam | May 13 18:03:51 haigwepa sshd[11917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.232.119.84 May 13 18:03:52 haigwepa sshd[11917]: Failed password for invalid user postgres from 186.232.119.84 port 38588 ssh2 ... |
2020-05-14 00:22:05 |
| 67.26.115.254 | attackbots | Microsoft Edge App-v vbs command |
2020-05-14 00:51:30 |
| 218.92.0.203 | attack | 2020-05-13T12:07:35.881429xentho-1 sshd[384147]: Failed password for root from 218.92.0.203 port 19636 ssh2 2020-05-13T12:07:34.148062xentho-1 sshd[384147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.203 user=root 2020-05-13T12:07:35.881429xentho-1 sshd[384147]: Failed password for root from 218.92.0.203 port 19636 ssh2 2020-05-13T12:07:39.714280xentho-1 sshd[384147]: Failed password for root from 218.92.0.203 port 19636 ssh2 2020-05-13T12:07:34.148062xentho-1 sshd[384147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.203 user=root 2020-05-13T12:07:35.881429xentho-1 sshd[384147]: Failed password for root from 218.92.0.203 port 19636 ssh2 2020-05-13T12:07:39.714280xentho-1 sshd[384147]: Failed password for root from 218.92.0.203 port 19636 ssh2 2020-05-13T12:07:42.882324xentho-1 sshd[384147]: Failed password for root from 218.92.0.203 port 19636 ssh2 2020-05-13T12:09:27.247566xent ... |
2020-05-14 00:19:05 |
| 101.50.91.214 | attackbotsspam | ... |
2020-05-14 00:35:53 |
| 112.90.197.66 | attack | TCP Port Scanning |
2020-05-14 00:30:33 |
| 36.73.59.153 | attackbots | May 13 22:36:00 pihole sshd[13342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.73.59.153 ... |
2020-05-14 00:25:37 |
| 1.192.121.238 | attackspambots | May 13 14:55:25 vps sshd[518477]: Failed password for invalid user ddd from 1.192.121.238 port 47918 ssh2 May 13 14:57:50 vps sshd[527363]: Invalid user lg from 1.192.121.238 port 60628 May 13 14:57:50 vps sshd[527363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.192.121.238 May 13 14:57:52 vps sshd[527363]: Failed password for invalid user lg from 1.192.121.238 port 60628 ssh2 May 13 15:00:02 vps sshd[535676]: Invalid user gaurav from 1.192.121.238 port 45115 ... |
2020-05-14 00:53:03 |
| 58.87.70.210 | attackbots | Invalid user user from 58.87.70.210 port 36988 |
2020-05-14 00:48:54 |
| 178.62.36.116 | attackbots | May 13 15:36:04 santamaria sshd\[19549\]: Invalid user spark from 178.62.36.116 May 13 15:36:04 santamaria sshd\[19549\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.36.116 May 13 15:36:06 santamaria sshd\[19549\]: Failed password for invalid user spark from 178.62.36.116 port 49304 ssh2 ... |
2020-05-14 01:00:52 |
| 122.51.232.240 | attack | May 13 20:08:25 webhost01 sshd[27094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.232.240 May 13 20:08:27 webhost01 sshd[27094]: Failed password for invalid user ubuntu from 122.51.232.240 port 40386 ssh2 ... |
2020-05-14 00:33:30 |
| 178.154.200.134 | attackbotsspam | [Wed May 13 23:23:07.945188 2020] [:error] [pid 24732:tid 139802997421824] [client 178.154.200.134:44780] [client 178.154.200.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "Xrwe63jj7M0BvzeC6DxYngAAAe8"] ... |
2020-05-14 00:56:01 |
| 122.51.178.207 | attackspam | May 13 14:34:13 v22018086721571380 sshd[24964]: Failed password for invalid user restart from 122.51.178.207 port 37716 ssh2 |
2020-05-14 00:45:43 |