City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 53.115.150.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49990
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;53.115.150.2. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012400 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 16:07:25 CST 2025
;; MSG SIZE rcvd: 105Host 2.150.115.53.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 2.150.115.53.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 90.148.221.175 | attackspambots | 1599324083 - 09/05/2020 18:41:23 Host: 90.148.221.175/90.148.221.175 Port: 445 TCP Blocked |
2020-09-06 19:33:35 |
| 167.62.98.89 | attackbots | Honeypot attack, port: 445, PTR: r167-62-98-89.dialup.adsl.anteldata.net.uy. |
2020-09-06 19:27:14 |
| 179.179.26.9 | attackbots | Sep 6 07:19:09 sshgateway sshd\[10460\]: Invalid user anonymous from 179.179.26.9 Sep 6 07:19:09 sshgateway sshd\[10460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.179.26.9 Sep 6 07:19:11 sshgateway sshd\[10460\]: Failed password for invalid user anonymous from 179.179.26.9 port 39548 ssh2 |
2020-09-06 19:38:22 |
| 75.134.150.171 | attackspambots | Sep 5 18:39:57 server2 sshd[15731]: Invalid user admin from 75.134.150.171 Sep 5 18:39:59 server2 sshd[15731]: Failed password for invalid user admin from 75.134.150.171 port 56563 ssh2 Sep 5 18:39:59 server2 sshd[15731]: Received disconnect from 75.134.150.171: 11: Bye Bye [preauth] Sep 5 18:40:00 server2 sshd[15749]: Invalid user admin from 75.134.150.171 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=75.134.150.171 |
2020-09-06 19:46:18 |
| 46.229.168.143 | attackspam | [Sat Sep 05 23:41:14.031663 2020] [:error] [pid 23059:tid 140327520270080] [client 46.229.168.143:45324] [client 46.229.168.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "((?:[~!@#\\\\$%\\\\^&\\\\*\\\\(\\\\)\\\\-\\\\+=\\\\{\\\\}\\\\[\\\\]\\\\|:;\"'\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98`<>][^~!@#\\\\$%\\\\^&\\\\*\\\\(\\\\)\\\\-\\\\+=\\\\{\\\\}\\\\[\\\\]\\\\|:;\"'\\xc2\\xb4\\xe2\\x80\\x99\\xe2\\x80\\x98`<>]*?){12})" at ARGS:id. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "1255"] [id "942430"] [msg "Restricted SQL Character Anomaly Detection (args): # of special characters exceeded (12)"] [data "Matched Data: :prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal- found within ARGS:id: 555555659:prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-26-april-02-mei-2017"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi
... |
2020-09-06 19:41:36 |
| 59.53.45.39 | attackspambots | Email rejected due to spam filtering |
2020-09-06 19:49:20 |
| 196.2.14.137 | attack | Automatic report - Banned IP Access |
2020-09-06 19:12:44 |
| 117.240.89.18 | attackbots | SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2020-09-06 19:45:15 |
| 66.115.173.74 | attack | VoIP Brute Force - 66.115.173.74 - Auto Report ... |
2020-09-06 19:46:46 |
| 222.186.173.226 | attackspambots | Sep 6 13:08:40 nextcloud sshd\[11011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.226 user=root Sep 6 13:08:41 nextcloud sshd\[11011\]: Failed password for root from 222.186.173.226 port 21074 ssh2 Sep 6 13:08:58 nextcloud sshd\[11405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.226 user=root |
2020-09-06 19:18:49 |
| 109.74.206.144 | attackbotsspam | 1599375390 - 09/06/2020 08:56:30 Host: 109.74.206.144/109.74.206.144 Port: 8080 TCP Blocked |
2020-09-06 19:35:11 |
| 182.61.12.58 | attackbots | firewall-block, port(s): 17160/tcp |
2020-09-06 19:44:42 |
| 151.236.59.142 | attackbots | [N10.H2.VM2] Port Scanner Detected Blocked by UFW |
2020-09-06 19:26:08 |
| 178.67.193.255 | attackspam | 1599324063 - 09/05/2020 18:41:03 Host: 178.67.193.255/178.67.193.255 Port: 445 TCP Blocked |
2020-09-06 19:45:50 |
| 192.144.188.237 | attack | 192.144.188.237 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 5 20:16:15 server4 sshd[20725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.68.231 user=root Sep 5 20:15:07 server4 sshd[19931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.188.237 user=root Sep 5 20:15:10 server4 sshd[19931]: Failed password for root from 192.144.188.237 port 37538 ssh2 Sep 5 20:15:11 server4 sshd[19940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.67.204.137 user=root Sep 5 20:15:12 server4 sshd[19940]: Failed password for root from 111.67.204.137 port 37502 ssh2 Sep 5 20:15:58 server4 sshd[20280]: Failed password for root from 165.227.66.224 port 50118 ssh2 IP Addresses Blocked: 81.68.68.231 (CN/China/-) |
2020-09-06 19:11:41 |