City: unknown
Region: unknown
Country: Korea Republic of
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.239.58.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47425
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;58.239.58.99. IN A
;; AUTHORITY SECTION:
. 451 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022101002 1800 900 604800 86400
;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 11 19:04:46 CST 2022
;; MSG SIZE rcvd: 105Host 99.58.239.58.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 99.58.239.58.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 114.216.199.51 | attack | Aug 21 18:02:07 our-server-hostname postfix/smtpd[31335]: connect from unknown[114.216.199.51] Aug x@x Aug 21 18:02:10 our-server-hostname postfix/smtpd[31335]: lost connection after RCPT from unknown[114.216.199.51] Aug 21 18:02:10 our-server-hostname postfix/smtpd[31335]: disconnect from unknown[114.216.199.51] Aug 21 18:02:10 our-server-hostname postfix/smtpd[31330]: connect from unknown[114.216.199.51] Aug x@x .... truncated .... Aug 21 18:02:07 our-server-hostname postfix/smtpd[31335]: connect from unknown[114.216.199.51] Aug x@x Aug 21 18:02:10 our-server-hostname postfix/smtpd[31335]: lost connection after RCPT from unknown[114.216.199.51] Aug 21 18:02:10 our-server-hostname postfix/smtpd[31335]: disconnect from unknown[114.216.199.51] Aug 21 18:02:10 our-server-hostname postfix/smtpd[31330]: connect from unknown[114.216.199.51] Aug x@x Aug 21 18:02:12 our-server-hostname postfix/smtpd[31330]: lost connection after RCPT from unknown[114.216.199.51] Aug 21 18:02........ ------------------------------- |
2020-08-22 00:07:23 |
| 91.144.142.125 | attackbots | Dovecot Invalid User Login Attempt. |
2020-08-21 23:25:03 |
| 46.105.95.84 | attackspambots | Aug 21 14:55:16 marvibiene sshd[18670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.95.84 user=root Aug 21 14:55:19 marvibiene sshd[18670]: Failed password for root from 46.105.95.84 port 57858 ssh2 Aug 21 15:04:02 marvibiene sshd[18738]: Invalid user charly from 46.105.95.84 port 33752 |
2020-08-21 23:29:44 |
| 213.166.73.28 | attack | Trying to access wordpress plugins |
2020-08-21 23:38:06 |
| 157.245.252.154 | attackbots | Aug 21 14:53:46 l02a sshd[5777]: Invalid user log from 157.245.252.154 Aug 21 14:53:46 l02a sshd[5777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.252.154 Aug 21 14:53:46 l02a sshd[5777]: Invalid user log from 157.245.252.154 Aug 21 14:53:47 l02a sshd[5777]: Failed password for invalid user log from 157.245.252.154 port 53922 ssh2 |
2020-08-21 23:33:58 |
| 178.151.24.64 | attackspambots | srvr1: (mod_security) mod_security (id:942100) triggered by 178.151.24.64 (UA/-/64.24.151.178.triolan.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/21 12:04:14 [error] 482759#0: *840433 [client 178.151.24.64] ModSecurity: Access denied with code 406 (phase 2). [file "/etc/modsecurity.d/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [rev ""] [msg ""] [redacted] [severity "0"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [redacted] [uri "/forum/viewthread.php"] [unique_id "159801145439.810148"] [ref ""], client: 178.151.24.64, [redacted] request: "GET /forum/viewthread.php?thread_id=1122%29+OR+++%283404%3D3404 HTTP/1.1" [redacted] |
2020-08-22 00:04:39 |
| 111.93.235.74 | attack | Aug 21 17:38:39 pve1 sshd[25705]: Failed password for root from 111.93.235.74 port 3002 ssh2 ... |
2020-08-21 23:53:51 |
| 202.146.245.156 | attackspambots | srvr1: (mod_security) mod_security (id:942100) triggered by 202.146.245.156 (ID/-/DialupBdg245-156.centrin.net.id): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/21 12:04:13 [error] 482759#0: *840430 [client 202.146.245.156] ModSecurity: Access denied with code 406 (phase 2). [file "/etc/modsecurity.d/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [rev ""] [msg ""] [redacted] [severity "0"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [redacted] [uri "/forum/viewthread.php"] [unique_id "15980114535.771001"] [ref ""], client: 202.146.245.156, [redacted] request: "GET /forum/viewthread.php?thread_id=1122%29+OR+++%287232%3D0 HTTP/1.1" [redacted] |
2020-08-22 00:03:38 |
| 222.186.180.17 | attackbots | 2020-08-21T17:49:01.666643vps773228.ovh.net sshd[28824]: Failed password for root from 222.186.180.17 port 46158 ssh2 2020-08-21T17:49:04.503076vps773228.ovh.net sshd[28824]: Failed password for root from 222.186.180.17 port 46158 ssh2 2020-08-21T17:49:07.751061vps773228.ovh.net sshd[28824]: Failed password for root from 222.186.180.17 port 46158 ssh2 2020-08-21T17:49:11.411096vps773228.ovh.net sshd[28824]: Failed password for root from 222.186.180.17 port 46158 ssh2 2020-08-21T17:49:13.951717vps773228.ovh.net sshd[28824]: Failed password for root from 222.186.180.17 port 46158 ssh2 ... |
2020-08-21 23:54:39 |
| 146.88.240.4 | attackbotsspam |
|
2020-08-21 23:43:45 |
| 139.199.14.128 | attack | Aug 21 14:01:37 marvibiene sshd[4846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128 Aug 21 14:01:39 marvibiene sshd[4846]: Failed password for invalid user date from 139.199.14.128 port 44970 ssh2 Aug 21 14:04:26 marvibiene sshd[5005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.14.128 |
2020-08-21 23:55:52 |
| 106.12.51.10 | attack | 2020-08-21T13:34:54.344368shield sshd\[24253\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.51.10 user=root 2020-08-21T13:34:55.756399shield sshd\[24253\]: Failed password for root from 106.12.51.10 port 42792 ssh2 2020-08-21T13:39:02.467171shield sshd\[25105\]: Invalid user psh from 106.12.51.10 port 56254 2020-08-21T13:39:02.475874shield sshd\[25105\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.51.10 2020-08-21T13:39:04.600421shield sshd\[25105\]: Failed password for invalid user psh from 106.12.51.10 port 56254 ssh2 |
2020-08-21 23:53:05 |
| 68.183.203.30 | attackspambots | Aug 21 13:09:43 onepixel sshd[2297634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.203.30 Aug 21 13:09:43 onepixel sshd[2297634]: Invalid user frappe from 68.183.203.30 port 47994 Aug 21 13:09:45 onepixel sshd[2297634]: Failed password for invalid user frappe from 68.183.203.30 port 47994 ssh2 Aug 21 13:14:39 onepixel sshd[2300385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.203.30 user=root Aug 21 13:14:40 onepixel sshd[2300385]: Failed password for root from 68.183.203.30 port 47394 ssh2 |
2020-08-21 23:25:24 |
| 88.156.122.72 | attackbotsspam | Aug 21 14:54:44 PorscheCustomer sshd[32538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.156.122.72 Aug 21 14:54:45 PorscheCustomer sshd[32538]: Failed password for invalid user rcg from 88.156.122.72 port 45974 ssh2 Aug 21 15:01:58 PorscheCustomer sshd[312]: Failed password for root from 88.156.122.72 port 56246 ssh2 ... |
2020-08-21 23:44:24 |
| 185.176.27.118 | attackspambots | [H1.VM4] Blocked by UFW |
2020-08-21 23:33:31 |