City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 6.2.237.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51084
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;6.2.237.242. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400
;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 22:22:51 CST 2025
;; MSG SIZE rcvd: 104Host 242.237.2.6.in-addr.arpa not found: 2(SERVFAIL)
server can't find 6.2.237.242.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.94.136.90 | attackspam | Oct 29 15:12:49 icinga sshd[12676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.94.136.90 Oct 29 15:12:51 icinga sshd[12676]: Failed password for invalid user fuckyou from 218.94.136.90 port 3241 ssh2 Oct 29 15:33:04 icinga sshd[30384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.94.136.90 ... |
2019-10-29 22:47:41 |
| 122.116.26.20 | attackbots | Port Scan |
2019-10-29 22:37:24 |
| 106.12.209.117 | attack | Oct 29 20:53:26 webhost01 sshd[7000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.209.117 Oct 29 20:53:27 webhost01 sshd[7000]: Failed password for invalid user urmila from 106.12.209.117 port 36086 ssh2 ... |
2019-10-29 22:31:44 |
| 106.3.130.53 | attack | Oct 29 13:47:03 localhost sshd\[28569\]: Invalid user kristian1 from 106.3.130.53 port 46172 Oct 29 13:47:03 localhost sshd\[28569\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.3.130.53 Oct 29 13:47:05 localhost sshd\[28569\]: Failed password for invalid user kristian1 from 106.3.130.53 port 46172 ssh2 |
2019-10-29 23:03:09 |
| 106.53.110.176 | attackspambots | $f2bV_matches |
2019-10-29 22:59:59 |
| 62.234.206.12 | attackspam | Oct 29 15:49:50 MK-Soft-VM7 sshd[17679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.206.12 Oct 29 15:49:52 MK-Soft-VM7 sshd[17679]: Failed password for invalid user dayshun from 62.234.206.12 port 57592 ssh2 ... |
2019-10-29 22:54:53 |
| 117.50.104.206 | attackbotsspam | Port Scan |
2019-10-29 22:48:07 |
| 104.168.220.187 | attack | Fail2Ban - SSH Bruteforce Attempt |
2019-10-29 22:54:10 |
| 219.92.16.81 | attack | Oct 29 10:57:55 firewall sshd[13184]: Invalid user render from 219.92.16.81 Oct 29 10:57:57 firewall sshd[13184]: Failed password for invalid user render from 219.92.16.81 port 52311 ssh2 Oct 29 11:03:08 firewall sshd[13299]: Invalid user teamspeak3 from 219.92.16.81 ... |
2019-10-29 22:34:58 |
| 159.224.220.209 | attackbots | Invalid user dev from 159.224.220.209 port 56020 |
2019-10-29 22:32:02 |
| 106.13.110.74 | attackbotsspam | Oct 29 15:17:52 legacy sshd[25785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.110.74 Oct 29 15:17:55 legacy sshd[25785]: Failed password for invalid user Boca-123 from 106.13.110.74 port 52134 ssh2 Oct 29 15:24:28 legacy sshd[25987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.110.74 ... |
2019-10-29 22:28:32 |
| 46.90.94.197 | attack | Port Scan |
2019-10-29 23:00:45 |
| 138.197.179.102 | attackspambots | Oct 29 04:15:40 tdfoods sshd\[26397\]: Invalid user kav from 138.197.179.102 Oct 29 04:15:40 tdfoods sshd\[26397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.179.102 Oct 29 04:15:42 tdfoods sshd\[26397\]: Failed password for invalid user kav from 138.197.179.102 port 36436 ssh2 Oct 29 04:19:47 tdfoods sshd\[26713\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.179.102 user=root Oct 29 04:19:49 tdfoods sshd\[26713\]: Failed password for root from 138.197.179.102 port 47492 ssh2 |
2019-10-29 22:29:50 |
| 77.10.146.94 | attackbots | Automatic report - Port Scan Attack |
2019-10-29 22:41:24 |
| 213.152.162.181 | attackspam | [TueOct2915:39:52.8374532019][:error][pid10489:tid47755546339072][client213.152.162.181:54760][client213.152.162.181]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)"][severity"CRITICAL"][hostname"safeoncloud.ch"][uri"/backup_2019.sql"][unique_id"XbhPOO5hYquHXhP23lyvswAAAE8"]\,referer:http://safeoncloud.ch/backup_2019.sql[TueOct2915:39:53.0567702019][:error][pid10499:tid47755466909440][client213.152.162.181:60124][client213.152.162.181]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisrulei |
2019-10-29 23:09:11 |