City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 70.125.126.103
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41117
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;70.125.126.103. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013000 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 18:07:43 CST 2025
;; MSG SIZE rcvd: 107103.126.125.70.in-addr.arpa domain name pointer syn-070-125-126-103.biz.spectrum.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
103.126.125.70.in-addr.arpa name = syn-070-125-126-103.biz.spectrum.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 209.141.34.104 | attack | srvr2: (mod_security) mod_security (id:920350) triggered by 209.141.34.104 (US/-/-): 1 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/09/20 21:45:24 [error] 7235#0: *49761 [client 209.141.34.104] ModSecurity: Access denied with code 406 (phase 2). Matched "Operator `Rx' with parameter `^[\d.:]+$' against variable `REQUEST_HEADERS:Host' [redacted] [file "/etc/modsecurity.d/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "718"] [id "920350"] [rev ""] [msg "Host header is a numeric IP address"] [redacted] [severity "4"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [redacted] [uri "/"] [unique_id "160063112458.029310"] [ref "o0,12v21,12"], client: 209.141.34.104, [redacted] request: "GET / HTTP/1.1" [redacted] |
2020-09-21 04:03:06 |
| 101.99.20.59 | attack | 3x Failed Password |
2020-09-21 04:04:02 |
| 223.197.151.55 | attackbots | (sshd) Failed SSH login from 223.197.151.55 (HK/Hong Kong/223-197-151-55.static.imsbiz.com): 5 in the last 3600 secs |
2020-09-21 04:08:31 |
| 193.112.108.11 | attack | Sep 20 17:11:41 ip-172-31-16-56 sshd\[23518\]: Invalid user admin from 193.112.108.11\ Sep 20 17:11:43 ip-172-31-16-56 sshd\[23518\]: Failed password for invalid user admin from 193.112.108.11 port 57426 ssh2\ Sep 20 17:16:41 ip-172-31-16-56 sshd\[23550\]: Invalid user ftp4 from 193.112.108.11\ Sep 20 17:16:43 ip-172-31-16-56 sshd\[23550\]: Failed password for invalid user ftp4 from 193.112.108.11 port 54588 ssh2\ Sep 20 17:21:35 ip-172-31-16-56 sshd\[23576\]: Failed password for root from 193.112.108.11 port 51736 ssh2\ |
2020-09-21 04:08:11 |
| 212.70.149.52 | attackspam | 2020-09-20T21:47:41.297207www postfix/smtpd[20574]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2020-09-20T21:48:05.477857www postfix/smtpd[20574]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2020-09-20T21:48:31.462773www postfix/smtpd[20574]: warning: unknown[212.70.149.52]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-09-21 03:51:50 |
| 128.199.80.164 | attack | 'Fail2Ban' |
2020-09-21 03:50:41 |
| 1.171.98.88 | attackbots | Sep 20 19:04:01 vps639187 sshd\[29853\]: Invalid user cablecom from 1.171.98.88 port 38513 Sep 20 19:04:02 vps639187 sshd\[29853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.171.98.88 Sep 20 19:04:04 vps639187 sshd\[29853\]: Failed password for invalid user cablecom from 1.171.98.88 port 38513 ssh2 ... |
2020-09-21 04:06:16 |
| 180.151.9.198 | attackspam | Sep 20 21:14:43 pornomens sshd\[15323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.151.9.198 user=root Sep 20 21:14:45 pornomens sshd\[15323\]: Failed password for root from 180.151.9.198 port 52954 ssh2 Sep 20 21:15:25 pornomens sshd\[15332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.151.9.198 user=root ... |
2020-09-21 04:12:30 |
| 162.243.128.109 | attackspam | Found on CINS badguys / proto=6 . srcport=52816 . dstport=5094 . (2348) |
2020-09-21 04:15:04 |
| 122.225.203.162 | attack | 2020-09-20T14:49:28.3124231495-001 sshd[36078]: Invalid user weblogic from 122.225.203.162 port 43486 2020-09-20T14:49:28.3159281495-001 sshd[36078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.225.203.162 2020-09-20T14:49:28.3124231495-001 sshd[36078]: Invalid user weblogic from 122.225.203.162 port 43486 2020-09-20T14:49:30.2558671495-001 sshd[36078]: Failed password for invalid user weblogic from 122.225.203.162 port 43486 ssh2 2020-09-20T14:50:57.5593481495-001 sshd[36110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.225.203.162 user=root 2020-09-20T14:50:59.3838091495-001 sshd[36110]: Failed password for root from 122.225.203.162 port 52042 ssh2 ... |
2020-09-21 03:55:03 |
| 50.31.87.253 | attackspambots | Port scan denied |
2020-09-21 04:17:28 |
| 106.12.16.2 | attackbotsspam | 2020-09-21T00:37:27.831113hostname sshd[12680]: Invalid user ts from 106.12.16.2 port 45302 2020-09-21T00:37:30.256574hostname sshd[12680]: Failed password for invalid user ts from 106.12.16.2 port 45302 ssh2 2020-09-21T00:41:14.110039hostname sshd[14172]: Invalid user odoo9 from 106.12.16.2 port 47004 ... |
2020-09-21 03:57:06 |
| 103.146.202.150 | attackspam | 103.146.202.150 - - [20/Sep/2020:18:03:58 +0100] "POST /wp-login.php HTTP/1.1" 401 3568 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.146.202.150 - - [20/Sep/2020:18:04:01 +0100] "POST /wp-login.php HTTP/1.1" 401 3568 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.146.202.150 - - [20/Sep/2020:18:04:02 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-21 04:09:36 |
| 106.12.186.130 | attackspambots | Invalid user ubuntu from 106.12.186.130 port 48848 |
2020-09-21 04:16:11 |
| 216.126.239.38 | attackspambots | k+ssh-bruteforce |
2020-09-21 04:02:01 |