City: unknown
Region: unknown
Country: Moldova Republic of
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 91.242.82.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3162
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;91.242.82.1. IN A
;; AUTHORITY SECTION:
. 169 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021300 1800 900 604800 86400
;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 18:31:50 CST 2022
;; MSG SIZE rcvd: 104Host 1.82.242.91.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 1.82.242.91.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 78.186.118.47 | attackspam | firewall-block, port(s): 23/tcp |
2019-07-29 12:50:48 |
| 45.7.228.12 | attackbots | Jul 29 04:36:09 dev0-dcde-rnet sshd[15840]: Failed password for root from 45.7.228.12 port 51883 ssh2 Jul 29 04:41:42 dev0-dcde-rnet sshd[15849]: Failed password for root from 45.7.228.12 port 48643 ssh2 |
2019-07-29 11:55:21 |
| 106.52.202.59 | attackspam | Jul 29 03:28:02 mail sshd\[28433\]: Failed password for invalid user qwaszx!@ from 106.52.202.59 port 42482 ssh2 Jul 29 03:43:49 mail sshd\[28774\]: Invalid user ln5203344\*\*\* from 106.52.202.59 port 49632 ... |
2019-07-29 12:23:48 |
| 129.226.61.209 | attack | DATE:2019-07-29 05:37:43, IP:129.226.61.209, PORT:ssh SSH brute force auth (thor) |
2019-07-29 12:46:19 |
| 54.38.242.80 | attackspam | Jul 29 03:38:31 minden010 sshd[23518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.242.80 Jul 29 03:38:33 minden010 sshd[23518]: Failed password for invalid user ykv from 54.38.242.80 port 49134 ssh2 Jul 29 03:42:34 minden010 sshd[25080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.242.80 ... |
2019-07-29 11:46:07 |
| 203.98.96.180 | attack | SMB Server BruteForce Attack |
2019-07-29 12:49:24 |
| 185.234.219.57 | attackspam | Jul 29 05:22:38 relay postfix/smtpd\[13539\]: warning: unknown\[185.234.219.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 29 05:24:37 relay postfix/smtpd\[27819\]: warning: unknown\[185.234.219.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 29 05:26:34 relay postfix/smtpd\[13539\]: warning: unknown\[185.234.219.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 29 05:28:30 relay postfix/smtpd\[27819\]: warning: unknown\[185.234.219.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 29 05:30:37 relay postfix/smtpd\[13539\]: warning: unknown\[185.234.219.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-07-29 11:39:48 |
| 112.27.129.78 | attack | 'IP reached maximum auth failures for a one day block' |
2019-07-29 12:21:21 |
| 43.240.248.82 | attackspambots | [SunJul2823:21:56.6528632019][:error][pid21833:tid47921135425280][client43.240.248.82:20699][client43.240.248.82]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"/wp-config.php"atREQUEST_FILENAME.[file"/usr/local/apache.ea3/conf/modsec_rules/99_asl_jitp.conf"][line"3440"][id"381206"][rev"1"][msg"Atomicorp.comWAFRules-VirtualJustInTimePatch:AccesstoWordPressconfigurationfileblocked"][data"/wp-config.php"][severity"CRITICAL"][hostname"148.251.104.89"][uri"/wp-config.php"][unique_id"XT4R9FzgGqBeowOMPqe5zgAAAJY"][SunJul2823:22:29.0328912019][:error][pid9094:tid47921025808128][client43.240.248.82:24834][client43.240.248.82]ModSecurity:Accessdeniedwithcode404\(phase2\).Patternmatch"\(\?:/images/stories/\|/components/com_smartformer/files/\|/uploaded_files/user/\|uploads/job-manager-uploads/\).\*\\\\\\\\.php"atREQUEST_URI.[file"/usr/local/apache.ea3/conf/modsec_rules/50_asl_rootkits.conf"][line"71"][id"318812"][rev"2"][msg"Atomicorp.comWAFRules:PossibleAttempttoAccessunauth |
2019-07-29 11:45:18 |
| 40.74.92.146 | attackbots | 2019-07-28T21:20:31.881492abusebot-6.cloudsearch.cf sshd\[3988\]: Invalid user kaikai from 40.74.92.146 port 53594 |
2019-07-29 12:37:23 |
| 121.201.123.252 | attack | Jul 28 17:19:55 Tower sshd[43308]: Connection from 121.201.123.252 port 41782 on 192.168.10.220 port 22 Jul 28 17:19:57 Tower sshd[43308]: Failed password for root from 121.201.123.252 port 41782 ssh2 Jul 28 17:19:58 Tower sshd[43308]: Received disconnect from 121.201.123.252 port 41782:11: Bye Bye [preauth] Jul 28 17:19:58 Tower sshd[43308]: Disconnected from authenticating user root 121.201.123.252 port 41782 [preauth] |
2019-07-29 12:40:14 |
| 195.154.223.226 | attack | SSH invalid-user multiple login attempts |
2019-07-29 12:28:29 |
| 69.162.114.102 | attack | Jul 28 18:08:52 TORMINT sshd\[19148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.162.114.102 user=root Jul 28 18:08:54 TORMINT sshd\[19148\]: Failed password for root from 69.162.114.102 port 55364 ssh2 Jul 28 18:13:03 TORMINT sshd\[19397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.162.114.102 user=root ... |
2019-07-29 11:48:00 |
| 177.42.2.246 | attackspam | Brute-force attack to non-existent web resources |
2019-07-29 11:44:56 |
| 189.208.166.25 | attack | firewall-block, port(s): 23/tcp |
2019-07-29 12:43:51 |