City: Jersey City
Region: New Jersey
Country: United States
Internet Service Provider: Verizon
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 100.1.3.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65364
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;100.1.3.2. IN A
;; AUTHORITY SECTION:
. 492 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023111502 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 16 12:35:23 CST 2023
;; MSG SIZE rcvd: 1022.3.1.100.in-addr.arpa domain name pointer pool-100-1-3-2.nwrknj.fios.verizon.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
2.3.1.100.in-addr.arpa name = pool-100-1-3-2.nwrknj.fios.verizon.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 2a02:908:520:80e0:6940:6b46:23b9:8189 | attackbots | [Sat Dec 14 16:31:14.040888 2019] [proxy_fcgi:error] [pid 3715] [client 2a02:908:520:80e0:6940:6b46:23b9:8189:38120] AH01071: Got error 'Primary script unknown' [Sat Dec 14 16:31:46.038129 2019] [proxy_fcgi:error] [pid 1032] [client 2a02:908:520:80e0:6940:6b46:23b9:8189:38316] AH01071: Got error 'Primary script unknown' [Sat Dec 14 16:32:18.036682 2019] [proxy_fcgi:error] [pid 30234] [client 2a02:908:520:80e0:6940:6b46:23b9:8189:38522] AH01071: Got error 'Primary script unknown' [Sat Dec 14 16:32:50.060897 2019] [proxy_fcgi:error] [pid 30349] [client 2a02:908:520:80e0:6940:6b46:23b9:8189:38710] AH01071: Got error 'Primary script unknown' [Sat Dec 14 16:33:22.036750 2019] [proxy_fcgi:error] [pid 28521] [client 2a02:908:520:80e0:6940:6b46:23b9:8189:38906] AH01071: Got error 'Primary script unknown' ... |
2019-12-15 01:22:23 |
| 173.249.50.39 | attack | GET /wp-admin/admin-post.php |
2019-12-15 01:35:23 |
| 78.46.48.98 | attackbots | GET /wp-admin/user/profile.php |
2019-12-15 01:38:08 |
| 106.12.188.252 | attackspam | Dec 14 11:42:19 server sshd\[26831\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.188.252 Dec 14 11:42:22 server sshd\[26831\]: Failed password for invalid user temp from 106.12.188.252 port 57408 ssh2 Dec 14 17:43:55 server sshd\[3980\]: Invalid user sysadmin from 106.12.188.252 Dec 14 17:43:55 server sshd\[3980\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.188.252 Dec 14 17:43:57 server sshd\[3980\]: Failed password for invalid user sysadmin from 106.12.188.252 port 36290 ssh2 ... |
2019-12-15 01:25:12 |
| 103.92.24.248 | attackspam | Dec 14 16:15:14 ns382633 sshd\[11108\]: Invalid user imaptest from 103.92.24.248 port 47786 Dec 14 16:15:14 ns382633 sshd\[11108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.92.24.248 Dec 14 16:15:16 ns382633 sshd\[11108\]: Failed password for invalid user imaptest from 103.92.24.248 port 47786 ssh2 Dec 14 16:22:13 ns382633 sshd\[16905\]: Invalid user guidance from 103.92.24.248 port 42642 Dec 14 16:22:13 ns382633 sshd\[16905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.92.24.248 |
2019-12-15 01:10:12 |
| 185.220.101.5 | attackbots | Automatic report - Banned IP Access |
2019-12-15 01:32:38 |
| 185.220.101.35 | attackspambots | GET /wallet.dat |
2019-12-15 01:32:08 |
| 82.159.138.57 | attackbots | Dec 14 11:38:01 ny01 sshd[17613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.159.138.57 Dec 14 11:38:03 ny01 sshd[17613]: Failed password for invalid user kun from 82.159.138.57 port 21276 ssh2 Dec 14 11:43:40 ny01 sshd[18145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.159.138.57 |
2019-12-15 01:14:22 |
| 165.227.99.2 | attackspam | HEAD /wp-admin/ |
2019-12-15 01:46:37 |
| 68.183.234.160 | attackbots | (mod_security) mod_security (id:920170) triggered by 68.183.234.160 (SG/Singapore/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Dec 14 10:50:32.575118 2019] [:error] [pid 65819:tid 47884326278912] [client 68.183.234.160:14224] [client 68.183.234.160] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^0?$" against "REQUEST_HEADERS:Content-Length" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "143"] [id "920170"] [rev "1"] [msg "GET or HEAD Request with Body Content."] [data "19058"] [severity "CRITICAL"] [ver "OWASP_CRS/3.0.0"] [maturity "9"] [accuracy "9"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "cjthedj97.me"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "XfUEyDP6KGgpsQxizTF8PgAAAJc"] |
2019-12-15 01:39:21 |
| 51.77.245.46 | attackspambots | Dec 14 17:57:42 tux-35-217 sshd\[13051\]: Invalid user fenghuang from 51.77.245.46 port 48632 Dec 14 17:57:42 tux-35-217 sshd\[13051\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.245.46 Dec 14 17:57:44 tux-35-217 sshd\[13051\]: Failed password for invalid user fenghuang from 51.77.245.46 port 48632 ssh2 Dec 14 18:03:03 tux-35-217 sshd\[13130\]: Invalid user login from 51.77.245.46 port 56152 Dec 14 18:03:03 tux-35-217 sshd\[13130\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.245.46 ... |
2019-12-15 01:09:40 |
| 186.71.57.18 | attack | Dec 14 06:47:52 hpm sshd\[460\]: Invalid user granheim from 186.71.57.18 Dec 14 06:47:52 hpm sshd\[460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.71.57.18 Dec 14 06:47:54 hpm sshd\[460\]: Failed password for invalid user granheim from 186.71.57.18 port 35630 ssh2 Dec 14 06:54:19 hpm sshd\[1074\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.71.57.18 user=lp Dec 14 06:54:22 hpm sshd\[1074\]: Failed password for lp from 186.71.57.18 port 43312 ssh2 |
2019-12-15 01:10:52 |
| 49.232.97.184 | attackbotsspam | Dec 14 06:56:44 web1 sshd\[19013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.97.184 user=root Dec 14 06:56:45 web1 sshd\[19013\]: Failed password for root from 49.232.97.184 port 52522 ssh2 Dec 14 07:02:51 web1 sshd\[19637\]: Invalid user web from 49.232.97.184 Dec 14 07:02:51 web1 sshd\[19637\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.97.184 Dec 14 07:02:52 web1 sshd\[19637\]: Failed password for invalid user web from 49.232.97.184 port 36834 ssh2 |
2019-12-15 01:05:58 |
| 2607:5300:60:6133:: | attackbotsspam | C1,WP GET /suche/wp-login.php |
2019-12-15 01:42:29 |
| 220.248.17.34 | attack | Dec 14 17:53:29 vpn01 sshd[26359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.248.17.34 Dec 14 17:53:32 vpn01 sshd[26359]: Failed password for invalid user 66666666 from 220.248.17.34 port 33843 ssh2 ... |
2019-12-15 01:18:42 |