City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.102.129.10
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23659
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.102.129.10. IN A
;; AUTHORITY SECTION:
. 129 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022051801 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 19 04:13:16 CST 2022
;; MSG SIZE rcvd: 10710.129.102.104.in-addr.arpa domain name pointer a104-102-129-10.deploy.static.akamaitechnologies.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
10.129.102.104.in-addr.arpa name = a104-102-129-10.deploy.static.akamaitechnologies.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 117.81.55.171 | attackspam | Unauthorised access (Mar 27) SRC=117.81.55.171 LEN=40 TTL=52 ID=4443 TCP DPT=8080 WINDOW=38968 SYN Unauthorised access (Mar 26) SRC=117.81.55.171 LEN=40 TTL=52 ID=45183 TCP DPT=8080 WINDOW=38968 SYN Unauthorised access (Mar 26) SRC=117.81.55.171 LEN=40 TTL=52 ID=20201 TCP DPT=8080 WINDOW=57891 SYN |
2020-03-28 05:20:45 |
| 196.218.125.106 | attackspam | Automatic report - Port Scan Attack |
2020-03-28 04:52:01 |
| 49.234.124.167 | attackbots | Mar 28 01:38:58 itv-usvr-01 sshd[5303]: Invalid user who from 49.234.124.167 Mar 28 01:38:58 itv-usvr-01 sshd[5303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.124.167 Mar 28 01:38:58 itv-usvr-01 sshd[5303]: Invalid user who from 49.234.124.167 Mar 28 01:39:00 itv-usvr-01 sshd[5303]: Failed password for invalid user who from 49.234.124.167 port 34758 ssh2 Mar 28 01:48:26 itv-usvr-01 sshd[5841]: Invalid user hasida from 49.234.124.167 |
2020-03-28 05:05:56 |
| 60.12.221.84 | attackbots | Mar 27 20:42:38 mailserver sshd\[3200\]: Invalid user bg from 60.12.221.84 ... |
2020-03-28 04:54:07 |
| 103.80.36.34 | attack | Mar 27 22:42:51 pkdns2 sshd\[21692\]: Invalid user qqw from 103.80.36.34Mar 27 22:42:52 pkdns2 sshd\[21692\]: Failed password for invalid user qqw from 103.80.36.34 port 60944 ssh2Mar 27 22:46:29 pkdns2 sshd\[21893\]: Invalid user fxk from 103.80.36.34Mar 27 22:46:31 pkdns2 sshd\[21893\]: Failed password for invalid user fxk from 103.80.36.34 port 37564 ssh2Mar 27 22:50:06 pkdns2 sshd\[22114\]: Invalid user wrh from 103.80.36.34Mar 27 22:50:08 pkdns2 sshd\[22114\]: Failed password for invalid user wrh from 103.80.36.34 port 42424 ssh2 ... |
2020-03-28 04:50:15 |
| 104.41.167.130 | attackspambots | SSH login attempts. |
2020-03-28 05:12:08 |
| 52.79.100.99 | attack | [FriMar2713:25:53.9642252020][:error][pid20972:tid47557872432896][client52.79.100.99:63901][client52.79.100.99]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boot\\\\\\\\.ini\|web.config\)\\\\\\\\b\|\(\|\^\|\\\\\\\\.\\\\\\\\.\)/etc/\|/\\\\\\\\.\(\?:history\|bash_history\|sh_history\|env\)\$\)"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"211"][id"390709"][rev"30"][msg"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely"][data"/.env"][severity"CRITICAL"][hostname"filipponaldi.it"][uri"/.env"][unique_id"Xn3w0Y-lrQgzAb@hkaJjKAAAAQs"][FriMar2713:28:35.4206792020][:error][pid20773:tid47557861926656][client52.79.100.99:61065][client52.79.100.99]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boo |
2020-03-28 05:08:41 |
| 103.35.64.73 | attack | Mar 27 21:26:11 legacy sshd[31970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.35.64.73 Mar 27 21:26:12 legacy sshd[31970]: Failed password for invalid user vxd from 103.35.64.73 port 39178 ssh2 Mar 27 21:28:22 legacy sshd[32017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.35.64.73 ... |
2020-03-28 05:13:43 |
| 51.178.50.244 | attackspam | Mar 27 20:41:57 XXX sshd[49313]: Invalid user mzh from 51.178.50.244 port 53814 |
2020-03-28 05:11:18 |
| 189.112.228.153 | attackspam | Mar 27 22:10:39 rotator sshd\[12596\]: Invalid user wxs from 189.112.228.153Mar 27 22:10:40 rotator sshd\[12596\]: Failed password for invalid user wxs from 189.112.228.153 port 41887 ssh2Mar 27 22:14:54 rotator sshd\[12658\]: Invalid user joachim from 189.112.228.153Mar 27 22:14:57 rotator sshd\[12658\]: Failed password for invalid user joachim from 189.112.228.153 port 47791 ssh2Mar 27 22:19:03 rotator sshd\[13472\]: Invalid user scm from 189.112.228.153Mar 27 22:19:05 rotator sshd\[13472\]: Failed password for invalid user scm from 189.112.228.153 port 53695 ssh2 ... |
2020-03-28 05:24:47 |
| 220.133.25.84 | attack | 1585312113 - 03/27/2020 13:28:33 Host: 220.133.25.84/220.133.25.84 Port: 445 TCP Blocked |
2020-03-28 05:11:37 |
| 162.241.226.175 | attack | GET /blog/ |
2020-03-28 04:52:55 |
| 157.230.239.99 | attack | Automatic report BANNED IP |
2020-03-28 05:06:53 |
| 117.2.121.79 | attackbotsspam | SMB Server BruteForce Attack |
2020-03-28 05:24:14 |
| 78.186.183.93 | attack | Automatic report - Port Scan Attack |
2020-03-28 04:57:19 |