City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.19.100.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 590
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.19.100.57. IN A
;; AUTHORITY SECTION:
. 227 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022040201 1800 900 604800 86400
;; Query time: 48 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 03 05:19:13 CST 2022
;; MSG SIZE rcvd: 106Host 57.100.19.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 57.100.19.104.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 46.252.24.197 | attackspam | Apr 1 17:45:06 raspberrypi sshd\[9923\]: Failed password for root from 46.252.24.197 port 39896 ssh2Apr 1 17:51:04 raspberrypi sshd\[10635\]: Failed password for root from 46.252.24.197 port 36266 ssh2Apr 1 17:54:29 raspberrypi sshd\[10815\]: Failed password for root from 46.252.24.197 port 49744 ssh2 ... |
2020-04-02 04:06:14 |
| 91.230.153.121 | attack | Apr 1 21:44:42 debian-2gb-nbg1-2 kernel: \[8029329.161688\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=91.230.153.121 DST=195.201.40.59 LEN=40 TOS=0x10 PREC=0x60 TTL=245 ID=8711 PROTO=TCP SPT=40585 DPT=57165 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-04-02 04:24:37 |
| 45.133.99.16 | attack | Apr 1 22:16:45 mail.srvfarm.net postfix/smtpd[1436604]: warning: unknown[45.133.99.16]: SASL PLAIN authentication failed: Apr 1 22:16:45 mail.srvfarm.net postfix/smtpd[1436604]: lost connection after AUTH from unknown[45.133.99.16] Apr 1 22:16:50 mail.srvfarm.net postfix/smtpd[1438782]: lost connection after AUTH from unknown[45.133.99.16] Apr 1 22:16:54 mail.srvfarm.net postfix/smtpd[1436942]: lost connection after AUTH from unknown[45.133.99.16] Apr 1 22:16:57 mail.srvfarm.net postfix/smtpd[1438781]: lost connection after AUTH from unknown[45.133.99.16] |
2020-04-02 04:28:43 |
| 188.16.149.125 | attackspam | firewall-block, port(s): 23/tcp |
2020-04-02 04:37:59 |
| 119.41.207.176 | attackbotsspam | Brute Force |
2020-04-02 04:06:00 |
| 173.252.87.45 | attackbotsspam | [Wed Apr 01 19:51:15.867889 2020] [:error] [pid 13155:tid 140357682616064] [client 173.252.87.45:63876] [client 173.252.87.45] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/favicon-32-32.png"] [unique_id "XoSOQ-EBhu3WEjTmXz-VmAAAAAE"] ... |
2020-04-02 04:38:25 |
| 36.153.231.18 | attack | Apr 1 20:36:19 [host] sshd[9375]: Invalid user hl Apr 1 20:36:19 [host] sshd[9375]: pam_unix(sshd:a Apr 1 20:36:20 [host] sshd[9375]: Failed password |
2020-04-02 04:31:23 |
| 92.42.45.179 | attack | (sshd) Failed SSH login from 92.42.45.179 (DE/Germany/vps-zap492392-1.zap-srv.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 1 17:36:02 andromeda sshd[20073]: Invalid user wrchang from 92.42.45.179 port 53078 Apr 1 17:36:04 andromeda sshd[20073]: Failed password for invalid user wrchang from 92.42.45.179 port 53078 ssh2 Apr 1 17:41:46 andromeda sshd[20609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.42.45.179 user=admin |
2020-04-02 04:04:28 |
| 123.185.3.145 | attackbotsspam | 1585744103 - 04/01/2020 14:28:23 Host: 123.185.3.145/123.185.3.145 Port: 445 TCP Blocked |
2020-04-02 04:05:18 |
| 181.65.252.9 | attackspam | SSH Brute-Forcing (server1) |
2020-04-02 04:12:19 |
| 132.232.68.76 | attackspam | Apr 1 19:13:27 ovpn sshd\[7955\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.68.76 user=root Apr 1 19:13:28 ovpn sshd\[7955\]: Failed password for root from 132.232.68.76 port 47438 ssh2 Apr 1 19:25:36 ovpn sshd\[10711\]: Invalid user nim from 132.232.68.76 Apr 1 19:25:36 ovpn sshd\[10711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.68.76 Apr 1 19:25:38 ovpn sshd\[10711\]: Failed password for invalid user nim from 132.232.68.76 port 49816 ssh2 |
2020-04-02 04:42:08 |
| 114.203.129.190 | attackspam | Telnet/23 MH Probe, Scan, BF, Hack - |
2020-04-02 04:30:58 |
| 188.254.0.124 | attackspambots | Apr 1 20:07:04 hosting sshd[25618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.124 user=root Apr 1 20:07:05 hosting sshd[25618]: Failed password for root from 188.254.0.124 port 34798 ssh2 ... |
2020-04-02 04:04:07 |
| 139.59.58.115 | attackbotsspam | Apr 1 16:08:55 ws22vmsma01 sshd[169831]: Failed password for root from 139.59.58.115 port 43782 ssh2 ... |
2020-04-02 04:17:24 |
| 178.128.234.93 | attack | Fail2Ban Ban Triggered |
2020-04-02 04:03:31 |