City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.64.222.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24756
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.64.222.145. IN A
;; AUTHORITY SECTION:
. 120 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023112203 1800 900 604800 86400
;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 23 10:16:44 CST 2023
;; MSG SIZE rcvd: 107145.222.64.104.in-addr.arpa domain name pointer a104-64-222-145.deploy.static.akamaitechnologies.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
145.222.64.104.in-addr.arpa name = a104-64-222-145.deploy.static.akamaitechnologies.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 5.101.0.209 | attack | 5.101.0.209 - - [17/May/2020:09:46:58 +0800] "GET /index.php?s=/Index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP HTTP/1.1" 200 19298 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 5.101.0.209 - - [17/May/2020:09:52:33 +0800] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 301 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 5.101.0.209 - - [17/May/2020:09:52:37 +0800] "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 200 21519 "https://106.52.178.125:443/?XDEBUG_SESSION_START=phpstorm" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 5.101.0.209 - - [17/May/2020:10:01:06 +0800] "POST /api/jsonws/invoke HTTP/1.1" 404 19090 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 5.101.0.209 - - [17/May/2020:13:29:29 +0800] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 599 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 5.101.0.209 - - [17/May/2020:13:29:30 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 599 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" |
2020-05-17 15:30:31 |
| 89.248.168.218 | attackspambots | May 17 01:53:32 debian-2gb-nbg1-2 kernel: \[11932055.225374\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=89.248.168.218 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=31120 PROTO=TCP SPT=46739 DPT=21678 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-05-17 08:15:54 |
| 158.101.16.97 | attack | Oracle Cloud. phpmyadmin/script/setup.php /login?from=0.000000 |
2020-05-17 18:01:13 |
| 46.28.68.169 | attackspambots | ET SCAN MS Terminal Server Traffic on Non-standard Port - port: 443 proto: TCP cat: Attempted Information Leak |
2020-05-17 08:26:09 |
| 92.118.160.9 | attackbots | Connection by 92.118.160.9 on port: 111 got caught by honeypot at 5/16/2020 11:10:05 PM |
2020-05-17 08:14:07 |
| 177.155.134.68 | attackspambots | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2020-05-17 08:37:11 |
| 51.83.216.198 | attackbotsspam | ET CINS Active Threat Intelligence Poor Reputation IP group 36 - port: 13390 proto: TCP cat: Misc Attack |
2020-05-17 08:23:32 |
| 51.89.67.61 | attackbots | SIP Server BruteForce Attack |
2020-05-17 08:23:14 |
| 185.53.88.39 | attackspam | Scanned 2 times in the last 24 hours on port 5060 |
2020-05-17 08:36:12 |
| 60.22.72.209 | attackspam | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2020-05-17 08:21:53 |
| 46.180.192.253 | attack | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2020-05-17 08:24:59 |
| 193.202.45.202 | attack | Scanned 14 times in the last 24 hours on port 5060 |
2020-05-17 08:31:50 |
| 92.63.196.6 | attackspambots | ET DROP Dshield Block Listed Source group 1 - port: 13815 proto: TCP cat: Misc Attack |
2020-05-17 08:14:33 |
| 141.98.81.138 | attackbotsspam |
|
2020-05-17 08:38:37 |
| 68.183.92.100 | attackbots | firewall-block, port(s): 29879/tcp |
2020-05-17 08:18:51 |