City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 107.20.77.111
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33419
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;107.20.77.111. IN A
;; AUTHORITY SECTION:
. 286 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022800 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 16:45:13 CST 2022
;; MSG SIZE rcvd: 106111.77.20.107.in-addr.arpa domain name pointer ec2-107-20-77-111.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
111.77.20.107.in-addr.arpa name = ec2-107-20-77-111.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 113.57.170.50 | attackspambots | $f2bV_matches |
2020-08-15 20:18:21 |
| 64.145.76.39 | attackbotsspam | (From adam.miles@businesspromoted.in) brombergchiropractic.com is currently receiving 33.4 clicks from organic traffic. However, your competition is crushing it You can view detailed traffic analysis at https://www.spyfu.com/overview/domain?query=brombergchiropractic.com 33.4 clicks are certainly not enough. We can certainly do better! We need to do better. It is not that difficult. With in-depth keyword research and on-page optimization it is doable. We will reverse engineer competitor's link building strategies and get the links from similar sources. Its perfect time to plan your marketing strategy. You have created good website but your site will not rank in Google until content and images are optimized correctly. We need to optimize your website for search engines and make it search engine friendly. I have analyzed your site in-depth and you can view your website audit report at https://businesspromoted.websiteauditserver.com/brombergchiropractic.com Your website is the reflection o |
2020-08-15 20:36:43 |
| 61.177.172.41 | attack | Aug 15 14:34:57 vm1 sshd[3030]: Failed password for root from 61.177.172.41 port 42108 ssh2 Aug 15 14:35:10 vm1 sshd[3030]: error: maximum authentication attempts exceeded for root from 61.177.172.41 port 42108 ssh2 [preauth] ... |
2020-08-15 20:47:06 |
| 154.8.167.100 | attack | Lines containing failures of 154.8.167.100 Aug 9 18:55:23 penfold sshd[28228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.167.100 user=r.r Aug 9 18:55:25 penfold sshd[28228]: Failed password for r.r from 154.8.167.100 port 55082 ssh2 Aug 9 18:55:26 penfold sshd[28228]: Received disconnect from 154.8.167.100 port 55082:11: Bye Bye [preauth] Aug 9 18:55:26 penfold sshd[28228]: Disconnected from authenticating user r.r 154.8.167.100 port 55082 [preauth] Aug 9 19:14:09 penfold sshd[29720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.167.100 user=r.r Aug 9 19:14:11 penfold sshd[29720]: Failed password for r.r from 154.8.167.100 port 53284 ssh2 Aug 9 19:14:11 penfold sshd[29720]: Received disconnect from 154.8.167.100 port 53284:11: Bye Bye [preauth] Aug 9 19:14:11 penfold sshd[29720]: Disconnected from authenticating user r.r 154.8.167.100 port 53284 [preauth] Aug 9........ ------------------------------ |
2020-08-15 20:15:09 |
| 59.15.3.197 | attackspambots | Aug 15 14:14:23 vpn01 sshd[10031]: Failed password for root from 59.15.3.197 port 41462 ssh2 ... |
2020-08-15 20:21:56 |
| 106.13.44.83 | attack | Aug 15 07:54:53 sso sshd[17432]: Failed password for root from 106.13.44.83 port 58238 ssh2 ... |
2020-08-15 20:24:16 |
| 129.226.190.18 | attackspambots | Aug 12 14:41:31 mail sshd[29896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.190.18 user=r.r Aug 12 14:41:33 mail sshd[29896]: Failed password for r.r from 129.226.190.18 port 53926 ssh2 Aug 12 14:41:33 mail sshd[29896]: Received disconnect from 129.226.190.18: 11: Bye Bye [preauth] Aug 12 14:48:43 mail sshd[31019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.190.18 user=r.r Aug 12 14:48:45 mail sshd[31019]: Failed password for r.r from 129.226.190.18 port 42182 ssh2 Aug 12 14:48:45 mail sshd[31019]: Received disconnect from 129.226.190.18: 11: Bye Bye [preauth] Aug 12 14:52:59 mail sshd[31705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.190.18 user=r.r Aug 12 14:53:00 mail sshd[31705]: Failed password for r.r from 129.226.190.18 port 54994 ssh2 Aug 12 14:53:00 mail sshd[31705]: Received disconnect from 129.226......... ------------------------------- |
2020-08-15 20:43:50 |
| 185.176.27.198 | attackbots | [MK-VM2] Blocked by UFW |
2020-08-15 20:26:26 |
| 110.137.38.136 | attackbots | 1597494362 - 08/15/2020 14:26:02 Host: 110.137.38.136/110.137.38.136 Port: 445 TCP Blocked |
2020-08-15 20:26:59 |
| 106.52.56.26 | attack | 2020-08-15T12:20:58.703882shield sshd\[18311\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.56.26 user=root 2020-08-15T12:21:01.173473shield sshd\[18311\]: Failed password for root from 106.52.56.26 port 38958 ssh2 2020-08-15T12:23:35.151032shield sshd\[18487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.56.26 user=root 2020-08-15T12:23:37.503907shield sshd\[18487\]: Failed password for root from 106.52.56.26 port 36670 ssh2 2020-08-15T12:25:58.901783shield sshd\[18648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.56.26 user=root |
2020-08-15 20:28:50 |
| 207.46.13.73 | attackbotsspam | [Sat Aug 15 19:25:33.076150 2020] [:error] [pid 1165:tid 140592466097920] [client 207.46.13.73:3804] [client 207.46.13.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/profil/galeri-kegiatan"] [unique_id "XzfUPeniW-eKEEIJLUNKMAAAAcI"] ... |
2020-08-15 20:48:01 |
| 190.214.55.138 | attackbotsspam | Dovecot Invalid User Login Attempt. |
2020-08-15 20:41:31 |
| 173.252.95.112 | attackbotsspam | [Sat Aug 15 19:25:56.354856 2020] [:error] [pid 1165:tid 140592558245632] [client 173.252.95.112:49236] [client 173.252.95.112] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/image-loader-worker-v3.js"] [unique_id "XzfUVOniW-eKEEIJLUNKMQABwwA"] ... |
2020-08-15 20:32:24 |
| 49.88.112.112 | attackbots | Aug 15 08:41:15 plusreed sshd[3659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.112 user=root Aug 15 08:41:18 plusreed sshd[3659]: Failed password for root from 49.88.112.112 port 30552 ssh2 ... |
2020-08-15 20:45:15 |
| 219.78.62.112 | attackspam | " " |
2020-08-15 20:16:25 |