City: unknown
Region: unknown
Country: None
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.64.149.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27666
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;117.64.149.101. IN A
;; AUTHORITY SECTION:
. 462 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400
;; Query time: 97 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 15:06:02 CST 2022
;; MSG SIZE rcvd: 107Host 101.149.64.117.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 101.149.64.117.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 173.252.87.4 | attackbots | [Sat Mar 21 10:49:27.102304 2020] [:error] [pid 8152:tid 140035779888896] [client 173.252.87.4:57818] [client 173.252.87.4] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/images/banners/banner-v3.webp"] [unique_id "XnWOx3y--H515HYJ6BfahQAAAAE"] ... |
2020-03-21 17:15:17 |
| 104.168.168.20 | attackbots | Unauthorized connection attempt detected from IP address 104.168.168.20 to port 1433 |
2020-03-21 17:43:39 |
| 117.50.17.51 | attackspambots | SSH brutforce |
2020-03-21 18:00:57 |
| 188.131.142.109 | attack | Mar 21 10:11:43 santamaria sshd\[23958\]: Invalid user ben from 188.131.142.109 Mar 21 10:11:43 santamaria sshd\[23958\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.142.109 Mar 21 10:11:45 santamaria sshd\[23958\]: Failed password for invalid user ben from 188.131.142.109 port 37590 ssh2 ... |
2020-03-21 17:56:43 |
| 37.187.97.33 | attackbots | ... |
2020-03-21 17:44:03 |
| 173.252.87.10 | attackspambots | [Sat Mar 21 10:49:15.386051 2020] [:error] [pid 8223:tid 140035796674304] [client 173.252.87.10:39318] [client 173.252.87.10] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/images/banners/banner-v3.webp"] [unique_id "XnWOuzjiiwLa2pbs7a3BUgAAAAE"] ... |
2020-03-21 17:32:29 |
| 173.252.87.12 | attack | [Sat Mar 21 10:49:26.301951 2020] [:error] [pid 8243:tid 140035779888896] [client 173.252.87.12:38676] [client 173.252.87.12] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/comlink-worker-v1.js"] [unique_id "XnWOxk9P8QlH7eYVVSo6-gAAAAE"], referer: https://karangploso.jatim.bmkg.go.id/ ... |
2020-03-21 17:16:49 |
| 201.48.192.60 | attackbotsspam | Tried sshing with brute force. |
2020-03-21 17:23:47 |
| 103.111.20.87 | attackspambots | Unauthorized connection attempt detected from IP address 103.111.20.87 to port 80 |
2020-03-21 17:37:40 |
| 106.12.17.107 | attackspambots | $f2bV_matches |
2020-03-21 17:57:32 |
| 106.53.20.179 | attackspam | Mar 21 10:20:03 nextcloud sshd\[25860\]: Invalid user pontiac from 106.53.20.179 Mar 21 10:20:03 nextcloud sshd\[25860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.20.179 Mar 21 10:20:05 nextcloud sshd\[25860\]: Failed password for invalid user pontiac from 106.53.20.179 port 45974 ssh2 |
2020-03-21 17:21:25 |
| 139.59.67.82 | attackspambots | fail2ban -- 139.59.67.82 ... |
2020-03-21 17:15:41 |
| 202.62.9.130 | attackbots | C1,WP GET /suche/wp-login.php |
2020-03-21 17:27:37 |
| 120.70.100.215 | attack | $f2bV_matches |
2020-03-21 17:37:16 |
| 115.159.46.47 | attackbotsspam | Invalid user wildfly from 115.159.46.47 port 35153 |
2020-03-21 17:30:04 |