City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 12.172.113.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9559
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;12.172.113.239. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019050602 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue May 07 10:54:35 +08 2019
;; MSG SIZE rcvd: 118
Host 239.113.172.12.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.3
Address: 67.207.67.3#53
** server can't find 239.113.172.12.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 220.133.36.112 | attackspambots | SSH Invalid Login |
2020-06-27 06:11:04 |
| 185.173.35.1 | attackspam | firewall-block, port(s): 5905/tcp |
2020-06-27 06:23:07 |
| 47.42.214.14 | attackbots | Port 22 Scan, PTR: None |
2020-06-27 06:37:06 |
| 13.70.2.48 | attackbotsspam | 302. On Jun 26 2020 experienced a Brute Force SSH login attempt -> 1 unique times by 13.70.2.48. |
2020-06-27 06:20:58 |
| 106.12.202.119 | attackbots | Invalid user ftpuser from 106.12.202.119 port 38084 |
2020-06-27 06:42:04 |
| 35.229.73.249 | attackbotsspam | [Sat Jun 27 02:54:14.677558 2020] [:error] [pid 12359:tid 140192816838400] [client 35.229.73.249:37063] [client 35.229.73.249] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "972"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/PROTOCOL_NOT_ALLOWED"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.10"] [hostname "staklim-malang.info"] [uri "/robots.txt"] [unique_id "XvZSZiGZrrrK1h92hJVjoAAAAcI"]
... |
2020-06-27 06:30:59 |
| 153.35.93.36 | attackbotsspam | Invalid user teamspeak3 from 153.35.93.36 port 58822 |
2020-06-27 06:04:58 |
| 82.77.214.228 | attackspambots | Port 22 Scan, PTR: 82-77-214-228.rdsnet.ro. |
2020-06-27 06:40:43 |
| 46.105.132.32 | attackspambots | ET CINS Active Threat Intelligence Poor Reputation IP group 30 - port: 27017 proto: TCP cat: Misc Attack |
2020-06-27 06:15:05 |
| 27.150.22.44 | attackbotsspam | Invalid user lee from 27.150.22.44 port 60700 |
2020-06-27 06:06:54 |
| 91.121.65.15 | attack | 1737. On Jun 26 2020 experienced a Brute Force SSH login attempt -> 3 unique times by 91.121.65.15. |
2020-06-27 06:32:58 |
| 149.56.44.101 | attackspam | SSH Invalid Login |
2020-06-27 06:33:40 |
| 67.225.142.105 | attackspam | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-06-27 06:08:35 |
| 69.145.122.159 | attackbots | Port 22 Scan, PTR: None |
2020-06-27 06:09:38 |
| 186.4.242.37 | attackbots | DATE:2020-06-26 23:28:09, IP:186.4.242.37, PORT:ssh SSH brute force auth (docker-dc) |
2020-06-27 06:32:06 |