City: Zhengzhou
Region: Henan
Country: China
Internet Service Provider: China Mobile
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.219.135.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40987
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;120.219.135.139. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025062700 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jun 27 21:49:02 CST 2025
;; MSG SIZE rcvd: 108Host 139.135.219.120.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 139.135.219.120.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 173.252.95.20 | attackbots | [Tue Dec 17 04:56:41.127067 2019] [:error] [pid 1500:tid 139777859467008] [client 173.252.95.20:61858] [client 173.252.95.20] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-potensi-banjir-bulanan/prakiraan-daerah-potensi-banjir-di-provinsi-jawa-timur/4009-prakiraan-bulanan-daerah-potensi-banjir-provinsi-jawa-timur-tahun-2020/555557717-prakiraan-bulanan-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk ... |
2019-12-17 09:02:05 |
| 122.192.51.202 | attack | Invalid user pursell from 122.192.51.202 port 44470 |
2019-12-17 08:36:39 |
| 51.254.37.192 | attackbots | Dec 16 22:57:01 MK-Soft-VM5 sshd[20077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.37.192 Dec 16 22:57:03 MK-Soft-VM5 sshd[20077]: Failed password for invalid user douglas from 51.254.37.192 port 39438 ssh2 ... |
2019-12-17 08:42:07 |
| 198.46.160.145 | attackbots | 3389BruteforceFW21 |
2019-12-17 08:53:53 |
| 113.62.176.97 | attack | Dec 16 20:04:53 plusreed sshd[17555]: Invalid user cocain from 113.62.176.97 ... |
2019-12-17 09:10:28 |
| 36.83.189.31 | attackspam | Unauthorized connection attempt detected from IP address 36.83.189.31 to port 445 |
2019-12-17 08:58:57 |
| 69.172.87.212 | attackbotsspam | Dec 16 23:04:09 localhost sshd\[37233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.172.87.212 user=news Dec 16 23:04:11 localhost sshd\[37233\]: Failed password for news from 69.172.87.212 port 58560 ssh2 Dec 16 23:10:15 localhost sshd\[37454\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.172.87.212 user=mysql Dec 16 23:10:17 localhost sshd\[37454\]: Failed password for mysql from 69.172.87.212 port 33908 ssh2 Dec 16 23:16:17 localhost sshd\[37587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.172.87.212 user=root ... |
2019-12-17 08:38:51 |
| 190.7.128.74 | attack | Dec 17 01:30:59 markkoudstaal sshd[6433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.7.128.74 Dec 17 01:31:01 markkoudstaal sshd[6433]: Failed password for invalid user vcxz from 190.7.128.74 port 28231 ssh2 Dec 17 01:37:31 markkoudstaal sshd[7141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.7.128.74 |
2019-12-17 08:38:23 |
| 220.133.95.68 | attack | Fail2Ban - SSH Bruteforce Attempt |
2019-12-17 08:47:29 |
| 36.155.115.137 | attackspam | Dec 16 13:47:58 auw2 sshd\[3218\]: Invalid user bai from 36.155.115.137 Dec 16 13:47:58 auw2 sshd\[3218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.155.115.137 Dec 16 13:48:00 auw2 sshd\[3218\]: Failed password for invalid user bai from 36.155.115.137 port 34227 ssh2 Dec 16 13:54:46 auw2 sshd\[3899\]: Invalid user vistad from 36.155.115.137 Dec 16 13:54:46 auw2 sshd\[3899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.155.115.137 |
2019-12-17 08:32:46 |
| 134.175.128.69 | attackbotsspam | SSH Bruteforce attempt |
2019-12-17 08:57:26 |
| 51.91.159.152 | attack | Dec 16 22:56:54 pornomens sshd\[687\]: Invalid user Hermanni from 51.91.159.152 port 49706 Dec 16 22:56:54 pornomens sshd\[687\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.159.152 Dec 16 22:56:55 pornomens sshd\[687\]: Failed password for invalid user Hermanni from 51.91.159.152 port 49706 ssh2 ... |
2019-12-17 08:50:06 |
| 58.246.6.238 | attackspambots | Dec 17 01:17:53 eventyay sshd[26815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.6.238 Dec 17 01:17:55 eventyay sshd[26815]: Failed password for invalid user webadmin from 58.246.6.238 port 25127 ssh2 Dec 17 01:21:51 eventyay sshd[26947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.6.238 ... |
2019-12-17 08:50:47 |
| 51.77.245.181 | attack | Dec 16 14:18:16 kapalua sshd\[32434\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.ip-51-77-245.eu user=root Dec 16 14:18:18 kapalua sshd\[32434\]: Failed password for root from 51.77.245.181 port 40938 ssh2 Dec 16 14:23:22 kapalua sshd\[549\]: Invalid user cheston from 51.77.245.181 Dec 16 14:23:22 kapalua sshd\[549\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.ip-51-77-245.eu Dec 16 14:23:23 kapalua sshd\[549\]: Failed password for invalid user cheston from 51.77.245.181 port 48120 ssh2 |
2019-12-17 08:39:15 |
| 123.51.152.54 | attackspambots | 2019-12-16T22:55:32.809655struts4.enskede.local sshd\[28455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.51.152.54 user=root 2019-12-16T22:55:35.090755struts4.enskede.local sshd\[28455\]: Failed password for root from 123.51.152.54 port 49974 ssh2 2019-12-16T22:55:37.357963struts4.enskede.local sshd\[28458\]: Invalid user admin from 123.51.152.54 port 54836 2019-12-16T22:55:37.365726struts4.enskede.local sshd\[28458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.51.152.54 2019-12-16T22:55:40.677705struts4.enskede.local sshd\[28458\]: Failed password for invalid user admin from 123.51.152.54 port 54836 ssh2 ... |
2019-12-17 08:31:40 |