City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 132.127.10.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48371
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;132.127.10.100. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022001 1800 900 604800 86400
;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 21 06:38:03 CST 2025
;; MSG SIZE rcvd: 107Host 100.10.127.132.in-addr.arpa not found: 2(SERVFAIL)
server can't find 132.127.10.100.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 122.51.57.78 | attackbotsspam | May 13 16:48:04 h2829583 sshd[32069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.57.78 |
2020-05-14 00:04:46 |
| 54.36.148.42 | attack | [Wed May 13 21:14:41.060734 2020] [:error] [pid 5905:tid 140257433646848] [client 54.36.148.42:48262] [client 54.36.148.42] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "183"] [id "913102"] [msg "Found User-Agent associated with web crawler/bot"] [data "Matched Data: AhrefsBot found within REQUEST_HEADERS:User-Agent: mozilla/5.0 (compatible; ahrefsbot/6.1; +http://ahrefs.com/robot/)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-crawler"] [tag "OWASP_CRS"] [tag "OWASP_CRS/AUTOMATION/CRAWLER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/pelayanan-jasa/1577-klimatologi/agroklimatologi/kalender-tanam-katam-terpadu/kalender-tan ... |
2020-05-13 23:17:17 |
| 82.65.35.189 | attackbotsspam | prod11 ... |
2020-05-13 23:38:07 |
| 45.77.179.167 | attackspambots | Unauthorized connection attempt detected from IP address 45.77.179.167 to port 80 [T] |
2020-05-13 23:59:47 |
| 193.112.111.28 | attackspambots | May 13 14:31:16 h2646465 sshd[15789]: Invalid user deploy from 193.112.111.28 May 13 14:31:16 h2646465 sshd[15789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.111.28 May 13 14:31:16 h2646465 sshd[15789]: Invalid user deploy from 193.112.111.28 May 13 14:31:18 h2646465 sshd[15789]: Failed password for invalid user deploy from 193.112.111.28 port 39188 ssh2 May 13 14:42:48 h2646465 sshd[17237]: Invalid user teampspeak3 from 193.112.111.28 May 13 14:42:48 h2646465 sshd[17237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.111.28 May 13 14:42:48 h2646465 sshd[17237]: Invalid user teampspeak3 from 193.112.111.28 May 13 14:42:50 h2646465 sshd[17237]: Failed password for invalid user teampspeak3 from 193.112.111.28 port 52838 ssh2 May 13 14:53:29 h2646465 sshd[18639]: Invalid user postgres from 193.112.111.28 ... |
2020-05-14 00:05:00 |
| 111.230.180.65 | attack | May 13 14:34:40 prod4 sshd\[10533\]: Invalid user oracle from 111.230.180.65 May 13 14:34:42 prod4 sshd\[10533\]: Failed password for invalid user oracle from 111.230.180.65 port 39026 ssh2 May 13 14:37:01 prod4 sshd\[11553\]: Invalid user mgwuser from 111.230.180.65 ... |
2020-05-13 23:25:58 |
| 51.254.37.192 | attackbotsspam | Auto Fail2Ban report, multiple SSH login attempts. |
2020-05-13 23:43:54 |
| 74.6.133.235 | attackbotsspam | A stupid seems to be a hacker |
2020-05-13 23:26:56 |
| 87.190.16.229 | attackbotsspam | May 13 16:46:33 sip sshd[243801]: Invalid user shark from 87.190.16.229 port 42398 May 13 16:46:36 sip sshd[243801]: Failed password for invalid user shark from 87.190.16.229 port 42398 ssh2 May 13 16:50:17 sip sshd[243859]: Invalid user daniela from 87.190.16.229 port 49646 ... |
2020-05-13 23:25:24 |
| 51.75.246.176 | attack | May 13 11:03:31 NPSTNNYC01T sshd[10353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.246.176 May 13 11:03:33 NPSTNNYC01T sshd[10353]: Failed password for invalid user admin from 51.75.246.176 port 49708 ssh2 May 13 11:07:09 NPSTNNYC01T sshd[10724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.246.176 ... |
2020-05-13 23:47:12 |
| 43.227.23.76 | attack | SSH Brute-Force reported by Fail2Ban |
2020-05-13 23:33:08 |
| 139.59.145.130 | attackspam | Auto Fail2Ban report, multiple SSH login attempts. |
2020-05-13 23:29:57 |
| 202.21.124.28 | attackspam | SSHD unauthorised connection attempt (b) |
2020-05-13 23:24:48 |
| 181.129.161.28 | attack | 2020-05-13 09:37:20.541990-0500 localhost sshd[10193]: Failed password for invalid user weblogic from 181.129.161.28 port 45408 ssh2 |
2020-05-13 23:26:34 |
| 40.85.248.149 | attack | [Wed May 13 07:08:51 2020] - DDoS Attack From IP: 40.85.248.149 Port: 46429 |
2020-05-13 23:46:12 |