134.180.6.61 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Japan

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.180.6.61
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30621
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;134.180.6.61.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025013100 1800 900 604800 86400

;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 13:57:07 CST 2025
;; MSG SIZE  rcvd: 105

Host info

Host 61.6.180.134.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 61.6.180.134.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
58.218.200.113	attack	Icarus honeypot on github	2020-09-06 13:44:01
5.188.206.194	attackspam	Sep 6 07:07:30 relay postfix/smtpd\[31425\]: warning: unknown\[5.188.206.194\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 07:07:52 relay postfix/smtpd\[31425\]: warning: unknown\[5.188.206.194\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 07:09:59 relay postfix/smtpd\[31424\]: warning: unknown\[5.188.206.194\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 07:10:21 relay postfix/smtpd\[31423\]: warning: unknown\[5.188.206.194\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 07:16:10 relay postfix/smtpd\[13250\]: warning: unknown\[5.188.206.194\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-09-06 13:19:09
177.45.11.100	attackspambots	1599324753 - 09/05/2020 18:52:33 Host: 177.45.11.100/177.45.11.100 Port: 445 TCP Blocked	2020-09-06 13:13:33
192.35.168.80	attack	Honeypot hit: [2020-09-06 00:46:51 +0300] Connected from 192.35.168.80 to (HoneypotIP):110	2020-09-06 13:24:26
187.85.29.54	attackbotsspam	TCP (SYN) 187.85.29.54:17485 -> port 23, len 44	2020-09-06 13:37:06
107.189.11.163	attack	Dovecot Invalid User Login Attempt.	2020-09-06 13:20:51
165.90.3.122	attack	[Sun Sep 06 03:13:25.153543 2020] [:error] [pid 2754:tid 140397330274048] [client 165.90.3.122:65500] [client 165.90.3.122] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "972"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/PROTOCOL_NOT_ALLOWED"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "X1PxZdlmuncnyx65RuMHlQAAAGU"] ...	2020-09-06 13:06:58
222.186.175.169	attackbotsspam	Sep 6 01:37:08 NPSTNNYC01T sshd[7669]: Failed password for root from 222.186.175.169 port 11790 ssh2 Sep 6 01:37:21 NPSTNNYC01T sshd[7669]: error: maximum authentication attempts exceeded for root from 222.186.175.169 port 11790 ssh2 [preauth] Sep 6 01:37:27 NPSTNNYC01T sshd[7708]: Failed password for root from 222.186.175.169 port 31628 ssh2 ...	2020-09-06 13:38:37
184.105.139.94	attackbotsspam	TCP (SYN) 184.105.139.94:41702 -> port 80, len 44	2020-09-06 13:49:55
192.35.168.218	attack	Unauthorized connection attempt detected port 8080	2020-09-06 13:17:33
111.229.4.247	attackspam	...	2020-09-06 13:49:10
45.142.120.183	attackbots	2020-09-06 08:12:36 dovecot_login authenticator failed for \(User\) \[45.142.120.183\]: 535 Incorrect authentication data \(set_id=step@org.ua\)2020-09-06 08:13:13 dovecot_login authenticator failed for \(User\) \[45.142.120.183\]: 535 Incorrect authentication data \(set_id=kt@org.ua\)2020-09-06 08:13:46 dovecot_login authenticator failed for \(User\) \[45.142.120.183\]: 535 Incorrect authentication data \(set_id=marvin@org.ua\) ...	2020-09-06 13:30:13
210.75.240.13	attackspam	Bruteforce detected by fail2ban	2020-09-06 13:32:10
103.145.12.217	attackspam	[2020-09-06 00:20:44] NOTICE[1194] chan_sip.c: Registration from '"508" ' failed for '103.145.12.217:6003' - Wrong password [2020-09-06 00:20:44] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-06T00:20:44.705-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="508",SessionID="0x7f2ddc0f4e48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.217/6003",Challenge="7d35c7dd",ReceivedChallenge="7d35c7dd",ReceivedHash="31fbb0c05ab02743e8ab6900dd754f71" [2020-09-06 00:20:44] NOTICE[1194] chan_sip.c: Registration from '"508" ' failed for '103.145.12.217:6003' - Wrong password [2020-09-06 00:20:44] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-06T00:20:44.836-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="508",SessionID="0x7f2ddc12c6d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.1 ...	2020-09-06 13:35:27
85.209.0.102	attack	TCP (SYN) 85.209.0.102:23448 -> port 22, len 60	2020-09-06 13:40:56

Recently Reported IPs

242.45.111.120	47.43.140.97	195.230.236.9	255.199.92.96
131.18.160.237	162.208.3.141	235.35.56.236	195.225.14.36
61.206.219.65	217.75.69.197	41.223.242.73	147.90.93.222
193.99.207.57	231.174.108.163	33.23.15.29	140.88.72.183
129.254.229.173	115.151.243.157	210.50.178.21	12.147.17.203