City: Los Angeles
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.217.239.136
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37613
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;154.217.239.136. IN A
;; AUTHORITY SECTION:
. 188 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020093002 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 01 15:13:41 CST 2020
;; MSG SIZE rcvd: 119Host 136.239.217.154.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 136.239.217.154.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 95.233.207.194 | attackbots | Icarus honeypot on github |
2020-09-07 13:08:34 |
| 141.98.10.214 | attackspam | $f2bV_matches |
2020-09-07 13:28:58 |
| 173.252.95.35 | attack | Port Scan: TCP/80 |
2020-09-07 13:17:20 |
| 192.71.3.26 | attackbots | Brute force attack stopped by firewall |
2020-09-07 13:26:16 |
| 45.129.33.6 | attackbots |
|
2020-09-07 13:32:13 |
| 103.10.227.176 | attack | DDOS |
2020-09-07 13:29:49 |
| 119.81.113.242 | attack | Unauthorised login to NAS |
2020-09-07 13:09:31 |
| 190.60.214.10 | attackspam | Honeypot attack, port: 445, PTR: 10.214.60.190.host.ifxnetworks.com. |
2020-09-07 13:08:10 |
| 61.145.178.134 | attack | ssh brute force |
2020-09-07 13:39:22 |
| 182.254.146.230 | attackbotsspam |
|
2020-09-07 13:40:34 |
| 27.71.84.72 | attackspambots | Honeypot attack, port: 445, PTR: localhost. |
2020-09-07 13:13:29 |
| 129.211.18.180 | attackspambots | (sshd) Failed SSH login from 129.211.18.180 (CN/China/-): 5 in the last 3600 secs |
2020-09-07 13:41:31 |
| 173.252.95.36 | attackbots | [Sun Sep 06 23:53:43.920622 2020] [:error] [pid 31433:tid 140397593237248] [client 173.252.95.36:54642] [client 173.252.95.36] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/TableFilter/total-v62.js"] [unique_id "X1UUF3Jrmc0na8dwfwZeEAAAZgo"] ... |
2020-09-07 13:25:14 |
| 46.125.249.51 | attackbots | Port Scan: TCP/443 |
2020-09-07 13:39:48 |
| 51.223.211.225 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-09-07 13:37:43 |