City: Tokyo
Region: Tokyo
Country: Japan
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 163.139.132.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58446
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;163.139.132.93. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025011001 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 11 10:15:08 CST 2025
;; MSG SIZE rcvd: 107Host 93.132.139.163.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 93.132.139.163.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 200.73.128.90 | attackspambots | Automatic report BANNED IP |
2020-08-31 22:10:50 |
| 51.79.52.2 | attackbotsspam | 2020-08-31T16:37:30.464091lavrinenko.info sshd[32516]: Failed password for invalid user ubuntu from 51.79.52.2 port 56196 ssh2 2020-08-31T16:41:12.614884lavrinenko.info sshd[3714]: Invalid user admin from 51.79.52.2 port 33568 2020-08-31T16:41:12.632381lavrinenko.info sshd[3714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.52.2 2020-08-31T16:41:12.614884lavrinenko.info sshd[3714]: Invalid user admin from 51.79.52.2 port 33568 2020-08-31T16:41:14.763091lavrinenko.info sshd[3714]: Failed password for invalid user admin from 51.79.52.2 port 33568 ssh2 ... |
2020-08-31 21:52:17 |
| 183.89.0.23 | attackspambots | 445/tcp [2020-08-31]1pkt |
2020-08-31 21:39:07 |
| 157.230.251.115 | attack | Aug 31 15:23:27 abendstille sshd\[24919\]: Invalid user rajesh from 157.230.251.115 Aug 31 15:23:27 abendstille sshd\[24919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.251.115 Aug 31 15:23:29 abendstille sshd\[24919\]: Failed password for invalid user rajesh from 157.230.251.115 port 50998 ssh2 Aug 31 15:27:52 abendstille sshd\[29251\]: Invalid user beo from 157.230.251.115 Aug 31 15:27:52 abendstille sshd\[29251\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.251.115 ... |
2020-08-31 21:43:14 |
| 52.171.198.169 | attackbotsspam | C1,WP GET /manga//wp-includes/wlwmanifest.xml |
2020-08-31 21:42:31 |
| 51.254.205.6 | attackspam | Aug 31 09:20:11 NPSTNNYC01T sshd[5588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.205.6 Aug 31 09:20:13 NPSTNNYC01T sshd[5588]: Failed password for invalid user admin from 51.254.205.6 port 53598 ssh2 Aug 31 09:24:20 NPSTNNYC01T sshd[6081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.205.6 ... |
2020-08-31 22:05:42 |
| 111.229.187.216 | attackbotsspam | Aug 31 14:56:44 vps647732 sshd[5883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.187.216 Aug 31 14:56:46 vps647732 sshd[5883]: Failed password for invalid user ftpuser from 111.229.187.216 port 53546 ssh2 ... |
2020-08-31 21:59:34 |
| 46.217.237.83 | attackbots | 23/tcp [2020-08-31]1pkt |
2020-08-31 21:59:52 |
| 14.187.68.169 | attack | 5555/tcp [2020-08-31]1pkt |
2020-08-31 21:41:17 |
| 106.12.14.130 | attackbots | Banned for a week because repeated abuses, for example SSH, but not only |
2020-08-31 21:43:33 |
| 111.161.72.99 | attackspambots | Aug 31 14:52:14 web sshd[224579]: Invalid user squid from 111.161.72.99 port 36782 Aug 31 14:52:16 web sshd[224579]: Failed password for invalid user squid from 111.161.72.99 port 36782 ssh2 Aug 31 14:54:19 web sshd[224587]: Invalid user share from 111.161.72.99 port 55526 ... |
2020-08-31 21:40:20 |
| 190.114.253.241 | attack | 445/tcp 445/tcp [2020-08-31]2pkt |
2020-08-31 21:41:38 |
| 114.119.166.115 | attackbots | [Mon Aug 31 19:35:51.460221 2020] [:error] [pid 8388:tid 139683117999872] [client 114.119.166.115:13886] [client 114.119.166.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/agroklimatologi/kalender-tanam/3437-kalender-tanam-katam-terpadu-pulau-kalimantan/kalender-tanam-katam-terpadu-provinsi-kalimantan-barat/kalender-tanam-katam-terpadu-kabupaten-landak-provinsi-kalimantan-barat/kalender-tanam-ka ... |
2020-08-31 22:14:40 |
| 167.114.86.47 | attackbotsspam | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-31T12:29:05Z and 2020-08-31T12:35:56Z |
2020-08-31 22:07:44 |
| 138.36.108.46 | attack | 23/tcp [2020-08-31]1pkt |
2020-08-31 21:48:28 |