City: unknown
Region: unknown
Country: IANA Special-Purpose Address
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 240.134.42.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51238
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;240.134.42.6. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400
;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 23:36:19 CST 2025
;; MSG SIZE rcvd: 105Host 6.42.134.240.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 6.42.134.240.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 67.205.162.223 | attackspam | *Port Scan* detected from 67.205.162.223 (US/United States/New Jersey/North Bergen/-). 4 hits in the last 266 seconds |
2020-03-21 12:09:56 |
| 62.219.118.29 | attackbots | DATE:2020-03-21 04:51:06, IP:62.219.118.29, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq) |
2020-03-21 12:36:03 |
| 37.115.207.216 | attack | [Sat Mar 21 11:23:02.467314 2020] [:error] [pid 8548:tid 140035746318080] [client 37.115.207.216:64375] [client 37.115.207.216] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "972"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/PROTOCOL_NOT_ALLOWED"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/profil/meteorologi/list-of-all-tags/buletin-prakiraan-musim-hujan-tahun-2019-2020-di-provinsi-jawa-timur"] [unique_id "XnWWpp9F5-B@XHMcU2lASAAAAQ8"], referer: https://karangploso.jatim.bmkg.go.id/index.php/pr
... |
2020-03-21 12:36:29 |
| 202.182.120.62 | attack | Mar 21 00:45:34 firewall sshd[16492]: Invalid user khoshi from 202.182.120.62 Mar 21 00:45:36 firewall sshd[16492]: Failed password for invalid user khoshi from 202.182.120.62 port 47938 ssh2 Mar 21 00:54:51 firewall sshd[17315]: Invalid user ft from 202.182.120.62 ... |
2020-03-21 12:25:20 |
| 191.101.44.206 | attackspambots | Mar 21 00:18:55 NPSTNNYC01T sshd[12609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.101.44.206 Mar 21 00:18:57 NPSTNNYC01T sshd[12609]: Failed password for invalid user sj from 191.101.44.206 port 50832 ssh2 Mar 21 00:22:59 NPSTNNYC01T sshd[12884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.101.44.206 ... |
2020-03-21 12:31:46 |
| 170.106.38.190 | attackspam | Ssh brute force |
2020-03-21 10:47:02 |
| 210.22.116.45 | attackspam | Mar 21 05:10:37 markkoudstaal sshd[21100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.22.116.45 Mar 21 05:10:39 markkoudstaal sshd[21100]: Failed password for invalid user rainelle from 210.22.116.45 port 54456 ssh2 Mar 21 05:13:43 markkoudstaal sshd[21486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.22.116.45 |
2020-03-21 12:22:37 |
| 210.183.21.48 | attackbotsspam | Mar 21 05:07:52 h2779839 sshd[23724]: Invalid user alessio from 210.183.21.48 port 14647 Mar 21 05:07:52 h2779839 sshd[23724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.183.21.48 Mar 21 05:07:52 h2779839 sshd[23724]: Invalid user alessio from 210.183.21.48 port 14647 Mar 21 05:07:54 h2779839 sshd[23724]: Failed password for invalid user alessio from 210.183.21.48 port 14647 ssh2 Mar 21 05:12:26 h2779839 sshd[23851]: Invalid user hobbit from 210.183.21.48 port 20068 Mar 21 05:12:26 h2779839 sshd[23851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.183.21.48 Mar 21 05:12:26 h2779839 sshd[23851]: Invalid user hobbit from 210.183.21.48 port 20068 Mar 21 05:12:28 h2779839 sshd[23851]: Failed password for invalid user hobbit from 210.183.21.48 port 20068 ssh2 Mar 21 05:16:51 h2779839 sshd[23913]: Invalid user wusifan from 210.183.21.48 port 6878 ... |
2020-03-21 12:39:40 |
| 46.14.0.162 | attackspam | Mar 21 00:55:00 ws24vmsma01 sshd[119481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.14.0.162 Mar 21 00:55:01 ws24vmsma01 sshd[119481]: Failed password for invalid user emplazamiento from 46.14.0.162 port 34638 ssh2 ... |
2020-03-21 12:17:02 |
| 23.97.180.45 | attackbots | Mar 21 00:51:05 firewall sshd[17002]: Invalid user celery from 23.97.180.45 Mar 21 00:51:07 firewall sshd[17002]: Failed password for invalid user celery from 23.97.180.45 port 60660 ssh2 Mar 21 00:55:02 firewall sshd[17344]: Invalid user gmodserver from 23.97.180.45 ... |
2020-03-21 12:17:18 |
| 94.73.238.150 | attack | 2020-03-21T03:44:44.786578ionos.janbro.de sshd[89653]: Failed password for invalid user admin from 94.73.238.150 port 58678 ssh2 2020-03-21T03:48:02.637064ionos.janbro.de sshd[89659]: Invalid user hidden-user from 94.73.238.150 port 34914 2020-03-21T03:48:02.921104ionos.janbro.de sshd[89659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.73.238.150 2020-03-21T03:48:02.637064ionos.janbro.de sshd[89659]: Invalid user hidden-user from 94.73.238.150 port 34914 2020-03-21T03:48:04.436362ionos.janbro.de sshd[89659]: Failed password for invalid user hidden-user from 94.73.238.150 port 34914 ssh2 2020-03-21T03:51:23.004661ionos.janbro.de sshd[89666]: Invalid user fawn from 94.73.238.150 port 39388 2020-03-21T03:51:23.089488ionos.janbro.de sshd[89666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.73.238.150 2020-03-21T03:51:23.004661ionos.janbro.de sshd[89666]: Invalid user fawn from 94.73.238.150 port 39 ... |
2020-03-21 12:30:13 |
| 104.248.35.239 | attackspambots | $f2bV_matches |
2020-03-21 12:21:00 |
| 176.136.24.214 | attack | Brute force VPN server |
2020-03-21 12:04:00 |
| 109.72.108.46 | attackbots | (sshd) Failed SSH login from 109.72.108.46 (ME/Montenegro/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 21 04:55:12 ubnt-55d23 sshd[9635]: Invalid user oracle from 109.72.108.46 port 58862 Mar 21 04:55:14 ubnt-55d23 sshd[9635]: Failed password for invalid user oracle from 109.72.108.46 port 58862 ssh2 |
2020-03-21 12:01:19 |
| 103.72.162.44 | attack | Mar 21 04:54:28 cloud sshd[25621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.72.162.44 Mar 21 04:54:30 cloud sshd[25621]: Failed password for invalid user hadoop from 103.72.162.44 port 34632 ssh2 |
2020-03-21 12:45:51 |