City: unknown
Region: unknown
Country: unknown
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
bb'
; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> 2600:141b:13::17d7:8241
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 64572
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;2600:141b:13::17d7:8241. IN A
;; Query time: 0 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Sat Feb 19 03:01:08 CST 2022
;; MSG SIZE rcvd: 52
'1.4.2.8.7.d.7.1.0.0.0.0.0.0.0.0.0.0.0.0.3.1.0.0.b.1.4.1.0.0.6.2.ip6.arpa domain name pointer g2600-141b-0013-0000-0000-0000-17d7-8241.deploy.static.akamaitechnologies.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
1.4.2.8.7.d.7.1.0.0.0.0.0.0.0.0.0.0.0.0.3.1.0.0.b.1.4.1.0.0.6.2.ip6.arpa name = g2600-141b-0013-0000-0000-0000-17d7-8241.deploy.static.akamaitechnologies.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 193.169.212.160 | attackbotsspam | Spammer |
2020-06-26 20:29:37 |
| 45.122.221.109 | attackspambots | (sshd) Failed SSH login from 45.122.221.109 (VN/Vietnam/-): 12 in the last 3600 secs |
2020-06-26 20:55:55 |
| 12.28.175.33 | attackbotsspam | Unauthorized connection attempt from IP address 12.28.175.33 on Port 445(SMB) |
2020-06-26 20:32:56 |
| 85.209.0.128 | attackbots | Triggered: repeated knocking on closed ports. |
2020-06-26 20:24:29 |
| 155.94.140.178 | attackspam | Invalid user robi from 155.94.140.178 port 40764 |
2020-06-26 20:43:08 |
| 52.253.86.58 | attackspam | Jun 26 13:18:38 ns382633 sshd\[1524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.253.86.58 user=root Jun 26 13:18:38 ns382633 sshd\[1526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.253.86.58 user=root Jun 26 13:18:40 ns382633 sshd\[1524\]: Failed password for root from 52.253.86.58 port 60049 ssh2 Jun 26 13:18:41 ns382633 sshd\[1526\]: Failed password for root from 52.253.86.58 port 60116 ssh2 Jun 26 13:29:59 ns382633 sshd\[3362\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.253.86.58 user=root |
2020-06-26 20:31:44 |
| 91.106.193.72 | attackbots | 2020-06-26T07:29:55.594743sorsha.thespaminator.com sshd[19906]: Invalid user openerp from 91.106.193.72 port 33000 2020-06-26T07:29:57.481530sorsha.thespaminator.com sshd[19906]: Failed password for invalid user openerp from 91.106.193.72 port 33000 ssh2 ... |
2020-06-26 20:38:35 |
| 207.46.13.144 | attackbotsspam | [Fri Jun 26 18:29:53.058064 2020] [:error] [pid 16617:tid 140192808445696] [client 207.46.13.144:20256] [client 207.46.13.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/robots.txt"] [unique_id "XvXcMWGdoQ43IVQ2pFM27wAAAZY"] ... |
2020-06-26 20:45:12 |
| 23.129.64.192 | attackspam | $f2bV_matches |
2020-06-26 21:07:38 |
| 182.61.184.155 | attack | Jun 26 12:44:03 game-panel sshd[5294]: Failed password for root from 182.61.184.155 port 53700 ssh2 Jun 26 12:51:29 game-panel sshd[5632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.184.155 Jun 26 12:51:31 game-panel sshd[5632]: Failed password for invalid user uftp from 182.61.184.155 port 43162 ssh2 |
2020-06-26 21:06:39 |
| 148.251.10.183 | attack | 20 attempts against mh-misbehave-ban on wood |
2020-06-26 20:35:57 |
| 167.172.119.104 | attack | Invalid user artifactory from 167.172.119.104 port 39616 |
2020-06-26 20:38:09 |
| 106.12.6.55 | attackbots | Jun 26 05:58:35 server1 sshd\[19387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.6.55 user=root Jun 26 05:58:36 server1 sshd\[19387\]: Failed password for root from 106.12.6.55 port 38232 ssh2 Jun 26 06:01:36 server1 sshd\[21202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.6.55 user=root Jun 26 06:01:38 server1 sshd\[21202\]: Failed password for root from 106.12.6.55 port 50912 ssh2 Jun 26 06:04:57 server1 sshd\[23126\]: Invalid user ec2 from 106.12.6.55 Jun 26 06:04:58 server1 sshd\[23126\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.6.55 Jun 26 06:05:01 server1 sshd\[23126\]: Failed password for invalid user ec2 from 106.12.6.55 port 35370 ssh2 ... |
2020-06-26 20:46:51 |
| 45.80.64.246 | attack | Jun 26 11:29:56 *** sshd[18295]: Invalid user tp from 45.80.64.246 |
2020-06-26 20:36:37 |
| 129.226.61.157 | attackbots | Bruteforce detected by fail2ban |
2020-06-26 20:36:13 |