City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 28.80.83.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33714
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;28.80.83.129. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 01:55:09 CST 2025
;; MSG SIZE rcvd: 105Host 129.83.80.28.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 129.83.80.28.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 210.5.85.150 | attackbotsspam | 2020-08-28T14:19:28+0200 Failed SSH Authentication/Brute Force Attack. (Server 9) |
2020-08-28 21:14:52 |
| 90.188.248.246 | attackspam | failed_logins |
2020-08-28 21:41:33 |
| 222.186.175.182 | attackspam | Aug 28 15:48:38 santamaria sshd\[14784\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182 user=root Aug 28 15:48:39 santamaria sshd\[14784\]: Failed password for root from 222.186.175.182 port 59346 ssh2 Aug 28 15:48:58 santamaria sshd\[14786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182 user=root ... |
2020-08-28 21:50:57 |
| 198.27.90.106 | attack | 2020-08-28T13:12:28.650048shield sshd\[8826\]: Invalid user exx from 198.27.90.106 port 56305 2020-08-28T13:12:28.661894shield sshd\[8826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.27.90.106 2020-08-28T13:12:30.797965shield sshd\[8826\]: Failed password for invalid user exx from 198.27.90.106 port 56305 ssh2 2020-08-28T13:15:16.951410shield sshd\[9035\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.27.90.106 user=root 2020-08-28T13:15:18.485057shield sshd\[9035\]: Failed password for root from 198.27.90.106 port 48900 ssh2 |
2020-08-28 21:24:19 |
| 220.76.205.178 | attackbots | Repeated brute force against a port |
2020-08-28 21:26:40 |
| 109.167.226.107 | attackspam | [Fri Aug 28 19:08:50.172505 2020] [:error] [pid 23509:tid 139692058076928] [client 109.167.226.107:51019] [client 109.167.226.107] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "972"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/PROTOCOL_NOT_ALLOWED"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "X0jz0lHp-E@9Eo2JfVBitgAAAqU"], referer: https://karangploso.jatim.bmkg.go.id/
... |
2020-08-28 21:31:26 |
| 118.24.140.195 | attack | $f2bV_matches |
2020-08-28 21:19:13 |
| 5.188.84.95 | attackspambots | 3,72-02/05 [bc01/m10] PostRequest-Spammer scoring: harare01_holz |
2020-08-28 21:26:09 |
| 87.251.74.6 | attackspambots | Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-08-28T13:39:52Z |
2020-08-28 21:40:46 |
| 185.159.158.108 | attack | 0,75-00/01 [bc00/m04] PostRequest-Spammer scoring: zurich |
2020-08-28 21:32:23 |
| 78.11.39.43 | attackspambots | (smtpauth) Failed SMTP AUTH login from 78.11.39.43 (PL/Poland/host43.stimo.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-08-28 16:38:19 plain authenticator failed for ([78.11.39.43]) [78.11.39.43]: 535 Incorrect authentication data (set_id=info) |
2020-08-28 21:47:44 |
| 186.83.66.217 | attackbotsspam | (sshd) Failed SSH login from 186.83.66.217 (CO/Colombia/dynamic-ip-1868366217.cable.net.co): 5 in the last 3600 secs |
2020-08-28 21:53:32 |
| 149.202.161.57 | attack | $f2bV_matches |
2020-08-28 21:23:55 |
| 180.253.162.93 | attackspambots | Automatic report - Port Scan Attack |
2020-08-28 21:19:51 |
| 111.229.132.48 | attack | Aug 28 15:58:32 journals sshd\[126435\]: Invalid user youtrack from 111.229.132.48 Aug 28 15:58:32 journals sshd\[126435\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.132.48 Aug 28 15:58:34 journals sshd\[126435\]: Failed password for invalid user youtrack from 111.229.132.48 port 59968 ssh2 Aug 28 16:03:06 journals sshd\[126946\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.132.48 user=root Aug 28 16:03:08 journals sshd\[126946\]: Failed password for root from 111.229.132.48 port 53196 ssh2 ... |
2020-08-28 21:21:58 |