City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 40.3.122.146
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14809
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;40.3.122.146. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013000 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 16:09:05 CST 2025
;; MSG SIZE rcvd: 105Host 146.122.3.40.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 146.122.3.40.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 49.69.240.222 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-18 14:08:31 |
| 92.222.216.81 | attackbots | detected by Fail2Ban |
2020-02-18 14:19:57 |
| 222.186.15.166 | attack | Feb 18 07:08:08 MK-Soft-VM3 sshd[25635]: Failed password for root from 222.186.15.166 port 28191 ssh2 Feb 18 07:08:11 MK-Soft-VM3 sshd[25635]: Failed password for root from 222.186.15.166 port 28191 ssh2 ... |
2020-02-18 14:09:52 |
| 216.218.206.66 | attack | [Tue Feb 18 11:56:23.810022 2020] [:error] [pid 10903:tid 140080046835456] [client 216.218.206.66:15288] [client 216.218.206.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "Xktud-wLZQD7iEbpTemn7gAAAU0"] ... |
2020-02-18 14:46:00 |
| 49.156.152.234 | attackbotsspam | 1582001842 - 02/18/2020 05:57:22 Host: 49.156.152.234/49.156.152.234 Port: 445 TCP Blocked |
2020-02-18 14:06:18 |
| 49.235.144.143 | attack | Feb 18 06:07:37 srv-ubuntu-dev3 sshd[116510]: Invalid user admin123 from 49.235.144.143 Feb 18 06:07:38 srv-ubuntu-dev3 sshd[116510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.144.143 Feb 18 06:07:37 srv-ubuntu-dev3 sshd[116510]: Invalid user admin123 from 49.235.144.143 Feb 18 06:07:40 srv-ubuntu-dev3 sshd[116510]: Failed password for invalid user admin123 from 49.235.144.143 port 56174 ssh2 Feb 18 06:11:07 srv-ubuntu-dev3 sshd[117018]: Invalid user pass123 from 49.235.144.143 Feb 18 06:11:07 srv-ubuntu-dev3 sshd[117018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.144.143 Feb 18 06:11:07 srv-ubuntu-dev3 sshd[117018]: Invalid user pass123 from 49.235.144.143 Feb 18 06:11:09 srv-ubuntu-dev3 sshd[117018]: Failed password for invalid user pass123 from 49.235.144.143 port 52292 ssh2 Feb 18 06:14:32 srv-ubuntu-dev3 sshd[117312]: Invalid user daniela from 49.235.144.143 ... |
2020-02-18 14:43:29 |
| 49.68.39.49 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-18 14:41:39 |
| 211.140.118.18 | attackbotsspam | " " |
2020-02-18 14:40:05 |
| 122.54.112.242 | attackspambots | Wordpress login attempts |
2020-02-18 14:40:23 |
| 69.51.23.10 | attackbots | http://purecbdoil.meetonline.online/t?v=sjuiDg0stoFlMDb5wMRcNrpw7%2Bmn8WiDS6Il5qQBlOV6v9TjNMzcuMKYDkLGqYUcrvbH%2Fvwsy0OeQLEXsRbnw7l77xOS0urJXUGS27a5iBDUa%2BWdaNW4hh8KridPPMFUDorwR%2FLcyVwXUbvZ4X57YQsbYq50UQGaFVn0nWvhng6%2BOgkOnj%2FDfiNa%2F4cViVTS0Otn2agskQk9mKAxTw%2FzeQ4FR4GEO5OYIiTUOIUV47Yis15k8thVRuMuFRXmG7cbbZiDGmwmZAweufdKbzsIEsNc2uOBbrsGceeW0BvWHUo7yFyIyjRx%2BXFFrxvtba%2FRd7jqEChOTm6ldC4CPEbzqoz56jOwuLyS%2F8AQwZ14d36cHO1PA%2FNcsGAwj5n53Bzu |
2020-02-18 14:12:28 |
| 222.186.52.139 | attack | 2020-02-17T22:44:32.907547homeassistant sshd[4629]: Failed password for root from 222.186.52.139 port 64062 ssh2 2020-02-18T06:19:48.029053homeassistant sshd[10304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.139 user=root ... |
2020-02-18 14:36:36 |
| 180.101.125.226 | attackspambots | Invalid user serveur from 180.101.125.226 port 49462 |
2020-02-18 14:22:43 |
| 189.4.1.12 | attackspambots | 2020-02-18T05:57:14.037244 sshd[21314]: Invalid user teamspeak from 189.4.1.12 port 42012 2020-02-18T05:57:14.052282 sshd[21314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.4.1.12 2020-02-18T05:57:14.037244 sshd[21314]: Invalid user teamspeak from 189.4.1.12 port 42012 2020-02-18T05:57:16.323090 sshd[21314]: Failed password for invalid user teamspeak from 189.4.1.12 port 42012 ssh2 ... |
2020-02-18 14:10:17 |
| 67.205.12.204 | attack | Automatic report - XMLRPC Attack |
2020-02-18 14:11:29 |
| 110.170.211.162 | attack | unauthorized connection attempt |
2020-02-18 14:42:39 |