City: Whangarei
Region: Northland
Country: New Zealand
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.112.63.61
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44360
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.112.63.61. IN A
;; AUTHORITY SECTION:
. 403 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022112902 1800 900 604800 86400
;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 30 10:28:20 CST 2022
;; MSG SIZE rcvd: 10561.63.112.45.in-addr.arpa domain name pointer 45-112-63-61.broadband.ubernet.co.nz.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
61.63.112.45.in-addr.arpa name = 45-112-63-61.broadband.ubernet.co.nz.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.237.226.44 | spamattack | 104.237.226.44 - - [13/May/2019:10:14:27 +0800] "POST /check-ip/173.213.132.149 HTTP/1.1" 400 142 "-" "Mozilla/4.0 (compatible; MSIE 6.0; MS Web Services Client Protocol 4.0.30319.17929)" 104.237.226.44 - - [13/May/2019:10:14:30 +0800] "POST / HTTP/1.1" 400 142 "-" "Mozilla/4.0 (compatible; MSIE 6.0; MS Web Services Client Protocol 4.0.30319.17929)" |
2019-05-13 10:19:35 |
| 124.235.138.144 | bots | 124.235.138.144 - - [23/May/2019:12:41:36 +0800] "GET /favicon.ico HTTP/1.1" 200 4286 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 101.249.227.246 - - [23/May/2019:12:41:36 +0800] "GET /favicon.ico HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 101.249.227.246 - - [23/May/2019:12:41:37 +0800] "GET /favicon.ico HTTP/1.1" 200 4286 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 101.249.227.246 - - [23/May/2019:12:41:38 +0800] "GET /home/favicon.ico HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" 101.249.227.246 - - [23/May/2019:12:41:39 +0800] "GET /home/favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko" 124.235.138.144 - - [23/May/2019:12:41:42 +0800] "GET /home/favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" |
2019-05-23 13:08:18 |
| 46.248.189.244 | bots | 46.248.189.244 - - [22/May/2019:18:13:37 +0800] "GET /check-ip/102.165.36.235 HTTP/1.1" 200 10125 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:54.0) Gecko/20100101 Firefox/54.0" |
2019-05-22 18:15:23 |
| 31.184.238.211 | spam | 垃圾评论 |
2019-05-13 09:27:19 |
| 195.154.183.53 | attack | The offending parameter was "--30e4a130ae8b343fec4c347041c030a5 Content-Disposition:_form-data;_name" with a value of ""action" upload --30e4a130ae8b343fec4c347041c030a5 Content-Disposition: form-data; name="upload-dir" ../ --30e4a130ae8b343fec4c347041c030a5 Content-Disposition: form-data; name="upload-overwrite" 0 --30e4a130ae8b343fec4c347041c030a5 Content-Disposition: form-data; name="Filedata"; filename="pwn.gif" --30e4a130ae8b343fec4c347041c030a5-- ". |
2019-06-09 04:58:28 |
| 54.36.33.20 | botsattack | 54.36.33.20 - - [27/May/2019:09:09:30 +0800] "GET /?q=node/add HTTP/1.1" 200 3321 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36" 54.36.33.20 - - [27/May/2019:09:09:31 +0800] "GET /?q=user HTTP/1.1" 200 3320 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36" 54.36.33.20 - - [27/May/2019:09:09:31 +0800] "GET /check-ip/103.118.112.110 HTTP/1.1" 200 9969 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36" 54.36.33.20 - - [27/May/2019:09:09:32 +0800] "GET /?q=user/register HTTP/1.1" 200 3324 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36" 54.36.33.20 - - [27/May/2019:09:09:32 +0800] "GET /check-ip/191.172.216.105 HTTP/1.1" 200 9968 "https://ipinfo.asytech.cn/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36" |
2019-05-27 09:25:46 |
| 217.26.130.173 | normal | normal ip |
2019-05-25 07:40:37 |
| 134.175.123.16 | attack | May 21 01:42:33 s64-1 sshd[7561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.123.16 May 21 01:42:35 s64-1 sshd[7561]: Failed password for invalid user postgres from 134.175.123.16 port 33900 ssh2 May 21 01:49:41 s64-1 sshd[7674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.123.16 |
2019-05-21 10:06:46 |
| 171.120.31.195 | attack | 171.120.31.195 - - [10/May/2019:14:21:19 +0800] "GET /../../../../../../../../../../../etc/passwd HTTP/1.1" 400 182 "-" "-" |
2019-05-10 14:22:51 |
| 190.30.242.57 | attack | May 23 08:20:03 mail sshd\\[16706\\]: pam_unix\\(sshd:auth\\): authentication failure\\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.30.242.57 user=root May 23 08:20:05 mail sshd\\[16706\\]: Failed password for root from 190.30.242.57 port 47714 ssh2 May 23 08:20:12 mail sshd\\[16706\\]: Failed password for root from 190.30.242.57 port 47714 ssh2 |
2019-05-25 07:32:28 |
| 205.251.150.194 | botsattack | 205.251.150.194 - - [21/May/2019:08:52:31 +0800] "GET /shop/index.php?l=page_view&p=advanced_search HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows; U; Windows NT 2.0) Gecko/20091201 Firefox/3.5.6 GTB5" 205.251.150.194 - - [21/May/2019:08:52:34 +0800] "GET /shop/index.php?l=page_view&p=advanced_search HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows; U; Windows NT 2.0) Gecko/20091201 Firefox/3.5.6 GTB5" 205.251.150.194 - - [21/May/2019:08:52:35 +0800] "GET /ss/index.php?l=page_view&p=advanced_search HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows; U; Windows NT 2.0) Gecko/20091201 Firefox/3.5.6 GTB5" 205.251.150.194 - - [21/May/2019:08:52:37 +0800] "GET /ss/index.php?l=page_view&p=advanced_search HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows; U; Windows NT 2.0) Gecko/20091201 Firefox/3.5.6 GTB5" |
2019-05-21 08:53:56 |
| 185.175.208.208 | botsattack | 185.175.208.208 - - [30/May/2019:14:40:50 +0800] "GET /language/en-GB/en-GB.xml HTTP/2.0" 404 299 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0" 185.175.208.208 - - [30/May/2019:14:40:51 +0800] "GET /misc/drupal.js HTTP/2.0" 404 299 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0" 185.175.208.208 - - [30/May/2019:14:40:51 +0800] "GET /core/CHANGELOG.txt HTTP/2.0" 404 299 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0" 185.175.208.208 - - [30/May/2019:14:40:51 +0800] "GET /CHANGELOG.txt HTTP/2.0" 404 299 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0" 185.175.208.208 - - [30/May/2019:14:40:51 +0800] "GET /core/misc/drupal.js HTTP/2.0" 404 299 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Firefox/60.0" |
2019-05-30 14:47:48 |
| 121.138.174.176 | attack | May 6 17:49:14 mail sshd\\[17774\\]: Invalid user admin from 121.138.174.176\\ May 6 17:49:15 mail sshd\\[17774\\]: Failed password for invalid user admin from 121.138.174.176 port 47833 ssh2\\ May 6 17:49:17 mail sshd\\[17774\\]: Failed password for invalid user admin from 121.138.174.176 port 47833 ssh2\\ May 6 17:49:19 mail sshd\\[17774\\]: Failed password for invalid user admin from 121.138.174.176 port 47833 ssh2\\ May 6 17:49:21 mail sshd\\[17774\\]: Failed password for invalid user admin from 121.138.174.176 port 47833 ssh2\\ May 6 17:49:23 mail sshd\\[17774\\]: Failed password for invalid user admin from 121.138.174.176 port 47833 ssh2\\ |
2019-05-25 07:34:15 |
| 222.82.54.150 | botsattack | 222.82.54.150 - - [19/May/2019:13:55:53 +0800] "GET /home.asp HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" 222.82.54.150 - - [19/May/2019:13:55:55 +0800] "GET /images/logo.gif HTTP/1.1" 301 194 "-" "-" 222.82.54.150 - - [19/May/2019:13:55:56 +0800] "GET /fdsrwe HTTP/1.1" 301 194 "-" "-" 222.82.54.150 - - [19/May/2019:13:55:57 +0800] "GET /qnfxcjqr HTTP/1.1" 400 182 "-" "-" 222.82.54.150 - - [19/May/2019:13:56:07 +0800] "GET /winbox.png HTTP/1.1" 301 194 "-" "-" 222.82.54.150 - - [19/May/2019:13:56:09 +0800] "GET /login.html HTTP/1.1" 301 194 "-" "-" 222.82.54.150 - - [19/May/2019:13:56:09 +0800] "GET /device_description.xml HTTP/1.1" 301 194 "-" "-" 222.82.54.150 - - [19/May/2019:13:56:09 +0800] "GET /cgi-bin/user/Config.cgi?.cab&action=get&category=Account.* HTTP/1.1" 301 194 "-" "-" 222.82.54.150 - - [19/May/2019:13:56:09 +0800] "GET /current_config/passwd HTTP/1.1" 301 194 "-" "-" 222.82.54.150 - - [19/May/2019:13:56:11 +0800] "GET /cgi-bin/nobody/Machine.cgi?action=get_capability HTTP/1.1" 301 194 "-" "-" 222.82.54.150 - - [19/May/2019:13:56:11 +0800] "GET /index.asp HTTP/1.1" 301 194 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko" |
2019-05-19 14:01:20 |
| 196.247.213.149 | botsattack | 196.247.213.149 - - [20/May/2019:21:04:16 +0800] "GET /check-ip/index.php?option=com_user&task=register HTTP/1.1" 200 9682 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" 196.247.213.149 - - [20/May/2019:21:04:20 +0800] "GET /check-ip/modules.php?name=Your_Account HTTP/1.1" 200 9686 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" 196.247.213.149 - - [20/May/2019:21:04:22 +0800] "GET /check-ip/member/ HTTP/1.1" 200 9676 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" 196.247.213.149 - - [20/May/2019:21:04:24 +0800] "GET /check-ip/index.php?act=dispMemberLoginForm HTTP/1.1" 200 9682 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" 196.247.213.149 - - [20/May/2019:21:04:28 +0800] "GET /check-ip/yabb.pl HTTP/1.1" 200 9678 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" 196.247.213.149 - - [20/May/2019:21:04:29 +0800] "GET /check-ip/YaBB.cgi HTTP/1.1" 200 9680 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" 196.247.213.149 - - [20/May/2019:21:04:33 +0800] "GET /check-ip/bbs.cgi HTTP/1.1" 200 9678 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" 196.247.213.149 - - [20/May/2019:21:04:37 +0800] "GET /check-ip/light.cgi HTTP/1.1" 200 9682 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" 196.247.213.149 - - [20/May/2019:21:04:39 +0800] "GET /check-ip/CGI/guestbook?page=1 HTTP/1.1" 404 232 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" |
2019-05-20 21:13:19 |