City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 68.83.66.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26714
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;68.83.66.134. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024121000 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 10 15:56:07 CST 2024
;; MSG SIZE rcvd: 105134.66.83.68.in-addr.arpa domain name pointer c-68-83-66-134.hsd1.nj.comcast.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
134.66.83.68.in-addr.arpa name = c-68-83-66-134.hsd1.nj.comcast.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 117.79.152.238 | attack | Brute forcing RDP port 3389 |
2020-08-11 18:19:45 |
| 221.195.1.201 | attackbotsspam | Invalid user com from 221.195.1.201 port 49800 |
2020-08-11 18:54:40 |
| 69.171.251.119 | attack | [Tue Aug 11 10:49:25.609140 2020] [:error] [pid 19073:tid 140057356908288] [client 69.171.251.119:61404] [client 69.171.251.119] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/OneSignalSDKWorker.js"] [unique_id "XzIVRQItzlV1MKh79GOpigABEAM"], referer: https://karangploso.jatim.bmkg.go.id/ ... |
2020-08-11 18:24:49 |
| 154.211.13.224 | attack | sshd jail - ssh hack attempt |
2020-08-11 18:13:00 |
| 49.233.183.15 | attackbotsspam | Aug 11 09:59:30 eventyay sshd[3084]: Failed password for root from 49.233.183.15 port 36170 ssh2 Aug 11 10:02:43 eventyay sshd[3141]: Failed password for root from 49.233.183.15 port 39240 ssh2 ... |
2020-08-11 18:23:21 |
| 110.137.39.118 | attackspam | 1597117716 - 08/11/2020 05:48:36 Host: 110.137.39.118/110.137.39.118 Port: 445 TCP Blocked |
2020-08-11 18:49:41 |
| 195.154.43.232 | attack | 195.154.43.232 - - [11/Aug/2020:11:06:30 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 195.154.43.232 - - [11/Aug/2020:11:06:31 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 195.154.43.232 - - [11/Aug/2020:11:06:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-11 18:27:03 |
| 146.88.240.4 | attackspambots | 146.88.240.4 was recorded 16 times by 4 hosts attempting to connect to the following ports: 27017,27018,28015,500,6881,51413,5060. Incident counter (4h, 24h, all-time): 16, 74, 84069 |
2020-08-11 18:31:15 |
| 106.53.207.227 | attackbotsspam | Aug 11 05:44:40 havingfunrightnow sshd[21998]: Failed password for root from 106.53.207.227 port 49606 ssh2 Aug 11 05:47:15 havingfunrightnow sshd[22090]: Failed password for root from 106.53.207.227 port 45884 ssh2 ... |
2020-08-11 18:21:19 |
| 87.251.74.30 | attack |
|
2020-08-11 18:48:29 |
| 187.217.79.94 | attack | Aug 11 10:38:59 vps647732 sshd[13441]: Failed password for root from 187.217.79.94 port 56858 ssh2 ... |
2020-08-11 18:34:20 |
| 85.26.143.66 | attackbots | Dovecot Invalid User Login Attempt. |
2020-08-11 18:53:24 |
| 195.122.226.164 | attack | Fail2Ban - SSH Bruteforce Attempt |
2020-08-11 18:52:24 |
| 203.162.54.246 | attackbotsspam | SSH |
2020-08-11 18:13:44 |
| 139.59.153.133 | attack | xmlrpc attack |
2020-08-11 18:30:36 |