City: unknown
Region: unknown
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 77.1.61.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2555
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;77.1.61.5. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400
;; Query time: 31 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 23:36:45 CST 2025
;; MSG SIZE rcvd: 1025.61.1.77.in-addr.arpa domain name pointer dynamic-077-001-061-005.77.1.pool.telefonica.de.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
5.61.1.77.in-addr.arpa name = dynamic-077-001-061-005.77.1.pool.telefonica.de.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 83.48.77.4 | attackspam | [Tue Sep 24 04:11:57.405523 2019] [:error] [pid 27996:tid 139658000312064] [client 83.48.77.4:34088] [client 83.48.77.4] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.1.1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1075"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.1.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/POLICY/PROTOCOL_NOT_ALLOWED"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "XYk1HXEbL5xsyYG@6K-3hwAAAMU"]
... |
2019-09-24 05:23:02 |
| 86.102.177.131 | attackspam | Unauthorized connection attempt from IP address 86.102.177.131 on Port 445(SMB) |
2019-09-24 05:12:20 |
| 49.235.139.216 | attackbotsspam | Sep 23 11:01:18 wbs sshd\[19309\]: Invalid user zabbix from 49.235.139.216 Sep 23 11:01:18 wbs sshd\[19309\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.139.216 Sep 23 11:01:19 wbs sshd\[19309\]: Failed password for invalid user zabbix from 49.235.139.216 port 49536 ssh2 Sep 23 11:04:47 wbs sshd\[19609\]: Invalid user kuroiwa from 49.235.139.216 Sep 23 11:04:47 wbs sshd\[19609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.139.216 |
2019-09-24 05:06:48 |
| 192.126.158.224 | attackspam | 192.126.158.224 - - [23/Sep/2019:08:16:07 -0400] "GET /?page=products&action=../../../../../../../etc/passwd&manufacturerID=1&productID=6501.15M&linkID=3128 HTTP/1.1" 200 17209 "https://baldwinbrasshardware.com/?page=products&action=../../../../../../../etc/passwd&manufacturerID=1&productID=6501.15M&linkID=3128" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" ... |
2019-09-24 05:15:13 |
| 111.40.50.116 | attackspambots | 2019-09-23T14:11:57.909292suse-nuc sshd[6354]: Invalid user xt from 111.40.50.116 port 54504 ... |
2019-09-24 05:24:57 |
| 108.186.244.251 | attackspam | 108.186.244.251 - - [23/Sep/2019:08:16:19 -0400] "GET /?page=products&action=..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00&manufacturerID=1&productID=6501.15M&linkID=3128 HTTP/1.1" 200 17215 "https://baldwinbrasshardware.com/?page=products&action=..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00&manufacturerID=1&productID=6501.15M&linkID=3128" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" ... |
2019-09-24 05:12:04 |
| 173.234.225.39 | attackbotsspam | 173.234.225.39 - - [23/Sep/2019:08:16:16 -0400] "GET /?page=products&action=../../../../../../../etc/passwd%00&manufacturerID=1&productID=6501.15M&linkID=3128 HTTP/1.1" 200 17212 "https://baldwinbrasshardware.com/?page=products&action=../../../../../../../etc/passwd%00&manufacturerID=1&productID=6501.15M&linkID=3128" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" ... |
2019-09-24 05:12:47 |
| 167.71.10.240 | attackbots | Sep 23 16:44:23 ny01 sshd[28418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.10.240 Sep 23 16:44:24 ny01 sshd[28418]: Failed password for invalid user git from 167.71.10.240 port 34958 ssh2 Sep 23 16:50:34 ny01 sshd[29439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.10.240 |
2019-09-24 05:06:13 |
| 119.207.126.21 | attack | Sep 23 11:23:59 eddieflores sshd\[17819\]: Invalid user it from 119.207.126.21 Sep 23 11:23:59 eddieflores sshd\[17819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.207.126.21 Sep 23 11:24:01 eddieflores sshd\[17819\]: Failed password for invalid user it from 119.207.126.21 port 37570 ssh2 Sep 23 11:28:17 eddieflores sshd\[18163\]: Invalid user p from 119.207.126.21 Sep 23 11:28:17 eddieflores sshd\[18163\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.207.126.21 |
2019-09-24 05:37:50 |
| 45.236.131.227 | attackbotsspam | Email spam for this IP |
2019-09-24 05:08:29 |
| 67.169.43.162 | attackbotsspam | Sep 23 23:24:33 markkoudstaal sshd[14415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.169.43.162 Sep 23 23:24:35 markkoudstaal sshd[14415]: Failed password for invalid user mirc from 67.169.43.162 port 46390 ssh2 Sep 23 23:29:07 markkoudstaal sshd[14815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.169.43.162 |
2019-09-24 05:40:18 |
| 31.178.148.45 | attackbots | Spam Timestamp : 23-Sep-19 21:28 BlockList Provider combined abuse (866) |
2019-09-24 05:44:33 |
| 144.217.15.161 | attackspam | Sep 23 22:44:25 lnxded63 sshd[25235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.15.161 |
2019-09-24 05:13:03 |
| 222.186.52.124 | attackbots | Sep 23 17:15:06 plusreed sshd[15937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.124 user=root Sep 23 17:15:09 plusreed sshd[15937]: Failed password for root from 222.186.52.124 port 63218 ssh2 ... |
2019-09-24 05:21:15 |
| 79.136.57.191 | attackbots | port scan and connect, tcp 22 (ssh) |
2019-09-24 05:36:47 |