城市(city): unknown
省份(region): unknown
国家(country): Indonesia
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.140.66.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4583
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.140.66.14. IN A
;; AUTHORITY SECTION:
. 573 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020031800 1800 900 604800 86400
;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 18 18:31:06 CST 2020
;; MSG SIZE rcvd: 117Host 14.66.140.103.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 14.66.140.103.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 139.215.217.180 | attack | " " |
2019-09-24 02:03:38 |
| 173.232.14.82 | attackspambots | 173.232.14.82 - - [23/Sep/2019:08:16:33 -0400] "GET /?page=products&action=../../../../../../../../../etc/passwd&manufacturerID=1&productID=6501.15M&linkID=3128 HTTP/1.1" 200 17209 "https://baldwinbrasshardware.com/?page=products&action=../../../../../../../../../etc/passwd&manufacturerID=1&productID=6501.15M&linkID=3128" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" ... |
2019-09-24 02:33:26 |
| 178.128.21.113 | attackspambots | Sep 23 14:35:58 vpn01 sshd[8958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.21.113 Sep 23 14:36:00 vpn01 sshd[8958]: Failed password for invalid user db2inst1 from 178.128.21.113 port 55436 ssh2 |
2019-09-24 02:10:00 |
| 154.66.219.20 | attack | Sep 23 07:42:43 hanapaa sshd\[1510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.66.219.20 user=root Sep 23 07:42:45 hanapaa sshd\[1510\]: Failed password for root from 154.66.219.20 port 48784 ssh2 Sep 23 07:48:05 hanapaa sshd\[2022\]: Invalid user kx from 154.66.219.20 Sep 23 07:48:05 hanapaa sshd\[2022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.66.219.20 Sep 23 07:48:07 hanapaa sshd\[2022\]: Failed password for invalid user kx from 154.66.219.20 port 33832 ssh2 |
2019-09-24 02:21:06 |
| 182.61.42.224 | attackspambots | 2019-09-23T12:36:06.789701abusebot-5.cloudsearch.cf sshd\[387\]: Invalid user admin from 182.61.42.224 port 42488 |
2019-09-24 02:05:01 |
| 1.165.193.4 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/1.165.193.4/ TW - 1H : (2799) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TW NAME ASN : ASN3462 IP : 1.165.193.4 CIDR : 1.165.0.0/16 PREFIX COUNT : 390 UNIQUE IP COUNT : 12267520 WYKRYTE ATAKI Z ASN3462 : 1H - 273 3H - 1099 6H - 2229 12H - 2702 24H - 2711 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-09-24 02:26:52 |
| 114.118.91.32 | attackbotsspam | k+ssh-bruteforce |
2019-09-24 02:13:12 |
| 61.223.110.53 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/61.223.110.53/ TW - 1H : (2804) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TW NAME ASN : ASN3462 IP : 61.223.110.53 CIDR : 61.223.0.0/16 PREFIX COUNT : 390 UNIQUE IP COUNT : 12267520 WYKRYTE ATAKI Z ASN3462 : 1H - 278 3H - 1101 6H - 2232 12H - 2707 24H - 2716 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-09-24 02:12:42 |
| 78.37.178.202 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/78.37.178.202/ RU - 1H : (794) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : RU NAME ASN : ASN12389 IP : 78.37.178.202 CIDR : 78.37.128.0/17 PREFIX COUNT : 2741 UNIQUE IP COUNT : 8699648 WYKRYTE ATAKI Z ASN12389 : 1H - 32 3H - 114 6H - 265 12H - 325 24H - 330 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-09-24 02:07:31 |
| 1.164.170.49 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/1.164.170.49/ TW - 1H : (2798) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TW NAME ASN : ASN3462 IP : 1.164.170.49 CIDR : 1.164.0.0/16 PREFIX COUNT : 390 UNIQUE IP COUNT : 12267520 WYKRYTE ATAKI Z ASN3462 : 1H - 272 3H - 1098 6H - 2229 12H - 2701 24H - 2710 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-09-24 02:28:11 |
| 213.32.21.139 | attackspambots | Sep 23 09:15:30 Tower sshd[26714]: Connection from 213.32.21.139 port 60870 on 192.168.10.220 port 22 Sep 23 09:15:33 Tower sshd[26714]: Invalid user temp from 213.32.21.139 port 60870 Sep 23 09:15:33 Tower sshd[26714]: error: Could not get shadow information for NOUSER Sep 23 09:15:33 Tower sshd[26714]: Failed password for invalid user temp from 213.32.21.139 port 60870 ssh2 Sep 23 09:15:34 Tower sshd[26714]: Received disconnect from 213.32.21.139 port 60870:11: Bye Bye [preauth] Sep 23 09:15:34 Tower sshd[26714]: Disconnected from invalid user temp 213.32.21.139 port 60870 [preauth] |
2019-09-24 02:37:37 |
| 42.118.70.227 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/42.118.70.227/ VN - 1H : (382) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : VN NAME ASN : ASN18403 IP : 42.118.70.227 CIDR : 42.118.64.0/21 PREFIX COUNT : 2592 UNIQUE IP COUNT : 1397760 WYKRYTE ATAKI Z ASN18403 : 1H - 21 3H - 93 6H - 201 12H - 272 24H - 278 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-09-24 02:17:03 |
| 163.172.192.250 | attackbots | 2019-09-23T17:38:54.708171abusebot-8.cloudsearch.cf sshd\[16198\]: Invalid user exe from 163.172.192.250 port 35805 |
2019-09-24 01:59:02 |
| 159.65.6.57 | attack | Sep 23 13:26:25 web8 sshd\[25027\]: Invalid user reggello from 159.65.6.57 Sep 23 13:26:25 web8 sshd\[25027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.6.57 Sep 23 13:26:28 web8 sshd\[25027\]: Failed password for invalid user reggello from 159.65.6.57 port 51522 ssh2 Sep 23 13:31:13 web8 sshd\[27138\]: Invalid user lx from 159.65.6.57 Sep 23 13:31:13 web8 sshd\[27138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.6.57 |
2019-09-24 02:16:34 |
| 92.119.160.52 | attackspambots | 09/23/2019-14:09:20.439564 92.119.160.52 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-09-24 02:34:17 |