城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.16.227.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15208
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.16.227.72. IN A
;; AUTHORITY SECTION:
. 60 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021601 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 04:46:03 CST 2022
;; MSG SIZE rcvd: 106
Host 72.227.16.104.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 72.227.16.104.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 207.180.239.164 | attackbotsspam | [Mon Apr 27 12:14:08.253986 2020] [:error] [pid 14606:tid 139751813748480] [client 207.180.239.164:61000] [client 207.180.239.164] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "972"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/PROTOCOL_NOT_ALLOWED"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "XqZqIGQbTDdQEs9lf0xXDgAAAfA"]
... |
2020-04-27 13:49:24 |
| 45.248.70.135 | attack | ... |
2020-04-27 13:53:35 |
| 31.208.166.61 | attackspambots | 20/4/26@23:57:31: FAIL: IoT-Telnet address from=31.208.166.61 20/4/26@23:57:31: FAIL: IoT-Telnet address from=31.208.166.61 20/4/26@23:57:31: FAIL: IoT-Telnet address from=31.208.166.61 ... |
2020-04-27 14:03:14 |
| 128.199.228.179 | attackbotsspam | Apr 27 06:47:16 vps sshd[1010202]: Failed password for root from 128.199.228.179 port 57525 ssh2 Apr 27 06:48:32 vps sshd[1015629]: Invalid user zhangx from 128.199.228.179 port 36096 Apr 27 06:48:32 vps sshd[1015629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.228.179 Apr 27 06:48:34 vps sshd[1015629]: Failed password for invalid user zhangx from 128.199.228.179 port 36096 ssh2 Apr 27 06:49:49 vps sshd[1021498]: Invalid user admin from 128.199.228.179 port 42900 ... |
2020-04-27 14:14:28 |
| 178.128.239.153 | attackspam | k+ssh-bruteforce |
2020-04-27 14:08:25 |
| 222.186.30.57 | attackbots | Unauthorized connection attempt detected from IP address 222.186.30.57 to port 22 [T] |
2020-04-27 14:33:32 |
| 162.14.22.99 | attack | [ssh] SSH attack |
2020-04-27 14:24:25 |
| 107.170.244.110 | attackspambots | SSH brute-force attempt |
2020-04-27 14:13:38 |
| 110.43.50.221 | attackspam | Apr 27 07:05:25 server sshd[18834]: Failed password for root from 110.43.50.221 port 27080 ssh2 Apr 27 07:08:35 server sshd[19859]: Failed password for root from 110.43.50.221 port 65236 ssh2 Apr 27 07:11:44 server sshd[20961]: Failed password for invalid user luz from 110.43.50.221 port 38936 ssh2 |
2020-04-27 14:17:56 |
| 124.205.139.75 | attack | Apr 27 05:56:59 host dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user= |
2020-04-27 14:22:45 |
| 185.58.192.194 | attackspambots | 5x Failed Password |
2020-04-27 14:26:52 |
| 138.68.82.194 | attackbots | Apr 27 07:01:29 server sshd[35885]: Failed password for root from 138.68.82.194 port 59982 ssh2 Apr 27 07:05:48 server sshd[39349]: Failed password for invalid user lby from 138.68.82.194 port 43170 ssh2 Apr 27 07:09:51 server sshd[42243]: Failed password for invalid user admin from 138.68.82.194 port 54588 ssh2 |
2020-04-27 13:51:50 |
| 89.187.178.234 | attackspam | (From ohman.lashunda@gmail.com) Good Day, We were just visiting your website and decided to reach out through your contact form. We’d like to take a moment to introduce ourselves: We are Stephanie Toth & Sandor Urban, Realtors with Keller Williams Realty and we are experts in the Florida market. Did someone say property matchmaker? Within the current, unique situation GREAT opportunities are to be found. It is our job to stay on top of the Florida housing market. Perhaps you are ready to up/downscale to a different property and we will be more than glad to help you. Here's why you will love working with us: * Innovative Marketing & Search Techniques * Local Expertise * Terrific Communication * Expert Negotiators * Detail Oriented * Time Efficient Call us for a free 15-minute consultation between 8am and 8pm: (305) 363-2712 Or simply email us: sandor.urban@kw.com https://bit.ly/MiamiProRealtor-com https://bit.ly/sandorurbanrealtor We hope you are staying safe out there! Stepha |
2020-04-27 13:59:16 |
| 150.109.150.77 | attackbotsspam | Invalid user arnon from 150.109.150.77 port 52142 |
2020-04-27 14:04:34 |
| 13.67.51.182 | attackbots | Apr 27 05:46:19 ns382633 sshd\[8317\]: Invalid user ljs from 13.67.51.182 port 41786 Apr 27 05:46:19 ns382633 sshd\[8317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.67.51.182 Apr 27 05:46:21 ns382633 sshd\[8317\]: Failed password for invalid user ljs from 13.67.51.182 port 41786 ssh2 Apr 27 05:56:55 ns382633 sshd\[10246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.67.51.182 user=root Apr 27 05:56:57 ns382633 sshd\[10246\]: Failed password for root from 13.67.51.182 port 47526 ssh2 |
2020-04-27 14:31:29 |