城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 11.242.139.43
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59557
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;11.242.139.43. IN A
;; AUTHORITY SECTION:
. 208 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024010601 1800 900 604800 86400
;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 07 04:52:22 CST 2024
;; MSG SIZE rcvd: 106Host 43.139.242.11.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 43.139.242.11.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 112.85.42.237 | attackbots | Aug 28 14:24:54 home sshd[2040684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.237 user=root Aug 28 14:24:56 home sshd[2040684]: Failed password for root from 112.85.42.237 port 61477 ssh2 Aug 28 14:24:54 home sshd[2040684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.237 user=root Aug 28 14:24:56 home sshd[2040684]: Failed password for root from 112.85.42.237 port 61477 ssh2 Aug 28 14:24:58 home sshd[2040684]: Failed password for root from 112.85.42.237 port 61477 ssh2 ... |
2020-08-28 20:38:44 |
| 106.54.224.217 | attackspam | Aug 28 14:21:02 meumeu sshd[511836]: Invalid user anni from 106.54.224.217 port 58380 Aug 28 14:21:02 meumeu sshd[511836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.224.217 Aug 28 14:21:02 meumeu sshd[511836]: Invalid user anni from 106.54.224.217 port 58380 Aug 28 14:21:04 meumeu sshd[511836]: Failed password for invalid user anni from 106.54.224.217 port 58380 ssh2 Aug 28 14:23:48 meumeu sshd[512067]: Invalid user lwc from 106.54.224.217 port 60504 Aug 28 14:23:48 meumeu sshd[512067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.224.217 Aug 28 14:23:48 meumeu sshd[512067]: Invalid user lwc from 106.54.224.217 port 60504 Aug 28 14:23:50 meumeu sshd[512067]: Failed password for invalid user lwc from 106.54.224.217 port 60504 ssh2 Aug 28 14:26:34 meumeu sshd[512175]: Invalid user family from 106.54.224.217 port 34390 ... |
2020-08-28 20:42:59 |
| 161.35.37.149 | attack | Aug 28 14:09:53 santamaria sshd\[12919\]: Invalid user emerson from 161.35.37.149 Aug 28 14:09:53 santamaria sshd\[12919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.37.149 Aug 28 14:09:55 santamaria sshd\[12919\]: Failed password for invalid user emerson from 161.35.37.149 port 38466 ssh2 ... |
2020-08-28 20:21:08 |
| 104.45.88.60 | attack | 2020-08-28T07:09:52.499031morrigan.ad5gb.com sshd[2853105]: Failed password for invalid user newuser from 104.45.88.60 port 43522 ssh2 2020-08-28T07:09:52.974595morrigan.ad5gb.com sshd[2853105]: Disconnected from invalid user newuser 104.45.88.60 port 43522 [preauth] |
2020-08-28 20:23:53 |
| 110.166.254.105 | attackspambots | Lines containing failures of 110.166.254.105 Aug 25 22:27:50 shared12 sshd[26756]: Invalid user casa from 110.166.254.105 port 41923 Aug 25 22:27:50 shared12 sshd[26756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.166.254.105 Aug 25 22:27:53 shared12 sshd[26756]: Failed password for invalid user casa from 110.166.254.105 port 41923 ssh2 Aug 25 22:27:54 shared12 sshd[26756]: Received disconnect from 110.166.254.105 port 41923:11: Bye Bye [preauth] Aug 25 22:27:54 shared12 sshd[26756]: Disconnected from invalid user casa 110.166.254.105 port 41923 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=110.166.254.105 |
2020-08-28 20:32:06 |
| 157.230.19.72 | attackbots | SSH bruteforce |
2020-08-28 20:38:30 |
| 113.162.60.210 | attackspam | Port scan: Attack repeated for 24 hours |
2020-08-28 20:35:15 |
| 91.82.85.85 | attack | 2020-08-28T16:24:40.852227paragon sshd[599273]: Failed password for invalid user sridhar from 91.82.85.85 port 59302 ssh2 2020-08-28T16:28:37.485420paragon sshd[599678]: Invalid user tian from 91.82.85.85 port 39182 2020-08-28T16:28:37.488100paragon sshd[599678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.82.85.85 2020-08-28T16:28:37.485420paragon sshd[599678]: Invalid user tian from 91.82.85.85 port 39182 2020-08-28T16:28:39.434581paragon sshd[599678]: Failed password for invalid user tian from 91.82.85.85 port 39182 ssh2 ... |
2020-08-28 20:41:31 |
| 157.230.190.1 | attackbotsspam | Aug 28 12:19:18 plex-server sshd[79922]: Failed password for root from 157.230.190.1 port 48372 ssh2 Aug 28 12:20:32 plex-server sshd[80279]: Invalid user icaro from 157.230.190.1 port 40302 Aug 28 12:20:32 plex-server sshd[80279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.190.1 Aug 28 12:20:32 plex-server sshd[80279]: Invalid user icaro from 157.230.190.1 port 40302 Aug 28 12:20:34 plex-server sshd[80279]: Failed password for invalid user icaro from 157.230.190.1 port 40302 ssh2 ... |
2020-08-28 20:34:30 |
| 89.187.168.160 | attackbots | (From mail@webbonafide.com) Hello, We provide Fully Managed Mobile Responsive Websites. We Understand Your Valuable time in your business. So, we write your contents, We Design, We Host and We maintain it for you and all that starting from Just for $9.99 a Month. (Billing Annually) STORE WEBSITE $20/Month We also provide Customize Web Design, Development and the following services, with client satisfaction and very reasonable rate. Our major service Offerings are in: • Small Business Website • Responsive Website Design /Re-Design • E-commerce Website Development • Enterprise Website Development • Custom Web Application Development • Mobile Website Development • Mobile App / Android & iOS Our main platforms for project development are: • PHP, Word Press, Magento, woo commerce, OpenCart, HTML5,CSS3 We would love to hear from you. drop me an email specifying your requirements so that we can discuss the possible synergies between us. Best Regards, Kevin WEB BONAFIDE Cal |
2020-08-28 20:45:10 |
| 111.229.190.8 | attack | 2020-08-28T07:09:56.552043morrigan.ad5gb.com sshd[2853108]: Failed password for daemon from 111.229.190.8 port 38128 ssh2 2020-08-28T07:09:58.207633morrigan.ad5gb.com sshd[2853108]: Disconnected from authenticating user daemon 111.229.190.8 port 38128 [preauth] |
2020-08-28 20:18:33 |
| 75.75.235.21 | attackbots | (From eric@talkwithwebvisitor.com) Hey there, I just found your site, quick question… My name’s Eric, I found docstone.com after doing a quick search – you showed up near the top of the rankings, so whatever you’re doing for SEO, looks like it’s working well. So here’s my question – what happens AFTER someone lands on your site? Anything? Research tells us at least 70% of the people who find your site, after a quick once-over, they disappear… forever. That means that all the work and effort you put into getting them to show up, goes down the tubes. Why would you want all that good work – and the great site you’ve built – go to waste? Because the odds are they’ll just skip over calling or even grabbing their phone, leaving you high and dry. But here’s a thought… what if you could make it super-simple for someone to raise their hand, say, “okay, let’s talk” without requiring them to even pull their cell phone from their pocket? You can – thanks to revolutionary new software that can l |
2020-08-28 20:08:19 |
| 40.117.121.234 | attackspambots | 40.117.121.234 - - [28/Aug/2020:13:09:57 +0100] "POST //wp-login.php HTTP/1.1" 200 3626 "https://wpeagledemoblog.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" 40.117.121.234 - - [28/Aug/2020:13:09:57 +0100] "POST //wp-login.php HTTP/1.1" 200 3626 "https://wpeagledemoblog.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" 40.117.121.234 - - [28/Aug/2020:13:09:57 +0100] "POST //wp-login.php HTTP/1.1" 200 3626 "https://wpeagledemoblog.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36" ... |
2020-08-28 20:20:39 |
| 185.220.102.6 | attackspam | [MK-VM6] SSH login failed |
2020-08-28 20:20:09 |
| 176.104.52.46 | attackspambots | [Fri Aug 28 19:09:57.341820 2020] [:error] [pid 23509:tid 139692145563392] [client 176.104.52.46:60686] [client 176.104.52.46] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "972"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/PROTOCOL_NOT_ALLOWED"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "X0j0FVHp-E@9Eo2JfVBiugAAAqM"], referer: https://karangploso.jatim.bmkg.go.id/
... |
2020-08-28 20:22:02 |