城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 11.70.120.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37637
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;11.70.120.140. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024010601 1800 900 604800 86400
;; Query time: 95 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 07 04:09:19 CST 2024
;; MSG SIZE rcvd: 106Host 140.120.70.11.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 140.120.70.11.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 216.218.206.113 | attackspambots | 2323/tcp 8443/tcp 7547/tcp... [2019-11-03/12-31]37pkt,11pt.(tcp),2pt.(udp) |
2019-12-31 18:06:15 |
| 60.219.147.191 | attackspam | Scanning |
2019-12-31 18:25:28 |
| 14.170.57.177 | attackbots | 19/12/31@01:12:48: FAIL: Alarm-Network address from=14.170.57.177 19/12/31@01:12:48: FAIL: Alarm-Network address from=14.170.57.177 19/12/31@01:12:51: FAIL: Alarm-Network address from=14.170.57.177 ... |
2019-12-31 17:52:49 |
| 106.54.253.110 | attackspam | Dec 31 08:33:13 mail1 sshd[8612]: Invalid user siedentop from 106.54.253.110 port 56642 Dec 31 08:33:13 mail1 sshd[8612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.253.110 Dec 31 08:33:15 mail1 sshd[8612]: Failed password for invalid user siedentop from 106.54.253.110 port 56642 ssh2 Dec 31 08:33:15 mail1 sshd[8612]: Received disconnect from 106.54.253.110 port 56642:11: Bye Bye [preauth] Dec 31 08:33:15 mail1 sshd[8612]: Disconnected from 106.54.253.110 port 56642 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=106.54.253.110 |
2019-12-31 18:11:11 |
| 182.140.235.143 | attack | Dec 31 07:24:03 debian-2gb-nbg1-2 kernel: \[32778.437660\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=182.140.235.143 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=60216 PROTO=TCP SPT=40030 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-31 18:31:49 |
| 45.136.108.121 | attack | Dec 31 11:06:13 debian-2gb-nbg1-2 kernel: \[46108.215993\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.136.108.121 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=50289 PROTO=TCP SPT=58148 DPT=3448 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-31 18:29:19 |
| 37.187.134.139 | attackbotsspam | [Tue Dec 31 05:23:14.361944 2019] [:error] [pid 13397] [client 37.187.134.139:61000] [client 37.187.134.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ws24vmsma01.ufn.edu.br"] [uri "/"] [unique_id "XgsFct-kvwySVaVF-4SOfAAAAAE"] ... |
2019-12-31 18:19:18 |
| 112.85.42.180 | attackspambots | Dec 31 09:56:31 124388 sshd[5436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.180 user=root Dec 31 09:56:33 124388 sshd[5436]: Failed password for root from 112.85.42.180 port 12742 ssh2 Dec 31 09:56:47 124388 sshd[5436]: error: maximum authentication attempts exceeded for root from 112.85.42.180 port 12742 ssh2 [preauth] Dec 31 09:56:51 124388 sshd[5439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.180 user=root Dec 31 09:56:54 124388 sshd[5439]: Failed password for root from 112.85.42.180 port 34371 ssh2 |
2019-12-31 18:17:22 |
| 139.219.0.20 | attackbots | Dec 31 00:35:12 server sshd\[13736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.20 user=root Dec 31 00:35:14 server sshd\[13736\]: Failed password for root from 139.219.0.20 port 38874 ssh2 Dec 31 11:19:24 server sshd\[3351\]: Invalid user smmsp from 139.219.0.20 Dec 31 11:19:25 server sshd\[3351\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.20 Dec 31 11:19:26 server sshd\[3351\]: Failed password for invalid user smmsp from 139.219.0.20 port 34424 ssh2 ... |
2019-12-31 18:14:43 |
| 188.166.232.29 | attackbotsspam | Invalid user abbacuccio from 188.166.232.29 port 49608 |
2019-12-31 18:04:44 |
| 94.177.213.114 | attackbots | Invalid user ajao from 94.177.213.114 port 43424 |
2019-12-31 18:15:12 |
| 188.165.215.138 | attackbotsspam | \[2019-12-31 05:19:40\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-31T05:19:40.398-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441902933947",SessionID="0x7f0fb4722f98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/188.165.215.138/52986",ACLName="no_extension_match" \[2019-12-31 05:21:45\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-31T05:21:45.744-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441902933947",SessionID="0x7f0fb4722f98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/188.165.215.138/64770",ACLName="no_extension_match" \[2019-12-31 05:24:08\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-31T05:24:08.288-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="00441902933947",SessionID="0x7f0fb4a5a908",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/188.165.215.138/57519",ACLName=" |
2019-12-31 18:33:08 |
| 77.147.91.221 | attack | 2019-12-31T06:21:41.163924abusebot-6.cloudsearch.cf sshd[25324]: Invalid user shellz from 77.147.91.221 port 47006 2019-12-31T06:21:41.169564abusebot-6.cloudsearch.cf sshd[25324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.91.147.77.rev.sfr.net 2019-12-31T06:21:41.163924abusebot-6.cloudsearch.cf sshd[25324]: Invalid user shellz from 77.147.91.221 port 47006 2019-12-31T06:21:43.508973abusebot-6.cloudsearch.cf sshd[25324]: Failed password for invalid user shellz from 77.147.91.221 port 47006 ssh2 2019-12-31T06:23:40.908191abusebot-6.cloudsearch.cf sshd[25424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.91.147.77.rev.sfr.net user=root 2019-12-31T06:23:42.587130abusebot-6.cloudsearch.cf sshd[25424]: Failed password for root from 77.147.91.221 port 59620 ssh2 2019-12-31T06:24:43.641191abusebot-6.cloudsearch.cf sshd[25476]: Invalid user squid from 77.147.91.221 port 38622 ... |
2019-12-31 18:11:41 |
| 222.252.43.5 | attack | 19/12/31@01:14:02: FAIL: Alarm-Network address from=222.252.43.5 19/12/31@01:14:02: FAIL: Alarm-Network address from=222.252.43.5 19/12/31@01:14:05: FAIL: Alarm-Network address from=222.252.43.5 ... |
2019-12-31 17:58:00 |
| 103.129.221.62 | attackbots | Dec 31 13:24:03 webhost01 sshd[20933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.129.221.62 Dec 31 13:24:04 webhost01 sshd[20933]: Failed password for invalid user reiland from 103.129.221.62 port 41964 ssh2 ... |
2019-12-31 18:30:55 |