城市(city): unknown
省份(region): unknown
国家(country): Indonesia
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.54.5.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27197
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;117.54.5.20. IN A
;; AUTHORITY SECTION:
. 544 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022202 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 23 13:14:57 CST 2022
;; MSG SIZE rcvd: 10420.5.54.117.in-addr.arpa domain name pointer ezweb02.oncloud.co.id.
20.5.54.117.in-addr.arpa domain name pointer ezw02-outboundmail.oncloud.co.id.
20.5.54.117.in-addr.arpa domain name pointer ns2.ezweb.oncloud.co.id.
20.5.54.117.in-addr.arpa domain name pointer ns1.hosting.indo.net.id.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
20.5.54.117.in-addr.arpa name = ezweb02.oncloud.co.id.
20.5.54.117.in-addr.arpa name = ezw02-outboundmail.oncloud.co.id.
20.5.54.117.in-addr.arpa name = ns2.ezweb.oncloud.co.id.
20.5.54.117.in-addr.arpa name = ns1.hosting.indo.net.id.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 107.172.61.124 | attack | (From HildaSutton982@gmail.com) Hi there! I'm a mobile app developer that can design and program on any platform (Android, iOs, etc). If you already have ideas in mind, I'd love to hear about them. I also have ideas of my own that I'd really love to share with you. Different types of apps can assist your business whether in terms of marketing, business efficiency or both. I can design and program on any platform (Android, iOs), and I wanted to know if you'd like to have an app built for our business for an affordable price. I have some ideas that I'd really like to share with you of things that have worked really well for my other clients. I'd like to also hear about your ideas, so we can collaborate and make them all possible. I'd really like to discuss more about this with you if you're interested in my services. Kindly write back to let me know what you think. I hope to speak with you soon! Sincerely, Hilda Sutton |
2019-11-18 14:23:45 |
| 52.73.169.169 | attackspambots | 11/18/2019-05:52:08.459904 52.73.169.169 Protocol: 17 ET CINS Active Threat Intelligence Poor Reputation IP group 53 |
2019-11-18 14:14:10 |
| 78.47.157.226 | attack | Nov 18 06:58:04 mc1 kernel: \[5342943.802445\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=78.47.157.226 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=TCP SPT=50942 DPT=2376 WINDOW=65535 RES=0x00 SYN URGP=0 Nov 18 07:04:22 mc1 kernel: \[5343322.088256\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=78.47.157.226 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=TCP SPT=33452 DPT=4243 WINDOW=65535 RES=0x00 SYN URGP=0 Nov 18 07:06:06 mc1 kernel: \[5343425.643622\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=78.47.157.226 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=54321 PROTO=TCP SPT=51969 DPT=2375 WINDOW=65535 RES=0x00 SYN URGP=0 ... |
2019-11-18 14:06:41 |
| 104.194.9.11 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/104.194.9.11/ US - 1H : (274) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN23470 IP : 104.194.9.11 CIDR : 104.194.9.0/24 PREFIX COUNT : 215 UNIQUE IP COUNT : 55296 ATTACKS DETECTED ASN23470 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-18 05:52:29 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery |
2019-11-18 14:05:35 |
| 178.128.62.227 | attack | 178.128.62.227 - - \[18/Nov/2019:05:53:15 +0100\] "POST /wp-login.php HTTP/1.0" 200 6655 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 178.128.62.227 - - \[18/Nov/2019:05:53:19 +0100\] "POST /wp-login.php HTTP/1.0" 200 6493 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 178.128.62.227 - - \[18/Nov/2019:05:53:22 +0100\] "POST /wp-login.php HTTP/1.0" 200 6492 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-18 13:53:29 |
| 167.99.82.150 | attack | [Mon Nov 18 02:32:08.644305 2019] [:error] [pid 237242] [client 167.99.82.150:61000] [client 167.99.82.150] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ws22vmsma01.ufn.edu.br"] [uri "/"] [unique_id "XdIs2OmE1PKfya48cM40VgAAAAU"] ... |
2019-11-18 13:56:27 |
| 171.240.240.239 | attack | Automatic report - Port Scan Attack |
2019-11-18 14:14:51 |
| 150.136.201.200 | attack | Connection by 150.136.201.200 on port: 6380 got caught by honeypot at 11/18/2019 3:52:05 AM |
2019-11-18 14:18:23 |
| 60.168.173.80 | attack | Bad Postfix AUTH attempts ... |
2019-11-18 13:53:44 |
| 45.227.253.210 | attackspambots | Nov 18 06:46:09 andromeda postfix/smtpd\[51922\]: warning: unknown\[45.227.253.210\]: SASL LOGIN authentication failed: authentication failure Nov 18 06:46:10 andromeda postfix/smtpd\[46792\]: warning: unknown\[45.227.253.210\]: SASL LOGIN authentication failed: authentication failure Nov 18 06:46:11 andromeda postfix/smtpd\[45536\]: warning: unknown\[45.227.253.210\]: SASL LOGIN authentication failed: authentication failure Nov 18 06:46:12 andromeda postfix/smtpd\[51922\]: warning: unknown\[45.227.253.210\]: SASL LOGIN authentication failed: authentication failure Nov 18 06:47:01 andromeda postfix/smtpd\[34612\]: warning: unknown\[45.227.253.210\]: SASL LOGIN authentication failed: authentication failure |
2019-11-18 13:47:21 |
| 167.172.139.65 | attack | 167.172.139.65 - - [18/Nov/2019:05:53:47 +0100] "POST /wp-login.php HTTP/1.1" 200 3123 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.172.139.65 - - [18/Nov/2019:05:53:48 +0100] "POST /wp-login.php HTTP/1.1" 200 3102 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-11-18 13:45:25 |
| 51.83.71.72 | attackbotsspam | Nov 18 03:57:13 heicom postfix/smtpd\[22537\]: warning: 72.ip-51-83-71.eu\[51.83.71.72\]: SASL LOGIN authentication failed: authentication failure Nov 18 04:45:29 heicom postfix/smtpd\[2581\]: warning: 72.ip-51-83-71.eu\[51.83.71.72\]: SASL LOGIN authentication failed: authentication failure Nov 18 04:51:40 heicom postfix/smtpd\[32701\]: warning: 72.ip-51-83-71.eu\[51.83.71.72\]: SASL LOGIN authentication failed: authentication failure Nov 18 05:15:29 heicom postfix/smtpd\[3675\]: warning: 72.ip-51-83-71.eu\[51.83.71.72\]: SASL LOGIN authentication failed: authentication failure Nov 18 05:46:16 heicom postfix/smtpd\[3911\]: warning: 72.ip-51-83-71.eu\[51.83.71.72\]: SASL LOGIN authentication failed: authentication failure ... |
2019-11-18 14:26:36 |
| 63.88.23.220 | attackspam | 63.88.23.220 was recorded 10 times by 6 hosts attempting to connect to the following ports: 80. Incident counter (4h, 24h, all-time): 10, 35, 178 |
2019-11-18 14:11:41 |
| 107.170.250.165 | attackspam | Nov 18 04:52:23 thevastnessof sshd[21100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.250.165 ... |
2019-11-18 14:08:36 |
| 118.165.110.37 | attackbotsspam | " " |
2019-11-18 13:57:18 |