城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.137.107.135
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6921
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;118.137.107.135. IN A
;; AUTHORITY SECTION:
. 580 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400
;; Query time: 142 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 16:04:59 CST 2022
;; MSG SIZE rcvd: 108135.107.137.118.in-addr.arpa domain name pointer fm-dyn-118-137-107-135.fast.net.id.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
135.107.137.118.in-addr.arpa name = fm-dyn-118-137-107-135.fast.net.id.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 222.186.42.213 | attack | 2020-08-15T12:33:41.607071shield sshd\[19097\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.213 user=root 2020-08-15T12:33:43.489508shield sshd\[19097\]: Failed password for root from 222.186.42.213 port 18831 ssh2 2020-08-15T12:33:48.048077shield sshd\[19097\]: Failed password for root from 222.186.42.213 port 18831 ssh2 2020-08-15T12:33:50.495113shield sshd\[19097\]: Failed password for root from 222.186.42.213 port 18831 ssh2 2020-08-15T12:33:53.058599shield sshd\[19111\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.213 user=root |
2020-08-15 20:36:09 |
| 68.183.89.147 | attackbots | frenzy |
2020-08-15 20:33:10 |
| 49.88.65.83 | attack | spam |
2020-08-15 20:47:32 |
| 112.85.42.104 | attackbots | Aug 15 14:20:38 amit sshd\[1314\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.104 user=root Aug 15 14:20:40 amit sshd\[1314\]: Failed password for root from 112.85.42.104 port 28163 ssh2 Aug 15 14:20:47 amit sshd\[1317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.104 user=root ... |
2020-08-15 20:24:49 |
| 185.172.111.221 | attack | Unauthorised access (Aug 15) SRC=185.172.111.221 LEN=40 TTL=53 ID=13003 TCP DPT=8080 WINDOW=46923 SYN Unauthorised access (Aug 13) SRC=185.172.111.221 LEN=40 TTL=53 ID=34227 TCP DPT=8080 WINDOW=31720 SYN Unauthorised access (Aug 12) SRC=185.172.111.221 LEN=40 TTL=53 ID=36865 TCP DPT=8080 WINDOW=31720 SYN Unauthorised access (Aug 12) SRC=185.172.111.221 LEN=40 TTL=53 ID=24705 TCP DPT=8080 WINDOW=46923 SYN Unauthorised access (Aug 12) SRC=185.172.111.221 LEN=40 TTL=53 ID=5523 TCP DPT=8080 WINDOW=31720 SYN Unauthorised access (Aug 12) SRC=185.172.111.221 LEN=40 TTL=53 ID=39167 TCP DPT=8080 WINDOW=46923 SYN Unauthorised access (Aug 9) SRC=185.172.111.221 LEN=40 TTL=53 ID=60189 TCP DPT=8080 WINDOW=31720 SYN Unauthorised access (Aug 9) SRC=185.172.111.221 LEN=40 TTL=53 ID=24166 TCP DPT=8080 WINDOW=46923 SYN |
2020-08-15 20:43:25 |
| 141.8.15.95 | attackspam | Aug 15 20:25:24 itachi1706steam sshd[14708]: Invalid user pi from 141.8.15.95 port 38086 Aug 15 20:25:24 itachi1706steam sshd[14707]: Invalid user pi from 141.8.15.95 port 38084 Aug 15 20:25:24 itachi1706steam sshd[14708]: Connection closed by invalid user pi 141.8.15.95 port 38086 [preauth] ... |
2020-08-15 20:51:40 |
| 173.252.95.35 | attackspambots | [Sat Aug 15 19:25:50.690691 2020] [:error] [pid 3316:tid 140592583423744] [client 173.252.95.35:45702] [client 173.252.95.35] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-daerah-potensi-banjir-di-provinsi-jawa-timur/555558208-prakiraan-bulanan-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan-september-tahun-2020-update-10-agustus-2020"] [unique_id "XzfUTua0Xgxjnrgkau-8LgACeAM"] ... |
2020-08-15 20:38:36 |
| 122.51.37.133 | attackspambots | Aug 15 14:15:56 ns382633 sshd\[18292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.37.133 user=root Aug 15 14:15:58 ns382633 sshd\[18292\]: Failed password for root from 122.51.37.133 port 57096 ssh2 Aug 15 14:21:42 ns382633 sshd\[19211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.37.133 user=root Aug 15 14:21:44 ns382633 sshd\[19211\]: Failed password for root from 122.51.37.133 port 52472 ssh2 Aug 15 14:25:39 ns382633 sshd\[20051\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.37.133 user=root |
2020-08-15 20:42:55 |
| 106.52.56.26 | attack | 2020-08-15T12:20:58.703882shield sshd\[18311\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.56.26 user=root 2020-08-15T12:21:01.173473shield sshd\[18311\]: Failed password for root from 106.52.56.26 port 38958 ssh2 2020-08-15T12:23:35.151032shield sshd\[18487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.56.26 user=root 2020-08-15T12:23:37.503907shield sshd\[18487\]: Failed password for root from 106.52.56.26 port 36670 ssh2 2020-08-15T12:25:58.901783shield sshd\[18648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.56.26 user=root |
2020-08-15 20:28:50 |
| 212.70.149.3 | attack | Aug 15 14:46:22 vmanager6029 postfix/smtpd\[9060\]: warning: unknown\[212.70.149.3\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 15 14:46:40 vmanager6029 postfix/smtpd\[9060\]: warning: unknown\[212.70.149.3\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-08-15 20:49:25 |
| 81.30.156.105 | attackspambots | Telnetd brute force attack detected by fail2ban |
2020-08-15 20:41:17 |
| 122.54.103.65 | attackbotsspam | Automatic report - Port Scan Attack |
2020-08-15 20:19:46 |
| 104.248.175.156 | attackspam | Aug 14 02:35:56 fwservlet sshd[20252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.175.156 user=r.r Aug 14 02:35:58 fwservlet sshd[20252]: Failed password for r.r from 104.248.175.156 port 48018 ssh2 Aug 14 02:35:58 fwservlet sshd[20252]: Received disconnect from 104.248.175.156 port 48018:11: Bye Bye [preauth] Aug 14 02:35:58 fwservlet sshd[20252]: Disconnected from 104.248.175.156 port 48018 [preauth] Aug 14 02:46:26 fwservlet sshd[20702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.175.156 user=r.r Aug 14 02:46:28 fwservlet sshd[20702]: Failed password for r.r from 104.248.175.156 port 55844 ssh2 Aug 14 02:46:28 fwservlet sshd[20702]: Received disconnect from 104.248.175.156 port 55844:11: Bye Bye [preauth] Aug 14 02:46:28 fwservlet sshd[20702]: Disconnected from 104.248.175.156 port 55844 [preauth] Aug 14 02:50:05 fwservlet sshd[20856]: pam_unix(sshd:auth): auth........ ------------------------------- |
2020-08-15 20:29:15 |
| 95.169.5.166 | attack | Lines containing failures of 95.169.5.166 Aug 13 18:04:41 cdb sshd[12452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.169.5.166 user=r.r Aug 13 18:04:43 cdb sshd[12452]: Failed password for r.r from 95.169.5.166 port 42102 ssh2 Aug 13 18:04:46 cdb sshd[12452]: Received disconnect from 95.169.5.166 port 42102:11: Bye Bye [preauth] Aug 13 18:04:46 cdb sshd[12452]: Disconnected from authenticating user r.r 95.169.5.166 port 42102 [preauth] Aug 13 18:43:09 cdb sshd[15019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.169.5.166 user=r.r Aug 13 18:43:10 cdb sshd[15019]: Failed password for r.r from 95.169.5.166 port 49708 ssh2 Aug 13 18:43:10 cdb sshd[15019]: Received disconnect from 95.169.5.166 port 49708:11: Bye Bye [preauth] Aug 13 18:43:10 cdb sshd[15019]: Disconnected from authenticating user r.r 95.169.5.166 port 49708 [preauth] Aug 13 18:48:51 cdb sshd[15432]: pam_unix(sshd:........ ------------------------------ |
2020-08-15 20:52:14 |
| 36.82.250.138 | attack | 1597463237 - 08/15/2020 05:47:17 Host: 36.82.250.138/36.82.250.138 Port: 445 TCP Blocked |
2020-08-15 20:25:32 |