城市(city): unknown
省份(region): unknown
国家(country): Australia
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.252.90.18
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59612
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;119.252.90.18. IN A
;; AUTHORITY SECTION:
. 560 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 18:25:50 CST 2022
;; MSG SIZE rcvd: 10618.90.252.119.in-addr.arpa domain name pointer 119-252-90-18.hosting.zettagrid.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
18.90.252.119.in-addr.arpa name = 119-252-90-18.hosting.zettagrid.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 118.25.59.139 | attack | Lines containing failures of 118.25.59.139 Aug 12 05:10:12 shared02 sshd[1229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.59.139 user=r.r Aug 12 05:10:14 shared02 sshd[1229]: Failed password for r.r from 118.25.59.139 port 57940 ssh2 Aug 12 05:10:14 shared02 sshd[1229]: Received disconnect from 118.25.59.139 port 57940:11: Bye Bye [preauth] Aug 12 05:10:14 shared02 sshd[1229]: Disconnected from authenticating user r.r 118.25.59.139 port 57940 [preauth] Aug 12 05:24:16 shared02 sshd[5981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.59.139 user=r.r Aug 12 05:24:19 shared02 sshd[5981]: Failed password for r.r from 118.25.59.139 port 39734 ssh2 Aug 12 05:24:19 shared02 sshd[5981]: Received disconnect from 118.25.59.139 port 39734:11: Bye Bye [preauth] Aug 12 05:24:19 shared02 sshd[5981]: Disconnected from authenticating user r.r 118.25.59.139 port 39734 [preauth] Aug 12........ ------------------------------ |
2020-08-15 21:06:10 |
| 47.74.190.56 | attackspam | Aug 15 14:47:12 ns41 sshd[8179]: Failed password for root from 47.74.190.56 port 35916 ssh2 Aug 15 14:47:12 ns41 sshd[8179]: Failed password for root from 47.74.190.56 port 35916 ssh2 |
2020-08-15 21:09:55 |
| 5.188.62.147 | attack | 5.188.62.147 - - [15/Aug/2020:13:25:19 +0100] "POST /wp-login.php HTTP/1.1" 200 1969 "-" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 5.188.62.147 - - [15/Aug/2020:13:25:20 +0100] "POST /wp-login.php HTTP/1.1" 200 1967 "-" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 5.188.62.147 - - [15/Aug/2020:13:25:21 +0100] "POST /wp-login.php HTTP/1.1" 200 1969 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" ... |
2020-08-15 20:57:18 |
| 123.31.32.150 | attack | frenzy |
2020-08-15 21:03:16 |
| 109.252.100.13 | attack | 1597494320 - 08/15/2020 14:25:20 Host: 109.252.100.13/109.252.100.13 Port: 445 TCP Blocked |
2020-08-15 20:55:04 |
| 104.248.149.130 | attackbotsspam | Aug 15 14:35:55 abendstille sshd\[3088\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.130 user=root Aug 15 14:35:56 abendstille sshd\[3088\]: Failed password for root from 104.248.149.130 port 35778 ssh2 Aug 15 14:38:32 abendstille sshd\[5588\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.130 user=root Aug 15 14:38:34 abendstille sshd\[5588\]: Failed password for root from 104.248.149.130 port 46666 ssh2 Aug 15 14:41:16 abendstille sshd\[8294\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.149.130 user=root ... |
2020-08-15 20:46:41 |
| 112.242.160.82 | attackspam | prod6 ... |
2020-08-15 21:07:19 |
| 129.226.190.18 | attackspambots | Aug 12 14:41:31 mail sshd[29896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.190.18 user=r.r Aug 12 14:41:33 mail sshd[29896]: Failed password for r.r from 129.226.190.18 port 53926 ssh2 Aug 12 14:41:33 mail sshd[29896]: Received disconnect from 129.226.190.18: 11: Bye Bye [preauth] Aug 12 14:48:43 mail sshd[31019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.190.18 user=r.r Aug 12 14:48:45 mail sshd[31019]: Failed password for r.r from 129.226.190.18 port 42182 ssh2 Aug 12 14:48:45 mail sshd[31019]: Received disconnect from 129.226.190.18: 11: Bye Bye [preauth] Aug 12 14:52:59 mail sshd[31705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.190.18 user=r.r Aug 12 14:53:00 mail sshd[31705]: Failed password for r.r from 129.226.190.18 port 54994 ssh2 Aug 12 14:53:00 mail sshd[31705]: Received disconnect from 129.226......... ------------------------------- |
2020-08-15 20:43:50 |
| 67.205.135.127 | attack | Aug 15 14:30:37 electroncash sshd[47632]: Failed password for root from 67.205.135.127 port 37418 ssh2 Aug 15 14:32:08 electroncash sshd[48047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.135.127 user=root Aug 15 14:32:10 electroncash sshd[48047]: Failed password for root from 67.205.135.127 port 36042 ssh2 Aug 15 14:33:42 electroncash sshd[48450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.135.127 user=root Aug 15 14:33:45 electroncash sshd[48450]: Failed password for root from 67.205.135.127 port 34668 ssh2 ... |
2020-08-15 21:14:23 |
| 36.85.135.113 | attack | SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2020-08-15 21:07:44 |
| 173.252.95.35 | attackspambots | [Sat Aug 15 19:25:50.690691 2020] [:error] [pid 3316:tid 140592583423744] [client 173.252.95.35:45702] [client 173.252.95.35] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-bulanan/prakiraan-daerah-potensi-banjir-di-provinsi-jawa-timur/555558208-prakiraan-bulanan-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan-september-tahun-2020-update-10-agustus-2020"] [unique_id "XzfUTua0Xgxjnrgkau-8LgACeAM"] ... |
2020-08-15 20:38:36 |
| 167.172.117.26 | attackspambots | Aug 15 14:21:57 vps639187 sshd\[13509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.117.26 user=root Aug 15 14:21:59 vps639187 sshd\[13509\]: Failed password for root from 167.172.117.26 port 32962 ssh2 Aug 15 14:25:40 vps639187 sshd\[13572\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.117.26 user=root ... |
2020-08-15 20:42:27 |
| 212.70.149.3 | attack | Aug 15 14:46:22 vmanager6029 postfix/smtpd\[9060\]: warning: unknown\[212.70.149.3\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 15 14:46:40 vmanager6029 postfix/smtpd\[9060\]: warning: unknown\[212.70.149.3\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-08-15 20:49:25 |
| 222.186.42.213 | attack | 2020-08-15T12:33:41.607071shield sshd\[19097\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.213 user=root 2020-08-15T12:33:43.489508shield sshd\[19097\]: Failed password for root from 222.186.42.213 port 18831 ssh2 2020-08-15T12:33:48.048077shield sshd\[19097\]: Failed password for root from 222.186.42.213 port 18831 ssh2 2020-08-15T12:33:50.495113shield sshd\[19097\]: Failed password for root from 222.186.42.213 port 18831 ssh2 2020-08-15T12:33:53.058599shield sshd\[19111\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.213 user=root |
2020-08-15 20:36:09 |
| 177.54.251.181 | attackbots | "SMTP brute force auth login attempt." |
2020-08-15 21:11:23 |