城市(city): unknown
省份(region): unknown
国家(country): United Kingdom of Great Britain and Northern Ireland (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 137.44.21.224
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49222
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;137.44.21.224. IN A
;; AUTHORITY SECTION:
. 119 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023052400 1800 900 604800 86400
;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 24 15:43:22 CST 2023
;; MSG SIZE rcvd: 106Host 224.21.44.137.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 224.21.44.137.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 103.86.134.194 | attack | Apr 1 20:53:33 mail sshd\[64610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.86.134.194 user=root ... |
2020-04-02 09:19:25 |
| 198.108.66.225 | attackspam | Multiport scan 49 ports : 102 445 3121 3306 7433 7687 7771 8123 8249 9059 9119 9123 9149 9163 9166 9171 9183 9259 9290 9351 9358 9405 9406 9425 9486 9516 9528 9645 9647 9722 9738 9833 9861 9901 9937 9975 9993 10042 10045 12296 12300 12407 12580 18068 18070 20325 21248 24510 45788 |
2020-04-02 08:38:22 |
| 45.14.148.95 | attackbots | Invalid user ni from 45.14.148.95 port 36996 |
2020-04-02 08:38:00 |
| 114.119.163.4 | attackbots | [Thu Apr 02 04:11:16.867928 2020] [:error] [pid 28641:tid 139905088595712] [client 114.119.163.4:52112] [client 114.119.163.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/agroklimatologi/kalender-tanam/760-kalender-tanam-katam-terpadu-pulau-jawa/kalender-tanam-katam-terpadu-provinsi-jawa-timur/kalender-tanam-katam-terpadu-kabupaten-ngawi/kalender-tanam-katam-terpadu-kecamatan-jogorogo-kabupaten-ng ... |
2020-04-02 08:59:10 |
| 45.155.126.18 | attack | Email rejected due to spam filtering |
2020-04-02 09:13:05 |
| 178.128.213.91 | attackbots | Apr 2 02:59:59 Ubuntu-1404-trusty-64-minimal sshd\[28398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.213.91 user=root Apr 2 03:00:02 Ubuntu-1404-trusty-64-minimal sshd\[28398\]: Failed password for root from 178.128.213.91 port 51674 ssh2 Apr 2 03:07:39 Ubuntu-1404-trusty-64-minimal sshd\[4817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.213.91 user=root Apr 2 03:07:41 Ubuntu-1404-trusty-64-minimal sshd\[4817\]: Failed password for root from 178.128.213.91 port 48682 ssh2 Apr 2 03:12:01 Ubuntu-1404-trusty-64-minimal sshd\[7682\]: Invalid user weijitao from 178.128.213.91 Apr 2 03:12:01 Ubuntu-1404-trusty-64-minimal sshd\[7682\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.213.91 |
2020-04-02 09:13:53 |
| 41.141.252.202 | attack | 2020-04-02 01:04:24,392 fail2ban.actions: WARNING [ssh] Ban 41.141.252.202 |
2020-04-02 08:52:27 |
| 144.217.34.147 | attack | Multiport scan 28 ports : 17(x4) 53 81(x17) 123(x3) 137(x2) 161 177 389(x8) 427 2362 3283(x15) 3478 3702(x12) 5060 5093(x6) 5353(x4) 5683(x4) 6881(x4) 7001(x6) 10001(x7) 11211 27036(x4) 27960 30718(x5) 33848(x5) 37810(x3) 41794(x7) 47808 |
2020-04-02 08:59:47 |
| 139.59.75.111 | attack | Apr 2 01:09:32 vmd26974 sshd[6698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.75.111 Apr 2 01:09:34 vmd26974 sshd[6698]: Failed password for invalid user gj from 139.59.75.111 port 36352 ssh2 ... |
2020-04-02 08:49:35 |
| 165.227.104.253 | attackbots | Invalid user dxi from 165.227.104.253 port 43810 |
2020-04-02 08:54:12 |
| 51.83.45.93 | attackbots | SSH-BruteForce |
2020-04-02 09:10:08 |
| 45.125.65.42 | attackspambots | Apr 2 02:58:23 localhost postfix/smtpd[3840]: warning: unknown[45.125.65.42]: SASL LOGIN authentication failed: authentication failure Apr 2 03:16:15 localhost postfix/smtpd[3965]: warning: unknown[45.125.65.42]: SASL LOGIN authentication failed: authentication failure Apr 2 03:34:08 localhost postfix/smtpd[4540]: warning: unknown[45.125.65.42]: SASL LOGIN authentication failed: authentication failure ... |
2020-04-02 08:44:31 |
| 49.72.212.22 | attackbots | Apr 2 00:45:27 silence02 sshd[13795]: Failed password for root from 49.72.212.22 port 40010 ssh2 Apr 2 00:49:18 silence02 sshd[14106]: Failed password for root from 49.72.212.22 port 39390 ssh2 |
2020-04-02 08:40:55 |
| 14.17.110.58 | attackspambots | Apr 1 02:15:42 hgb10502 sshd[18215]: User r.r from 14.17.110.58 not allowed because not listed in AllowUsers Apr 1 02:15:42 hgb10502 sshd[18215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.17.110.58 user=r.r Apr 1 02:15:44 hgb10502 sshd[18215]: Failed password for invalid user r.r from 14.17.110.58 port 54728 ssh2 Apr 1 02:15:44 hgb10502 sshd[18215]: Received disconnect from 14.17.110.58 port 54728:11: Bye Bye [preauth] Apr 1 02:15:44 hgb10502 sshd[18215]: Disconnected from 14.17.110.58 port 54728 [preauth] Apr 1 02:36:38 hgb10502 sshd[20275]: Invalid user cxx from 14.17.110.58 port 60800 Apr 1 02:36:40 hgb10502 sshd[20275]: Failed password for invalid user cxx from 14.17.110.58 port 60800 ssh2 Apr 1 02:36:40 hgb10502 sshd[20275]: Received disconnect from 14.17.110.58 port 60800:11: Bye Bye [preauth] Apr 1 02:36:40 hgb10502 sshd[20275]: Disconnected from 14.17.110.58 port 60800 [preauth] Apr 1 02:39:59 hgb10502 ........ ------------------------------- |
2020-04-02 08:45:08 |
| 61.160.245.87 | attackspam | Invalid user clc from 61.160.245.87 port 47452 |
2020-04-02 09:11:38 |