城市(city): unknown
省份(region): unknown
国家(country): Australia
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.218.71.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33765
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.218.71.112. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022700 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 27 22:02:36 CST 2025
;; MSG SIZE rcvd: 107112.71.218.139.in-addr.arpa domain name pointer 139-218-71-112.sta.dodo.net.au.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
112.71.218.139.in-addr.arpa name = 139-218-71-112.sta.dodo.net.au.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.13.197.115 | attackbotsspam | 2019-08-29 04:53:23,427 fail2ban.actions \[1817\]: NOTICE \[ssh\] Ban 106.13.197.115 2019-08-29 05:08:14,663 fail2ban.actions \[1817\]: NOTICE \[ssh\] Ban 106.13.197.115 2019-08-29 05:24:44,489 fail2ban.actions \[1817\]: NOTICE \[ssh\] Ban 106.13.197.115 2019-08-29 05:41:05,127 fail2ban.actions \[1817\]: NOTICE \[ssh\] Ban 106.13.197.115 2019-08-29 05:59:22,965 fail2ban.actions \[1817\]: NOTICE \[ssh\] Ban 106.13.197.115 ... |
2019-09-02 15:50:17 |
| 58.254.132.49 | attackbotsspam | Sep 2 07:53:03 Ubuntu-1404-trusty-64-minimal sshd\[6309\]: Invalid user mehdi from 58.254.132.49 Sep 2 07:53:03 Ubuntu-1404-trusty-64-minimal sshd\[6309\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.49 Sep 2 07:53:06 Ubuntu-1404-trusty-64-minimal sshd\[6309\]: Failed password for invalid user mehdi from 58.254.132.49 port 15600 ssh2 Sep 2 08:06:39 Ubuntu-1404-trusty-64-minimal sshd\[15884\]: Invalid user servis from 58.254.132.49 Sep 2 08:06:39 Ubuntu-1404-trusty-64-minimal sshd\[15884\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.49 |
2019-09-02 16:20:28 |
| 185.254.122.22 | attack | Sep 2 07:32:26 TCP Attack: SRC=185.254.122.22 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=246 PROTO=TCP SPT=45860 DPT=33841 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-09-02 16:22:15 |
| 116.228.90.9 | attack | [munged]::443 116.228.90.9 - - [02/Sep/2019:05:26:31 +0200] "POST /[munged]: HTTP/1.1" 200 8211 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 116.228.90.9 - - [02/Sep/2019:05:26:34 +0200] "POST /[munged]: HTTP/1.1" 200 4436 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 116.228.90.9 - - [02/Sep/2019:05:26:36 +0200] "POST /[munged]: HTTP/1.1" 200 4436 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 116.228.90.9 - - [02/Sep/2019:05:26:39 +0200] "POST /[munged]: HTTP/1.1" 200 4436 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 116.228.90.9 - - [02/Sep/2019:05:26:41 +0200] "POST /[munged]: HTTP/1.1" 200 4436 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 116.228.90.9 - - [02/Sep/2019:05:26:43 +0200] |
2019-09-02 15:42:18 |
| 18.207.223.106 | attackspam | [MonSep0205:20:04.2804672019][:error][pid22723:tid47550035834624][client18.207.223.106:39338][client18.207.223.106]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"211"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][hostname"pizzarella.ch"][uri"/"][unique_id"XWyKZO5vDZjEYFw3CHnD0gAAAUA"][MonSep0205:20:05.4636442019][:error][pid22722:tid47550145017600][client18.207.223.106:39342][client18.207.223.106]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"211"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][host |
2019-09-02 15:41:22 |
| 73.158.248.207 | attackspam | $f2bV_matches |
2019-09-02 16:17:21 |
| 186.193.7.98 | attack | Brute force attempt |
2019-09-02 15:49:11 |
| 211.20.181.186 | attackbotsspam | Sep 2 14:00:03 itv-usvr-01 sshd[1494]: Invalid user ashok from 211.20.181.186 Sep 2 14:00:11 itv-usvr-01 sshd[1494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.20.181.186 Sep 2 14:00:03 itv-usvr-01 sshd[1494]: Invalid user ashok from 211.20.181.186 Sep 2 14:00:14 itv-usvr-01 sshd[1494]: Failed password for invalid user ashok from 211.20.181.186 port 6151 ssh2 |
2019-09-02 15:44:10 |
| 162.243.164.246 | attackspam | $f2bV_matches |
2019-09-02 16:19:57 |
| 92.50.249.166 | attackspambots | Sep 1 22:16:19 sachi sshd\[5551\]: Invalid user squid from 92.50.249.166 Sep 1 22:16:19 sachi sshd\[5551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.50.249.166 Sep 1 22:16:21 sachi sshd\[5551\]: Failed password for invalid user squid from 92.50.249.166 port 47988 ssh2 Sep 1 22:20:28 sachi sshd\[5937\]: Invalid user kd from 92.50.249.166 Sep 1 22:20:28 sachi sshd\[5937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.50.249.166 |
2019-09-02 16:21:38 |
| 118.24.122.36 | attack | Sep 1 21:35:26 web9 sshd\[4869\]: Invalid user israel from 118.24.122.36 Sep 1 21:35:26 web9 sshd\[4869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.122.36 Sep 1 21:35:28 web9 sshd\[4869\]: Failed password for invalid user israel from 118.24.122.36 port 50446 ssh2 Sep 1 21:40:38 web9 sshd\[5765\]: Invalid user zzz from 118.24.122.36 Sep 1 21:40:38 web9 sshd\[5765\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.122.36 |
2019-09-02 15:48:27 |
| 112.237.143.137 | attack | 52869/tcp 52869/tcp [2019-08-30/09-01]2pkt |
2019-09-02 16:33:00 |
| 117.102.88.119 | attackbotsspam | Sep 2 06:38:15 www sshd\[37381\]: Invalid user graylog from 117.102.88.119Sep 2 06:38:17 www sshd\[37381\]: Failed password for invalid user graylog from 117.102.88.119 port 57148 ssh2Sep 2 06:42:45 www sshd\[37645\]: Invalid user password from 117.102.88.119 ... |
2019-09-02 15:54:29 |
| 185.216.140.252 | attackbots | 09/02/2019-03:35:57.778799 185.216.140.252 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-09-02 15:43:28 |
| 71.6.233.233 | attackspambots | 137/udp 5001/tcp 8983/tcp... [2019-07-02/09-02]15pkt,13pt.(tcp),2pt.(udp) |
2019-09-02 15:58:23 |