城市(city): unknown
省份(region): unknown
国家(country): Viet Nam
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.171.161.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53887
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.171.161.242. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 02:04:14 CST 2025
;; MSG SIZE rcvd: 107242.161.171.14.in-addr.arpa domain name pointer static.vnpt.vn.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
242.161.171.14.in-addr.arpa name = static.vnpt.vn.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 54.197.234.188 | attackspambots | [SunJul2809:19:33.0763822019][:error][pid11050:tid48011887097600][client54.197.234.188:57031][client54.197.234.188]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"beginsWith%{request_headers.host}"against"TX:1"required.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"508"][id"340162"][rev"302"][msg"Atomicorp.comWAFRules:RemoteFileInjectionAttackdetected\(UnauthorizedURLdetectedasargument\)"][data"\,TX:1"][severity"CRITICAL"][hostname"www.mittdolcino.com"][uri"/wp_mittdolcino/"][unique_id"XT1MhY@4ypeoeRmk7dlnGAAAAIY"]\,referer:https://www.mittdolcino.com/category/temi/[SunJul2809:19:37.3855822019][:error][pid11050:tid48011874490112][client54.197.234.188:63267][client54.197.234.188]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"beginsWith%{request_headers.host}"against"TX:1"required.[file"/usr/local/apache.ea3/conf/modsec_rules/10_asl_rules.conf"][line"508"][id"340162"][rev"302"][msg"Atomicorp.comWAFRules:RemoteFileInjectionAttackdetected\( |
2019-07-29 00:47:20 |
| 103.208.72.54 | attackbots | Autoban 103.208.72.54 AUTH/CONNECT |
2019-07-29 01:29:30 |
| 183.6.176.182 | attackspambots | Jul 28 17:43:07 mout sshd[21955]: Invalid user amer from 183.6.176.182 port 35800 |
2019-07-29 01:07:20 |
| 183.82.99.139 | attackbots | Jul 28 18:43:51 OPSO sshd\[15088\]: Invalid user rapture from 183.82.99.139 port 58046 Jul 28 18:43:51 OPSO sshd\[15088\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.82.99.139 Jul 28 18:43:53 OPSO sshd\[15088\]: Failed password for invalid user rapture from 183.82.99.139 port 58046 ssh2 Jul 28 18:48:51 OPSO sshd\[15721\]: Invalid user friend123 from 183.82.99.139 port 39274 Jul 28 18:48:51 OPSO sshd\[15721\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.82.99.139 |
2019-07-29 00:56:05 |
| 117.255.216.106 | attackspam | 2019-07-28T13:28:30.008217abusebot-5.cloudsearch.cf sshd\[27943\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.255.216.106 user=root |
2019-07-29 00:32:58 |
| 134.0.119.93 | attackbots | Automatic report - Banned IP Access |
2019-07-29 00:51:29 |
| 213.166.129.235 | attackspam | Lines containing failures of 213.166.129.235 Jul 28 13:08:47 server01 postfix/smtpd[1491]: connect from unknown[213.166.129.235] Jul x@x Jul x@x Jul 28 13:08:48 server01 postfix/policy-spf[1496]: : Policy action=PREPEND Received-SPF: none (mail2king.com: No applicable sender policy available) receiver=x@x Jul x@x Jul 28 13:08:49 server01 postfix/smtpd[1491]: lost connection after DATA from unknown[213.166.129.235] Jul 28 13:08:49 server01 postfix/smtpd[1491]: disconnect from unknown[213.166.129.235] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=213.166.129.235 |
2019-07-29 01:13:01 |
| 110.74.163.90 | attackbotsspam | Jul 28 19:15:31 tux-35-217 sshd\[20229\]: Invalid user 123asd@ from 110.74.163.90 port 44210 Jul 28 19:15:31 tux-35-217 sshd\[20229\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.74.163.90 Jul 28 19:15:33 tux-35-217 sshd\[20229\]: Failed password for invalid user 123asd@ from 110.74.163.90 port 44210 ssh2 Jul 28 19:20:22 tux-35-217 sshd\[20239\]: Invalid user fabriceg from 110.74.163.90 port 37328 Jul 28 19:20:22 tux-35-217 sshd\[20239\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.74.163.90 ... |
2019-07-29 01:24:59 |
| 176.252.237.140 | attackbots | Jul 28 13:23:33 amit sshd\[11998\]: Invalid user ns1ght! from 176.252.237.140 Jul 28 13:23:33 amit sshd\[11998\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.252.237.140 Jul 28 13:23:35 amit sshd\[11998\]: Failed password for invalid user ns1ght! from 176.252.237.140 port 44085 ssh2 ... |
2019-07-29 00:56:55 |
| 104.231.97.127 | attackspam | DATE:2019-07-28 17:34:16, IP:104.231.97.127, PORT:ssh brute force auth on SSH service (patata) |
2019-07-29 00:24:07 |
| 78.145.234.110 | attackspam | Hits on port 5500 (VNC ?) |
2019-07-29 01:12:30 |
| 94.66.56.250 | attackspam | Jul 28 07:45:59 our-server-hostname postfix/smtpd[18322]: connect from unknown[94.66.56.250] Jul x@x Jul x@x Jul 28 07:46:06 our-server-hostname postfix/smtpd[18322]: lost connection after DATA from unknown[94.66.56.250] Jul 28 07:46:06 our-server-hostname postfix/smtpd[18322]: disconnect from unknown[94.66.56.250] Jul 28 08:18:14 our-server-hostname postfix/smtpd[11331]: connect from unknown[94.66.56.250] Jul x@x Jul x@x Jul 28 08:18:27 our-server-hostname postfix/smtpd[11331]: lost connection after DATA from unknown[94.66.56.250] Jul 28 08:18:27 our-server-hostname postfix/smtpd[11331]: disconnect from unknown[94.66.56.250] Jul 28 20:37:41 our-server-hostname postfix/smtpd[12648]: connect from unknown[94.66.56.250] Jul x@x Jul x@x Jul 28 20:37:47 our-server-hostname postfix/smtpd[12648]: lost connection after DATA from unknown[94.66.56.250] Jul 28 20:37:47 our-server-hostname postfix/smtpd[12648]: disconnect from unknown[94.66.56.250] Jul 28 20:42:44 our-server-hostna........ ------------------------------- |
2019-07-29 01:01:02 |
| 137.116.138.221 | attackbotsspam | 2019-07-28T16:36:44.467140abusebot-3.cloudsearch.cf sshd\[17476\]: Invalid user lolololo from 137.116.138.221 port 45132 |
2019-07-29 00:42:51 |
| 172.217.8.4 | attackbots | audio/conversations? at silly o clock/mostly fort will wanderers related to lazy poacher/farmer/CNAME/history/heritage GSTATIC.COM repetitive motorcycle requests/all uk/i.e. stalkers/links to parking crew.net users/opposite/and Laggan Locks camper van travelling club |
2019-07-29 01:28:19 |
| 127.0.0.1 | attackspam | Test Connectivity |
2019-07-29 01:25:56 |