城市(city): unknown
省份(region): unknown
国家(country): Hong Kong
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.198.168.196
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45112
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.198.168.196. IN A
;; AUTHORITY SECTION:
. 577 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 07:53:11 CST 2022
;; MSG SIZE rcvd: 107196.168.198.14.in-addr.arpa domain name pointer 014198168196.ctinets.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
196.168.198.14.in-addr.arpa name = 014198168196.ctinets.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 174.138.44.201 | attack | 174.138.44.201 - - [11/Apr/2020:11:27:57 +0200] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 174.138.44.201 - - [11/Apr/2020:11:27:59 +0200] "POST /wp-login.php HTTP/1.1" 200 6601 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 174.138.44.201 - - [11/Apr/2020:11:28:01 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-04-11 17:32:46 |
| 222.186.30.59 | attackbots | Apr 11 05:23:16 ny01 sshd[10663]: Failed password for root from 222.186.30.59 port 50745 ssh2 Apr 11 05:23:20 ny01 sshd[10663]: Failed password for root from 222.186.30.59 port 50745 ssh2 Apr 11 05:23:23 ny01 sshd[10663]: Failed password for root from 222.186.30.59 port 50745 ssh2 |
2020-04-11 17:35:15 |
| 104.42.172.73 | attackspambots | Invalid user elastic from 104.42.172.73 port 41584 |
2020-04-11 17:50:54 |
| 173.252.95.21 | attackspambots | [Sat Apr 11 10:49:00.890668 2020] [:error] [pid 12080:tid 140248694216448] [client 173.252.95.21:43262] [client 173.252.95.21] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/555557973-prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan-april-dasarian-iii-tanggal-21-30-tahun-2020-update-10-april-2020"] [unique_id "XpE@LFq0t-K8B9hNskSEpAAAAAE"] ... |
2020-04-11 17:35:31 |
| 211.253.24.250 | attack | 2020-04-11T10:16:55.029117 sshd[16507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.24.250 user=root 2020-04-11T10:16:57.685566 sshd[16507]: Failed password for root from 211.253.24.250 port 43479 ssh2 2020-04-11T10:26:18.932838 sshd[16647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.24.250 user=root 2020-04-11T10:26:20.681026 sshd[16647]: Failed password for root from 211.253.24.250 port 43373 ssh2 ... |
2020-04-11 17:57:59 |
| 113.189.229.211 | attackbotsspam | 1586576944 - 04/11/2020 05:49:04 Host: 113.189.229.211/113.189.229.211 Port: 445 TCP Blocked |
2020-04-11 17:34:35 |
| 141.98.10.137 | attackspam | (smtpauth) Failed SMTP AUTH login from 141.98.10.137 (LT/Republic of Lithuania/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-04-11 10:06:35 login authenticator failed for (User) [141.98.10.137]: 535 Incorrect authentication data (set_id=mikael) 2020-04-11 10:06:36 login authenticator failed for (User) [141.98.10.137]: 535 Incorrect authentication data (set_id=mikael) 2020-04-11 10:29:32 login authenticator failed for (User) [141.98.10.137]: 535 Incorrect authentication data (set_id=brujita) 2020-04-11 10:29:34 login authenticator failed for (User) [141.98.10.137]: 535 Incorrect authentication data (set_id=brujita) 2020-04-11 10:52:24 login authenticator failed for (User) [141.98.10.137]: 535 Incorrect authentication data (set_id=drums) |
2020-04-11 18:02:01 |
| 212.90.36.178 | attackspambots | Apr 11 10:23:47 wordpress wordpress(www.ruhnke.cloud)[90435]: Blocked authentication attempt for admin from ::ffff:212.90.36.178 |
2020-04-11 17:57:26 |
| 79.30.254.207 | attackspambots | [portscan] Port scan |
2020-04-11 18:03:34 |
| 89.248.172.16 | attack | Unauthorized connection attempt detected from IP address 89.248.172.16 to port 8098 |
2020-04-11 18:12:55 |
| 118.24.71.83 | attackbotsspam | SSH/22 MH Probe, BF, Hack - |
2020-04-11 17:44:14 |
| 177.69.237.54 | attackspam | Apr 11 11:41:59 server sshd[6778]: Failed password for root from 177.69.237.54 port 51180 ssh2 Apr 11 11:54:36 server sshd[19957]: Failed password for root from 177.69.237.54 port 56756 ssh2 Apr 11 12:00:56 server sshd[26780]: Failed password for root from 177.69.237.54 port 36450 ssh2 |
2020-04-11 18:11:54 |
| 194.146.36.92 | attackbotsspam | SpamScore above: 10.0 |
2020-04-11 18:13:20 |
| 171.116.77.180 | attackbots | 2020-04-11T06:33:39.092380shield sshd\[25002\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.116.77.180 user=root 2020-04-11T06:33:40.946605shield sshd\[25002\]: Failed password for root from 171.116.77.180 port 41378 ssh2 2020-04-11T06:37:32.502676shield sshd\[25494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.116.77.180 user=root 2020-04-11T06:37:34.677980shield sshd\[25494\]: Failed password for root from 171.116.77.180 port 44492 ssh2 2020-04-11T06:41:29.957910shield sshd\[26035\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.116.77.180 user=root |
2020-04-11 17:58:30 |
| 118.24.153.230 | attack | 2020-04-10 UTC: (48x) - a3l,admin(3x),aris,brys,mysql,richard,ron,root(38x),webmaster |
2020-04-11 18:14:06 |