城市(city): unknown
省份(region): unknown
国家(country): unknown
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.230.198.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52084
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.230.198.130. IN A
;; AUTHORITY SECTION:
. 284 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400
;; Query time: 78 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:55:21 CST 2022
;; MSG SIZE rcvd: 107130.198.230.14.in-addr.arpa domain name pointer static.vnpt.vn.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
130.198.230.14.in-addr.arpa name = static.vnpt.vn.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 37.59.56.124 | attackbots | wp-login.php |
2020-08-04 21:50:57 |
| 140.143.5.72 | attackspambots | Aug 4 10:41:22 rush sshd[29973]: Failed password for root from 140.143.5.72 port 59642 ssh2 Aug 4 10:44:05 rush sshd[30091]: Failed password for root from 140.143.5.72 port 36364 ssh2 ... |
2020-08-04 21:17:01 |
| 177.25.85.149 | attackbotsspam | Aug 4 13:17:06 IngegnereFirenze sshd[23102]: User root from 177.25.85.149 not allowed because not listed in AllowUsers ... |
2020-08-04 21:27:20 |
| 113.193.176.28 | attackspam | 20/8/4@05:23:48: FAIL: Alarm-Network address from=113.193.176.28 ... |
2020-08-04 21:54:01 |
| 146.185.163.81 | attackbotsspam | 146.185.163.81 - - [04/Aug/2020:10:24:32 +0100] "POST /wp-login.php HTTP/1.1" 200 1885 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 146.185.163.81 - - [04/Aug/2020:10:24:33 +0100] "POST /wp-login.php HTTP/1.1" 200 1868 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 146.185.163.81 - - [04/Aug/2020:10:24:33 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-04 21:13:18 |
| 64.225.25.59 | attackspambots | Aug 4 11:20:20 jane sshd[6023]: Failed password for root from 64.225.25.59 port 50828 ssh2 ... |
2020-08-04 21:36:47 |
| 114.231.108.78 | attack | smtp brute force login |
2020-08-04 21:23:59 |
| 49.234.126.177 | attack | 2020-08-04T08:15:23.4317131495-001 sshd[21117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.126.177 user=root 2020-08-04T08:15:25.2084941495-001 sshd[21117]: Failed password for root from 49.234.126.177 port 56852 ssh2 2020-08-04T08:18:08.8276511495-001 sshd[21226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.126.177 user=root 2020-08-04T08:18:11.2582101495-001 sshd[21226]: Failed password for root from 49.234.126.177 port 56502 ssh2 2020-08-04T08:20:58.7498831495-001 sshd[21348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.126.177 user=root 2020-08-04T08:21:00.5182391495-001 sshd[21348]: Failed password for root from 49.234.126.177 port 56156 ssh2 ... |
2020-08-04 21:20:43 |
| 78.96.82.25 | attackspam | 78.96.82.25 - - [04/Aug/2020:11:21:11 +0200] "POST /xmlrpc.php HTTP/1.1" 403 249593 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 78.96.82.25 - - [04/Aug/2020:11:24:23 +0200] "POST /xmlrpc.php HTTP/1.1" 403 249593 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" ... |
2020-08-04 21:21:32 |
| 175.140.84.154 | attack | Aug 4 14:53:33 ns382633 sshd\[6321\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.140.84.154 user=root Aug 4 14:53:35 ns382633 sshd\[6321\]: Failed password for root from 175.140.84.154 port 49040 ssh2 Aug 4 15:01:20 ns382633 sshd\[7995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.140.84.154 user=root Aug 4 15:01:23 ns382633 sshd\[7995\]: Failed password for root from 175.140.84.154 port 38834 ssh2 Aug 4 15:06:10 ns382633 sshd\[9001\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.140.84.154 user=root |
2020-08-04 21:11:54 |
| 111.231.83.129 | attackbots | Aug 3 18:14:45 www sshd[22288]: Did not receive identification string from 111.231.83.129 Aug 3 18:16:42 www sshd[22395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.83.129 user=r.r Aug 3 18:16:44 www sshd[22395]: Failed password for r.r from 111.231.83.129 port 48512 ssh2 Aug 3 18:16:45 www sshd[22395]: Received disconnect from 111.231.83.129: 11: Bye Bye [preauth] Aug 3 18:17:25 www sshd[22460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.83.129 user=r.r Aug 3 18:17:27 www sshd[22460]: Failed password for r.r from 111.231.83.129 port 41682 ssh2 Aug 3 18:17:27 www sshd[22460]: Received disconnect from 111.231.83.129: 11: Bye Bye [preauth] Aug 3 18:18:05 www sshd[22486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.83.129 user=r.r Aug 3 18:18:07 www sshd[22486]: Failed password for r.r from 111.231.83.129 ........ ------------------------------- |
2020-08-04 21:52:16 |
| 122.152.217.9 | attackspambots | Brute-force attempt banned |
2020-08-04 21:20:14 |
| 167.99.2.115 | attackspambots | port scan and connect, tcp 8443 (https-alt) |
2020-08-04 21:15:27 |
| 117.89.12.194 | attackbotsspam | 2020-08-04T08:25:15.717286devel sshd[25791]: Failed password for root from 117.89.12.194 port 58209 ssh2 2020-08-04T08:27:24.946469devel sshd[26064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.89.12.194 user=root 2020-08-04T08:27:26.705324devel sshd[26064]: Failed password for root from 117.89.12.194 port 39580 ssh2 |
2020-08-04 21:18:30 |
| 66.220.149.116 | attackbotsspam | [Tue Aug 04 16:24:30.790807 2020] [:error] [pid 14894:tid 140628092200704] [client 66.220.149.116:37524] [client 66.220.149.116] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/OneSignalSDKWorker.js"] [unique_id "XykpTj91R1FPAUbVCY2u6AACdgM"], referer: https://karangploso.jatim.bmkg.go.id/ ... |
2020-08-04 21:18:01 |