城市(city): unknown
省份(region): unknown
国家(country): Canada
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.229.91.69
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57484
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.229.91.69. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021500 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 16:46:33 CST 2025
;; MSG SIZE rcvd: 10669.91.229.142.in-addr.arpa domain name pointer goa91-69.ext.gov.ab.ca.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
69.91.229.142.in-addr.arpa name = goa91-69.ext.gov.ab.ca.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 86.34.240.35 | attackbotsspam | Automatic report - Banned IP Access |
2020-08-11 18:32:49 |
| 51.210.182.187 | attack | Aug 11 06:03:58 Tower sshd[28455]: Connection from 51.210.182.187 port 46166 on 192.168.10.220 port 22 rdomain "" Aug 11 06:03:59 Tower sshd[28455]: Failed password for root from 51.210.182.187 port 46166 ssh2 Aug 11 06:03:59 Tower sshd[28455]: Received disconnect from 51.210.182.187 port 46166:11: Bye Bye [preauth] Aug 11 06:03:59 Tower sshd[28455]: Disconnected from authenticating user root 51.210.182.187 port 46166 [preauth] |
2020-08-11 18:30:53 |
| 139.59.7.177 | attack | 2020-08-10 UTC: (70x) - +/*-123,11qqww22,120193,123-qwe,1231qaz,123QWEqwe@321,1qwe2zxc!,2016qwer,Admin12345@,Backup123,P@$$word...,P@ssw0rd.!,PasSwoRD,Pass2005,QWERTY.123456,admin@1qaz!QAZ,asdf123$,chinanet.cc,ewq123,hg@123,hichina!@#,idc123ok,idc_2010,kd123!@#,linux123456789,mcse,newlenven!@#,qwer1234,root(40x),shutdown,~#$%^&*(),.; |
2020-08-11 18:43:34 |
| 117.79.152.238 | attack | Brute forcing RDP port 3389 |
2020-08-11 18:19:45 |
| 110.137.39.118 | attackspam | 1597117716 - 08/11/2020 05:48:36 Host: 110.137.39.118/110.137.39.118 Port: 445 TCP Blocked |
2020-08-11 18:49:41 |
| 106.12.173.60 | attackbots | Aug 11 09:24:37 rocket sshd[17285]: Failed password for root from 106.12.173.60 port 41792 ssh2 Aug 11 09:30:06 rocket sshd[18132]: Failed password for root from 106.12.173.60 port 39190 ssh2 ... |
2020-08-11 18:27:58 |
| 178.154.200.122 | attack | [Tue Aug 11 10:49:33.321859 2020] [:error] [pid 19465:tid 140057314944768] [client 178.154.200.122:65194] [client 178.154.200.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XzIVTdzgF2SfWiRKtxiNYgAAAkk"] ... |
2020-08-11 18:18:19 |
| 91.121.162.198 | attackbots | Aug 11 07:16:25 ws24vmsma01 sshd[231096]: Failed password for root from 91.121.162.198 port 55482 ssh2 ... |
2020-08-11 18:48:05 |
| 120.92.151.17 | attackspam | "fail2ban match" |
2020-08-11 18:16:32 |
| 45.117.81.170 | attackspambots | 2020-08-11T12:16:36.429252amanda2.illicoweb.com sshd\[16628\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.117.81.170 user=root 2020-08-11T12:16:37.968315amanda2.illicoweb.com sshd\[16628\]: Failed password for root from 45.117.81.170 port 40002 ssh2 2020-08-11T12:22:59.152681amanda2.illicoweb.com sshd\[17132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.117.81.170 user=root 2020-08-11T12:23:00.937519amanda2.illicoweb.com sshd\[17132\]: Failed password for root from 45.117.81.170 port 58546 ssh2 2020-08-11T12:24:44.857784amanda2.illicoweb.com sshd\[17250\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.117.81.170 user=root ... |
2020-08-11 18:51:43 |
| 167.71.45.35 | attack | 167.71.45.35 - - [11/Aug/2020:09:22:33 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.45.35 - - [11/Aug/2020:09:22:34 +0200] "POST /wp-login.php HTTP/1.1" 200 6561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.45.35 - - [11/Aug/2020:09:22:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-11 18:39:20 |
| 195.122.226.164 | attack | Fail2Ban - SSH Bruteforce Attempt |
2020-08-11 18:52:24 |
| 49.233.183.15 | attackbotsspam | Aug 11 09:59:30 eventyay sshd[3084]: Failed password for root from 49.233.183.15 port 36170 ssh2 Aug 11 10:02:43 eventyay sshd[3141]: Failed password for root from 49.233.183.15 port 39240 ssh2 ... |
2020-08-11 18:23:21 |
| 103.217.242.11 | attackspam | 103.217.242.11 - - [11/Aug/2020:11:03:02 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 103.217.242.11 - - [11/Aug/2020:11:03:03 +0100] "POST /wp-login.php HTTP/1.1" 403 905 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 103.217.242.11 - - [11/Aug/2020:11:04:03 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" ... |
2020-08-11 18:46:17 |
| 195.154.43.232 | attack | 195.154.43.232 - - [11/Aug/2020:11:06:30 +0200] "GET /wp-login.php HTTP/1.1" 200 6060 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 195.154.43.232 - - [11/Aug/2020:11:06:31 +0200] "POST /wp-login.php HTTP/1.1" 200 6311 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 195.154.43.232 - - [11/Aug/2020:11:06:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-11 18:27:03 |