城市(city): unknown
省份(region): unknown
国家(country): Republic of China (ROC)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 163.13.64.28
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19674
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;163.13.64.28. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019070102 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 02 05:42:25 CST 2019
;; MSG SIZE rcvd: 11628.64.13.163.in-addr.arpa domain name pointer pc28.cable64.tku.edu.tw.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
28.64.13.163.in-addr.arpa name = pc28.cable64.tku.edu.tw.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 182.52.90.164 | attackspam | Invalid user chocs from 182.52.90.164 port 33942 |
2019-11-29 05:02:30 |
| 193.32.163.44 | attackspambots | 2019-11-28T20:46:26.929587+01:00 lumpi kernel: [260351.557857] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=193.32.163.44 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=3836 PROTO=TCP SPT=57310 DPT=33890 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-29 05:19:31 |
| 41.180.1.182 | attackbots | T: f2b postfix aggressive 3x |
2019-11-29 05:12:53 |
| 192.3.70.108 | attack | 191128 9:16:07 \[Warning\] Access denied for user 'mysqldump'@'192.3.70.108' \(using password: YES\) 191128 9:16:08 \[Warning\] Access denied for user 'mysqldump'@'192.3.70.108' \(using password: YES\) 191128 9:16:09 \[Warning\] Access denied for user 'mysqldump'@'192.3.70.108' \(using password: YES\) 191128 9:16:10 \[Warning\] Access denied for user 'mysqldump'@'192.3.70.108' \(using password: YES\) ... |
2019-11-29 05:20:02 |
| 104.37.29.74 | attackspambots | Nov 29 02:49:21 webhost01 sshd[9818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.37.29.74 Nov 29 02:49:23 webhost01 sshd[9818]: Failed password for invalid user tom from 104.37.29.74 port 33719 ssh2 ... |
2019-11-29 05:04:52 |
| 45.76.111.146 | attack | [ThuNov2815:27:52.6385682019][:error][pid14631:tid46931092817664][client45.76.111.146:36738][client45.76.111.146]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)"][severity"CRITICAL"][hostname"boltonholding.com"][uri"/05-2019.sql"][unique_id"Xd-ZaHBehvkmEUUeKgEI-gAAAMw"][ThuNov2815:27:54.5416742019][:error][pid14505:tid46931078108928][client45.76.111.146:37080][client45.76.111.146]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)"][severity"C |
2019-11-29 05:04:26 |
| 177.67.0.234 | attack | postfix (unknown user, SPF fail or relay access denied) |
2019-11-29 05:01:48 |
| 5.13.134.87 | attackbots | Automatic report - Port Scan Attack |
2019-11-29 05:17:14 |
| 149.56.19.4 | attackbotsspam | Wordpress login scanning |
2019-11-29 05:01:11 |
| 200.223.251.206 | attack | Unauthorised access (Nov 28) SRC=200.223.251.206 LEN=52 TTL=110 ID=23660 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Nov 28) SRC=200.223.251.206 LEN=52 TTL=110 ID=19176 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-29 05:34:44 |
| 94.102.49.190 | attackbots | Connection by 94.102.49.190 on port: 5222 got caught by honeypot at 11/28/2019 8:23:07 PM |
2019-11-29 05:28:37 |
| 185.175.93.105 | attack | firewall-block, port(s): 33451/tcp, 33461/tcp, 33470/tcp, 33471/tcp, 33493/tcp, 33497/tcp, 33498/tcp |
2019-11-29 05:32:55 |
| 71.6.135.131 | attackspam | 28.11.2019 19:19:24 Connection to port 6001 blocked by firewall |
2019-11-29 05:14:37 |
| 36.90.3.81 | attackspam | Unauthorised access (Nov 28) SRC=36.90.3.81 LEN=52 TTL=116 ID=8336 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-29 05:29:15 |
| 82.193.139.251 | attack | " " |
2019-11-29 05:35:27 |