城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 169.229.97.143
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28040
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;169.229.97.143. IN A
;; AUTHORITY SECTION:
. 544 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022062801 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 29 07:42:09 CST 2022
;; MSG SIZE rcvd: 107143.97.229.169.in-addr.arpa domain name pointer man-97-143.reshall.berkeley.edu.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
143.97.229.169.in-addr.arpa name = man-97-143.reshall.berkeley.edu.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.12.111.202 | attack | Unauthorized connection attempt detected from IP address 106.12.111.202 to port 2220 [J] |
2020-02-04 20:17:05 |
| 67.205.142.246 | attackspambots | Unauthorized connection attempt detected from IP address 67.205.142.246 to port 2220 [J] |
2020-02-04 20:57:33 |
| 51.68.231.147 | attackspambots | Unauthorized connection attempt detected from IP address 51.68.231.147 to port 2220 [J] |
2020-02-04 20:51:11 |
| 200.52.80.34 | attack | Unauthorized connection attempt detected from IP address 200.52.80.34 to port 2220 [J] |
2020-02-04 20:48:46 |
| 49.88.112.75 | attackbotsspam | Feb 4 17:13:25 gw1 sshd[22927]: Failed password for root from 49.88.112.75 port 64442 ssh2 ... |
2020-02-04 20:35:52 |
| 45.80.65.1 | attackbotsspam | Unauthorized connection attempt detected from IP address 45.80.65.1 to port 2220 [J] |
2020-02-04 20:21:27 |
| 92.118.37.55 | attackspam | ET CINS Active Threat Intelligence Poor Reputation IP group 91 - port: 5390 proto: TCP cat: Misc Attack |
2020-02-04 20:32:14 |
| 51.68.123.192 | attackbotsspam | Unauthorized connection attempt detected from IP address 51.68.123.192 to port 2220 [J] |
2020-02-04 20:25:07 |
| 222.186.15.158 | attackspam | 02/04/2020-07:14:01.780961 222.186.15.158 Protocol: 6 ET SCAN Potential SSH Scan |
2020-02-04 20:17:43 |
| 196.37.111.217 | attack | Unauthorized connection attempt detected from IP address 196.37.111.217 to port 2220 [J] |
2020-02-04 20:31:46 |
| 182.16.249.130 | attack | Feb 4 13:47:55 tuxlinux sshd[17893]: Invalid user ftpuser from 182.16.249.130 port 6770 Feb 4 13:47:55 tuxlinux sshd[17893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.249.130 Feb 4 13:47:55 tuxlinux sshd[17893]: Invalid user ftpuser from 182.16.249.130 port 6770 Feb 4 13:47:55 tuxlinux sshd[17893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.249.130 Feb 4 13:47:55 tuxlinux sshd[17893]: Invalid user ftpuser from 182.16.249.130 port 6770 Feb 4 13:47:55 tuxlinux sshd[17893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.16.249.130 Feb 4 13:47:57 tuxlinux sshd[17893]: Failed password for invalid user ftpuser from 182.16.249.130 port 6770 ssh2 ... |
2020-02-04 21:08:11 |
| 54.37.205.162 | attackspambots | Feb 4 09:02:06 work-partkepr sshd\[7629\]: Invalid user scaner from 54.37.205.162 port 33542 Feb 4 09:02:06 work-partkepr sshd\[7629\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.205.162 ... |
2020-02-04 20:57:07 |
| 46.38.144.202 | attackbots | Feb 4 13:48:14 relay postfix/smtpd\[27587\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 4 13:48:33 relay postfix/smtpd\[5440\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 4 13:48:56 relay postfix/smtpd\[4433\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 4 13:49:18 relay postfix/smtpd\[4792\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 4 13:49:37 relay postfix/smtpd\[30654\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-02-04 20:49:56 |
| 173.252.127.42 | attackbotsspam | [Tue Feb 04 11:53:50.529461 2020] [:error] [pid 9378:tid 139908140226304] [client 173.252.127.42:36518] [client 173.252.127.42] ModSecurity: Access denied with code 403 (phase 2). Found 3 byte(s) in REQUEST_URI outside range: 32-36,38-126. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1304"] [id "920272"] [msg "Invalid character in request (outside of printable chars below ascii 127)"] [data "REQUEST_URI=/images/Klimatologi/Analisis/02-Analisis_Dasarian/Dinamika/2020/01_Januari_2020/Das-III/Analisis_Dinamika_Atmosfer\\xe2\\x80\\x93Laut_Dan_Prediksi_Curah_Hujan_Update_Dasarian_III_Januari_2020.jpg"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/EVASION"] [tag "paranoia-level/3"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/images/Klimatologi/Analisis/02-Analisis_Dasarian/Dinamik ... |
2020-02-04 20:31:09 |
| 75.31.93.181 | attackbots | $f2bV_matches |
2020-02-04 20:29:12 |