城市(city): unknown
省份(region): unknown
国家(country): Brazil
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 179.107.212.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63885
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;179.107.212.142. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021900 1800 900 604800 86400
;; Query time: 49 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 19 21:29:23 CST 2025
;; MSG SIZE rcvd: 108142.212.107.179.in-addr.arpa domain name pointer 212-107-179-142.unitelecom.com.br.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
142.212.107.179.in-addr.arpa name = 212-107-179-142.unitelecom.com.br.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 51.75.208.179 | attackbotsspam | 5x Failed Password |
2020-04-03 01:39:29 |
| 222.186.175.182 | attack | Apr 2 17:46:13 localhost sshd\[31511\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182 user=root Apr 2 17:46:15 localhost sshd\[31511\]: Failed password for root from 222.186.175.182 port 32560 ssh2 Apr 2 17:46:18 localhost sshd\[31511\]: Failed password for root from 222.186.175.182 port 32560 ssh2 ... |
2020-04-03 01:49:36 |
| 51.38.129.74 | attackspambots | Apr 2 15:13:37 eventyay sshd[2564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.129.74 Apr 2 15:13:39 eventyay sshd[2564]: Failed password for invalid user NOC from 51.38.129.74 port 41249 ssh2 Apr 2 15:18:00 eventyay sshd[2788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.129.74 ... |
2020-04-03 02:08:59 |
| 118.89.219.116 | attackbots | " " |
2020-04-03 01:23:58 |
| 198.46.81.32 | attackbots | Apr 2 16:34:27 wordpress wordpress(www.ruhnke.cloud)[89529]: Blocked authentication attempt for admin from ::ffff:198.46.81.32 |
2020-04-03 02:02:49 |
| 216.245.196.222 | attackbots | [2020-04-02 13:43:24] NOTICE[12114][C-0000036f] chan_sip.c: Call from '' (216.245.196.222:5076) to extension '901972599537676' rejected because extension not found in context 'public'. [2020-04-02 13:43:24] SECURITY[12128] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-02T13:43:24.947-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="901972599537676",SessionID="0x7f020c04de18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/216.245.196.222/5076",ACLName="no_extension_match" [2020-04-02 13:44:48] NOTICE[12114][C-00000372] chan_sip.c: Call from '' (216.245.196.222:5076) to extension '9011972599537676' rejected because extension not found in context 'public'. [2020-04-02 13:44:48] SECURITY[12128] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-02T13:44:48.632-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011972599537676",SessionID="0x7f020c04de18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress=" ... |
2020-04-03 02:08:29 |
| 87.250.224.72 | attackspam | [Thu Apr 02 19:44:58.095210 2020] [:error] [pid 5760:tid 140149895538432] [client 87.250.224.72:61531] [client 87.250.224.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XoXeSlanmN60uHoq9Db38wAAAT0"] ... |
2020-04-03 01:16:09 |
| 129.28.106.99 | attackspambots | 5x Failed Password |
2020-04-03 01:24:42 |
| 82.221.137.173 | attackspam | (from eve@explainthebusiness.com) Eve here - from Jerusalem Israel. I reached out several months ago about how explainer videos and the unique issues they solve. My team has created thousands of marketing videos including dozens in your field. As you know, Google is constantly changing its SEO algorithm. The only thing that has remained consistent is that adding an explainer video increases website rank and most importantly keeps customers on your page for longer, increasing conversions ratios. Simplify your pitch, increase website traffic, and close more business. Should I send over some industry-specific samples? -- Eve Brooks Email: eve@explainthebusiness.com Website: http://explainthebusiness.com |
2020-04-03 01:58:07 |
| 92.118.37.55 | attackbotsspam | [MK-Root1] Blocked by UFW |
2020-04-03 01:22:48 |
| 141.8.183.90 | attackbotsspam | [Thu Apr 02 19:44:22.728381 2020] [:error] [pid 5800:tid 140149912323840] [client 141.8.183.90:55215] [client 141.8.183.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XoXeJpA21zJ4xSE@kVtqMQAAAC0"] ... |
2020-04-03 01:41:23 |
| 194.180.224.150 | attack | Apr 2 20:38:15 server2 sshd\[27823\]: User root from 194.180.224.150 not allowed because not listed in AllowUsers Apr 2 20:38:16 server2 sshd\[27825\]: User root from 194.180.224.150 not allowed because not listed in AllowUsers Apr 2 20:38:17 server2 sshd\[27827\]: User root from 194.180.224.150 not allowed because not listed in AllowUsers Apr 2 20:38:18 server2 sshd\[27829\]: Invalid user admin from 194.180.224.150 Apr 2 20:38:20 server2 sshd\[27835\]: Invalid user admin from 194.180.224.150 Apr 2 20:38:21 server2 sshd\[27837\]: Invalid user test from 194.180.224.150 |
2020-04-03 02:04:26 |
| 180.150.21.236 | attack | Apr 2 18:32:23 ns382633 sshd\[19149\]: Invalid user zi from 180.150.21.236 port 57430 Apr 2 18:32:23 ns382633 sshd\[19149\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.150.21.236 Apr 2 18:32:25 ns382633 sshd\[19149\]: Failed password for invalid user zi from 180.150.21.236 port 57430 ssh2 Apr 2 18:37:05 ns382633 sshd\[20041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.150.21.236 user=root Apr 2 18:37:07 ns382633 sshd\[20041\]: Failed password for root from 180.150.21.236 port 35600 ssh2 |
2020-04-03 01:37:13 |
| 42.115.206.195 | attackspambots | 04/02/2020-08:44:03.862872 42.115.206.195 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2020-04-03 01:57:17 |
| 95.84.153.238 | attackbotsspam | $lgm |
2020-04-03 01:26:51 |