城市(city): unknown
省份(region): unknown
国家(country): Sweden
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 192.71.19.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32881
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;192.71.19.134. IN A
;; AUTHORITY SECTION:
. 170 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023010300 1800 900 604800 86400
;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 04 01:22:54 CST 2023
;; MSG SIZE rcvd: 106Host 134.19.71.192.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 134.19.71.192.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 40.77.167.208 | attackspam | [Thu Aug 27 20:02:37.973742 2020] [:error] [pid 23182:tid 139707023353600] [client 40.77.167.208:1505] [client 40.77.167.208] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "118"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "WASCTC/WASC-13"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-bulanan/244-prakiraan-curah-hujan-bulanan/prakiraan-curah-hujan-bulanan-di-propinsi-jawa-timur/prakiraan-curah-hujan-bulanan-di-propinsi-jawa-timur-tahun-2016/1014-prakiraan-curah-hujan-jawa-timur-bulan-agustus-tahun-2016"] [unique_id "X
... |
2020-08-27 21:48:57 |
| 23.95.85.68 | attackbotsspam | Aug 27 10:01:19 XXX sshd[62828]: Invalid user user from 23.95.85.68 port 33482 |
2020-08-27 21:34:01 |
| 152.136.114.118 | attackbots | 2020-08-27T12:33:44.531599shield sshd\[9755\]: Invalid user user4 from 152.136.114.118 port 49126 2020-08-27T12:33:44.560521shield sshd\[9755\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.114.118 2020-08-27T12:33:46.105837shield sshd\[9755\]: Failed password for invalid user user4 from 152.136.114.118 port 49126 ssh2 2020-08-27T12:36:17.334149shield sshd\[10171\]: Invalid user fenix from 152.136.114.118 port 50920 2020-08-27T12:36:17.344134shield sshd\[10171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.114.118 |
2020-08-27 21:40:33 |
| 2.139.209.78 | attack | $f2bV_matches |
2020-08-27 22:09:42 |
| 177.220.217.94 | attack | Unauthorised access (Aug 27) SRC=177.220.217.94 LEN=52 TTL=112 ID=30500 DF TCP DPT=445 WINDOW=8192 SYN |
2020-08-27 21:35:37 |
| 218.92.0.199 | attack | 2020-08-27T15:59:04.565059rem.lavrinenko.info sshd[6372]: refused connect from 218.92.0.199 (218.92.0.199) 2020-08-27T16:02:45.132424rem.lavrinenko.info sshd[6392]: refused connect from 218.92.0.199 (218.92.0.199) 2020-08-27T16:04:30.541775rem.lavrinenko.info sshd[6394]: refused connect from 218.92.0.199 (218.92.0.199) 2020-08-27T16:06:14.978836rem.lavrinenko.info sshd[6396]: refused connect from 218.92.0.199 (218.92.0.199) 2020-08-27T16:08:12.408472rem.lavrinenko.info sshd[6397]: refused connect from 218.92.0.199 (218.92.0.199) ... |
2020-08-27 22:16:38 |
| 39.128.250.180 | attack | Aug 25 00:58:57 venus sshd[18026]: Invalid user hc from 39.128.250.180 Aug 25 00:58:57 venus sshd[18026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.128.250.180 Aug 25 00:58:59 venus sshd[18026]: Failed password for invalid user hc from 39.128.250.180 port 19395 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=39.128.250.180 |
2020-08-27 21:39:12 |
| 45.230.45.69 | attackspam | Unauthorized connection attempt from IP address 45.230.45.69 on Port 445(SMB) |
2020-08-27 21:47:23 |
| 193.118.53.210 | attack | [Thu Aug 27 20:20:48.623953 2020] [:error] [pid 23142:tid 139707023353600] [client 193.118.53.210:39088] [client 193.118.53.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "X0ezMLsYfrtPbcmHrwgJ2gAAAZY"] ... |
2020-08-27 22:16:06 |
| 113.190.44.39 | attack | 1598533348 - 08/27/2020 15:02:28 Host: 113.190.44.39/113.190.44.39 Port: 445 TCP Blocked ... |
2020-08-27 21:59:11 |
| 64.137.120.60 | attackbotsspam | (From eric@talkwithwebvisitor.com) Hey there, I just found your site, quick question… My name’s Eric, I found mtjulietchiropractic.com after doing a quick search – you showed up near the top of the rankings, so whatever you’re doing for SEO, looks like it’s working well. So here’s my question – what happens AFTER someone lands on your site? Anything? Research tells us at least 70% of the people who find your site, after a quick once-over, they disappear… forever. That means that all the work and effort you put into getting them to show up, goes down the tubes. Why would you want all that good work – and the great site you’ve built – go to waste? Because the odds are they’ll just skip over calling or even grabbing their phone, leaving you high and dry. But here’s a thought… what if you could make it super-simple for someone to raise their hand, say, “okay, let’s talk” without requiring them to even pull their cell phone from their pocket? You can – thanks to revolutionary new softwar |
2020-08-27 22:03:32 |
| 23.90.29.103 | attackspam | (From eric@talkwithwebvisitor.com) Hey there, I just found your site, quick question… My name’s Eric, I found mtjulietchiropractic.com after doing a quick search – you showed up near the top of the rankings, so whatever you’re doing for SEO, looks like it’s working well. So here’s my question – what happens AFTER someone lands on your site? Anything? Research tells us at least 70% of the people who find your site, after a quick once-over, they disappear… forever. That means that all the work and effort you put into getting them to show up, goes down the tubes. Why would you want all that good work – and the great site you’ve built – go to waste? Because the odds are they’ll just skip over calling or even grabbing their phone, leaving you high and dry. But here’s a thought… what if you could make it super-simple for someone to raise their hand, say, “okay, let’s talk” without requiring them to even pull their cell phone from their pocket? You can – thanks to revolutionary new softwar |
2020-08-27 21:55:46 |
| 78.196.38.46 | attack | 2020-08-27T08:05:54.660868linuxbox-skyline sshd[191062]: Invalid user soporte from 78.196.38.46 port 57636 ... |
2020-08-27 22:07:38 |
| 167.114.3.158 | attackbots | SSH_scan |
2020-08-27 22:05:14 |
| 113.176.195.85 | attackspam | Unauthorized connection attempt from IP address 113.176.195.85 on Port 445(SMB) |
2020-08-27 21:57:21 |