城市(city): Reeds Spring
省份(region): Missouri
国家(country): United States
运营商(isp): RTC Communications LLC
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 209.248.138.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32032
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;209.248.138.161. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025030702 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 08 06:42:15 CST 2025
;; MSG SIZE rcvd: 108Host 161.138.248.209.in-addr.arpa not found: 2(SERVFAIL)
server can't find 209.248.138.161.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 181.176.160.66 | attackspambots | [portscan] tcp/3389 [MS RDP] [scan/connect: 2 time(s)] *(RWIN=8192)(11111809) |
2019-11-12 05:15:41 |
| 202.29.220.114 | attackspambots | failed root login |
2019-11-12 04:52:31 |
| 190.9.130.159 | attackbotsspam | Nov 11 21:34:03 h2177944 sshd\[20923\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.9.130.159 user=root Nov 11 21:34:05 h2177944 sshd\[20923\]: Failed password for root from 190.9.130.159 port 38623 ssh2 Nov 11 21:38:56 h2177944 sshd\[21225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.9.130.159 user=root Nov 11 21:38:58 h2177944 sshd\[21225\]: Failed password for root from 190.9.130.159 port 57112 ssh2 ... |
2019-11-12 04:55:09 |
| 36.73.75.51 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2019-11-12 05:01:54 |
| 180.96.69.215 | attackspam | 2019-11-09 07:14:08 server sshd[37267]: Failed password for invalid user test from 180.96.69.215 port 40564 ssh2 |
2019-11-12 04:42:43 |
| 119.42.175.200 | attack | Nov 11 21:20:29 serwer sshd\[29463\]: Invalid user libuuid from 119.42.175.200 port 49463 Nov 11 21:20:29 serwer sshd\[29463\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.42.175.200 Nov 11 21:20:30 serwer sshd\[29463\]: Failed password for invalid user libuuid from 119.42.175.200 port 49463 ssh2 ... |
2019-11-12 04:52:52 |
| 78.46.85.15 | attackbotsspam | "GET /adminer.php HTTP/1.1" 404 "GET /ad.php HTTP/1.1" 404 "GET /adm.php HTTP/1.1" 404 "GET /connect.php HTTP/1.1" 404 "GET /_adminer.php HTTP/1.1" 404 "GET /pma.php HTTP/1.1" 404 "GET /db.php HTTP/1.1" 404 "GET /adminer-4.2.5.php HTTP/1.1" 404 "GET /adminer-4.6.2.php HTTP/1.1" 404 "GET /adminer-4.3.1.php HTTP/1.1" 404 "GET /adminer-4.2.4.php HTTP/1.1" 404 "GET /adminer-4.1.0.php HTTP/1.1" 404 "GET /adminer-4.2.5-mysql.php HTTP/1.1" 404 "GET /adminer-4.6.2-mysql.php HTTP/1.1" 404 "GET /adminer-4.3.1-mysql.php HTTP/1.1" 404 |
2019-11-12 05:04:26 |
| 176.56.236.21 | attackbotsspam | Nov 11 04:33:49 php1 sshd\[29369\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.56.236.21 user=root Nov 11 04:33:51 php1 sshd\[29369\]: Failed password for root from 176.56.236.21 port 55754 ssh2 Nov 11 04:37:14 php1 sshd\[29675\]: Invalid user admin from 176.56.236.21 Nov 11 04:37:14 php1 sshd\[29675\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.56.236.21 Nov 11 04:37:16 php1 sshd\[29675\]: Failed password for invalid user admin from 176.56.236.21 port 41550 ssh2 |
2019-11-12 05:05:52 |
| 59.124.104.157 | attackbotsspam | Nov 11 18:15:44 v22018086721571380 sshd[18981]: Failed password for invalid user Passowrd01 from 59.124.104.157 port 34200 ssh2 Nov 11 19:20:14 v22018086721571380 sshd[21125]: Failed password for invalid user ricky from 59.124.104.157 port 40089 ssh2 |
2019-11-12 04:54:43 |
| 52.231.153.23 | attack | "Fail2Ban detected SSH brute force attempt" |
2019-11-12 05:06:54 |
| 159.89.165.127 | attackbotsspam | Nov 11 16:59:52 server sshd\[3970\]: Failed password for invalid user support from 159.89.165.127 port 59586 ssh2 Nov 11 23:14:06 server sshd\[4442\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.165.127 user=root Nov 11 23:14:08 server sshd\[4442\]: Failed password for root from 159.89.165.127 port 47140 ssh2 Nov 11 23:29:18 server sshd\[8335\]: Invalid user hadoop from 159.89.165.127 Nov 11 23:29:18 server sshd\[8335\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.165.127 ... |
2019-11-12 05:09:24 |
| 81.22.45.152 | attackbots | ET DROP Dshield Block Listed Source group 1 - port: 5689 proto: TCP cat: Misc Attack |
2019-11-12 05:02:59 |
| 104.236.81.204 | attackbotsspam | Nov 11 20:11:38 localhost sshd\[3217\]: Invalid user oracle1 from 104.236.81.204 port 59817 Nov 11 20:11:38 localhost sshd\[3217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.81.204 Nov 11 20:11:40 localhost sshd\[3217\]: Failed password for invalid user oracle1 from 104.236.81.204 port 59817 ssh2 ... |
2019-11-12 05:04:10 |
| 139.162.113.204 | attack | [Mon Nov 11 21:37:51.254643 2019] [:error] [pid 715:tid 140006307493632] [client 139.162.113.204:59716] [client 139.162.113.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XclyP2H3g7BiAMdC0EfUKQAAAAA"] ... |
2019-11-12 04:44:19 |
| 45.136.109.215 | attackbots | Nov 11 19:57:17 h2177944 kernel: \[6374189.149243\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.215 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=34326 PROTO=TCP SPT=56300 DPT=36500 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 11 20:00:53 h2177944 kernel: \[6374405.072754\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.215 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=63257 PROTO=TCP SPT=56300 DPT=48600 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 11 20:01:16 h2177944 kernel: \[6374428.450517\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.215 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=58655 PROTO=TCP SPT=56300 DPT=39700 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 11 20:04:56 h2177944 kernel: \[6374648.186037\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.215 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=13255 PROTO=TCP SPT=56300 DPT=50700 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 11 20:05:14 h2177944 kernel: \[6374666.352982\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.109.215 DST=85. |
2019-11-12 04:51:08 |