城市(city): New Taipei
省份(region): New Taipei
国家(country): Taiwan, China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 219.85.42.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21372
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;219.85.42.208. IN A
;; AUTHORITY SECTION:
. 559 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022033101 1800 900 604800 86400
;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 01 09:20:41 CST 2022
;; MSG SIZE rcvd: 106208.42.85.219.in-addr.arpa domain name pointer 219-85-42-208-adsl-TPE.dynamic.so-net.net.tw.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
208.42.85.219.in-addr.arpa name = 219-85-42-208-adsl-TPE.dynamic.so-net.net.tw.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 185.143.223.183 | attackbotsspam | Port scan on 6 port(s): 12178 12248 12486 12541 12836 12883 |
2019-11-27 21:33:15 |
| 39.43.119.175 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2019-11-27 20:56:48 |
| 51.83.69.99 | attackspambots | 51.83.69.99 - - [27/Nov/2019:16:44:19 +0400] "POST /GponForm/diag_Form?style/ HTTP/1.1" 502 157 "-" "curl/7.3.2" ... |
2019-11-27 21:16:17 |
| 122.176.64.122 | attackspam | Unauthorized connection attempt from IP address 122.176.64.122 on Port 445(SMB) |
2019-11-27 20:56:28 |
| 113.131.125.131 | attack | Honeypot attack, port: 23, PTR: PTR record not found |
2019-11-27 21:29:05 |
| 37.6.109.31 | attackbots | Honeypot attack, port: 23, PTR: adsl-31.37.6.109.tellas.gr. |
2019-11-27 21:04:46 |
| 218.90.180.110 | attack | Autoban 218.90.180.110 ABORTED AUTH |
2019-11-27 20:57:22 |
| 60.19.64.10 | attack | Nov 27 06:54:29 web1 postfix/smtpd[2566]: warning: unknown[60.19.64.10]: SASL LOGIN authentication failed: authentication failure ... |
2019-11-27 21:27:00 |
| 27.198.80.39 | attackspam | Honeypot attack, port: 23, PTR: PTR record not found |
2019-11-27 21:12:11 |
| 185.143.223.185 | attackspam | 2019-11-27T13:30:22.366037+01:00 lumpi kernel: [147788.562182] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=185.143.223.185 DST=78.46.199.189 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=18370 PROTO=TCP SPT=54950 DPT=13771 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-27 21:12:32 |
| 138.118.100.220 | attackbotsspam | Automatic report - Port Scan Attack |
2019-11-27 20:54:28 |
| 14.184.111.84 | attackbots | [portscan] tcp/23 [TELNET] in sorbs:'listed [spam]' *(RWIN=39736)(11271302) |
2019-11-27 20:59:12 |
| 147.135.119.51 | attackbotsspam | Nov 27 03:30:32 TORMINT sshd\[866\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.119.51 user=root Nov 27 03:30:34 TORMINT sshd\[866\]: Failed password for root from 147.135.119.51 port 38982 ssh2 Nov 27 03:34:27 TORMINT sshd\[1131\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.119.51 user=uucp ... |
2019-11-27 21:25:09 |
| 40.114.246.252 | attackbots | 2019-11-27T09:10:08.911724abusebot-8.cloudsearch.cf sshd\[5611\]: Invalid user daemon12345677 from 40.114.246.252 port 52278 |
2019-11-27 21:23:00 |
| 185.43.108.222 | attackspam | [WedNov2707:20:58.7397922019][:error][pid15215:tid47775414765312][client185.43.108.222:54034][client185.43.108.222]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)"][severity"CRITICAL"][hostname"www.ilgiornaledelticino.ch"][uri"/3.sql"][unique_id"Xd4Vym2D5EWU274cjcnUMQAAAE8"][WedNov2707:20:59.3836182019][:error][pid15270:tid47775416866560][client185.43.108.222:54054][client185.43.108.222]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles\(disablethisruleifyourequireaccesstofilesthatendwith.sql\)"][seve |
2019-11-27 21:25:53 |