城市(city): unknown
省份(region): unknown
国家(country): Multicast Address
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 224.138.153.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44996
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;224.138.153.148. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022200 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 22 23:29:58 CST 2025
;; MSG SIZE rcvd: 108Host 148.153.138.224.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 148.153.138.224.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 104.8.247.220 | attack | tcp 23 |
2020-06-05 01:27:02 |
| 122.51.229.124 | attackspambots | Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-06-05 01:43:30 |
| 37.59.224.39 | attackbotsspam | Jun 4 09:54:26 dns1 sshd[26305]: Failed password for root from 37.59.224.39 port 37419 ssh2 Jun 4 09:57:56 dns1 sshd[26562]: Failed password for root from 37.59.224.39 port 37820 ssh2 |
2020-06-05 01:59:35 |
| 184.70.244.67 | attack | Jun 4 16:12:40 server sshd[22145]: Failed password for root from 184.70.244.67 port 39264 ssh2 Jun 4 16:15:45 server sshd[25175]: Failed password for root from 184.70.244.67 port 57532 ssh2 Jun 4 16:18:51 server sshd[28843]: Failed password for root from 184.70.244.67 port 47566 ssh2 |
2020-06-05 01:47:19 |
| 204.48.19.178 | attackbotsspam | Jun 4 13:54:30 vserver sshd\[27371\]: Failed password for root from 204.48.19.178 port 42910 ssh2Jun 4 13:57:37 vserver sshd\[27430\]: Failed password for root from 204.48.19.178 port 46728 ssh2Jun 4 14:00:48 vserver sshd\[27467\]: Failed password for root from 204.48.19.178 port 50676 ssh2Jun 4 14:04:00 vserver sshd\[27521\]: Failed password for root from 204.48.19.178 port 54494 ssh2 ... |
2020-06-05 01:30:24 |
| 106.12.71.84 | attackbotsspam | 2020-06-04T14:01:07.563823n23.at sshd[4340]: Failed password for root from 106.12.71.84 port 33452 ssh2 2020-06-04T14:03:34.480715n23.at sshd[6494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.71.84 user=root 2020-06-04T14:03:36.799835n23.at sshd[6494]: Failed password for root from 106.12.71.84 port 33326 ssh2 ... |
2020-06-05 01:50:04 |
| 37.49.224.162 | attack | Jun 4 19:34:44 ucs sshd\[26894\]: Invalid user admin from 37.49.224.162 port 60330 Jun 4 19:35:23 ucs sshd\[27127\]: Invalid user oracle from 37.49.224.162 port 42446 Jun 4 19:36:02 ucs sshd\[27466\]: Invalid user ubuntu from 37.49.224.162 port 52916 ... |
2020-06-05 01:58:19 |
| 106.13.69.24 | attackspambots | Brute-force attempt banned |
2020-06-05 01:18:26 |
| 41.128.164.83 | attackspambots | Unauthorized connection attempt detected from IP address 41.128.164.83 to port 445 |
2020-06-05 01:45:06 |
| 208.68.39.124 | attack | 2020-06-04T13:54:52.227705shield sshd\[29346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.68.39.124 user=root 2020-06-04T13:54:53.650853shield sshd\[29346\]: Failed password for root from 208.68.39.124 port 34366 ssh2 2020-06-04T13:59:32.780447shield sshd\[31645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.68.39.124 user=root 2020-06-04T13:59:34.977687shield sshd\[31645\]: Failed password for root from 208.68.39.124 port 38028 ssh2 2020-06-04T14:04:18.384835shield sshd\[1277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.68.39.124 user=root |
2020-06-05 01:51:56 |
| 91.106.137.69 | attackspam | [Thu Jun 04 19:04:20.551582 2020] [:error] [pid 27765:tid 140479450683136] [client 91.106.137.69:38397] [client 91.106.137.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/phpmyadmin/"] [unique_id "XtjjRGrt5B@yVHdW6pSrqAAAALQ"] ... |
2020-06-05 01:18:43 |
| 83.97.20.29 | attack | Unauthorized connection attempt detected from IP address 83.97.20.29 to port 443 |
2020-06-05 02:00:11 |
| 222.186.173.142 | attackspam | 2020-06-04T20:27:48.912437afi-git.jinr.ru sshd[22577]: Failed password for root from 222.186.173.142 port 40390 ssh2 2020-06-04T20:27:52.100311afi-git.jinr.ru sshd[22577]: Failed password for root from 222.186.173.142 port 40390 ssh2 2020-06-04T20:27:55.369602afi-git.jinr.ru sshd[22577]: Failed password for root from 222.186.173.142 port 40390 ssh2 2020-06-04T20:27:55.369756afi-git.jinr.ru sshd[22577]: error: maximum authentication attempts exceeded for root from 222.186.173.142 port 40390 ssh2 [preauth] 2020-06-04T20:27:55.369770afi-git.jinr.ru sshd[22577]: Disconnecting: Too many authentication failures [preauth] ... |
2020-06-05 01:45:32 |
| 198.199.81.6 | attackspam | Jun 4 13:59:13 vmi345603 sshd[26260]: Failed password for root from 198.199.81.6 port 54754 ssh2 ... |
2020-06-05 01:57:31 |
| 121.241.244.92 | attackbots | Jun 4 10:36:21 propaganda sshd[9793]: Connection from 121.241.244.92 port 47937 on 10.0.0.160 port 22 rdomain "" Jun 4 10:36:21 propaganda sshd[9793]: Connection closed by 121.241.244.92 port 47937 [preauth] |
2020-06-05 01:54:29 |