城市(city): unknown
省份(region): unknown
国家(country): IANA Special-Purpose Address
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 242.13.200.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42970
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;242.13.200.7. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020301 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 03:07:08 CST 2025
;; MSG SIZE rcvd: 105Host 7.200.13.242.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 7.200.13.242.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 110.49.71.246 | attack | Sep 19 12:44:32 ns3110291 sshd\[9083\]: Invalid user user from 110.49.71.246 Sep 19 12:44:32 ns3110291 sshd\[9083\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.49.71.246 Sep 19 12:44:35 ns3110291 sshd\[9083\]: Failed password for invalid user user from 110.49.71.246 port 41580 ssh2 Sep 19 12:49:14 ns3110291 sshd\[9339\]: Invalid user nextcloud from 110.49.71.246 Sep 19 12:49:14 ns3110291 sshd\[9339\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.49.71.246 ... |
2019-09-20 02:11:47 |
| 104.168.215.181 | attackspam | SSH Brute Force, server-1 sshd[6878]: Failed password for invalid user halt from 104.168.215.181 port 41522 ssh2 |
2019-09-20 02:02:56 |
| 101.78.238.189 | attackbotsspam | Intrusion Prevention Alert An intrusion has been detected. The packet has been dropped automatically. You can toggle this rule between "drop" and "alert only" in WebAdmin. Details about the intrusion alert: Message........: SERVER-WEBAPP Wordpress Portable phpMyAdmin plugin authentication bypass attempt Details........: https://www.snort.org/search?query=48486 Time...........: 2019-09-19 12:37:30 Classification.: Web Application Attack IP protocol....: 6 (TCP) |
2019-09-20 01:57:55 |
| 106.12.108.236 | attackbotsspam | Sep 19 13:51:43 microserver sshd[6855]: Invalid user hamdan from 106.12.108.236 port 52554 Sep 19 13:51:43 microserver sshd[6855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.236 Sep 19 13:51:45 microserver sshd[6855]: Failed password for invalid user hamdan from 106.12.108.236 port 52554 ssh2 Sep 19 13:56:22 microserver sshd[7498]: Invalid user nexus from 106.12.108.236 port 33408 Sep 19 13:56:22 microserver sshd[7498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.236 Sep 19 14:09:39 microserver sshd[8968]: Invalid user sentry from 106.12.108.236 port 60666 Sep 19 14:09:39 microserver sshd[8968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.236 Sep 19 14:09:41 microserver sshd[8968]: Failed password for invalid user sentry from 106.12.108.236 port 60666 ssh2 Sep 19 14:14:06 microserver sshd[9599]: Invalid user shaq from 106.12.108.236 port 41534 Se |
2019-09-20 02:12:34 |
| 167.71.205.185 | attackbotsspam | Sep 18 04:56:17 uapps sshd[1758]: Failed password for invalid user matrix from 167.71.205.185 port 59968 ssh2 Sep 18 04:56:17 uapps sshd[1758]: Received disconnect from 167.71.205.185: 11: Bye Bye [preauth] Sep 18 05:16:16 uapps sshd[1890]: Failed password for invalid user teja from 167.71.205.185 port 51086 ssh2 Sep 18 05:16:16 uapps sshd[1890]: Received disconnect from 167.71.205.185: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=167.71.205.185 |
2019-09-20 01:45:42 |
| 207.180.194.213 | attack | SSH bruteforce |
2019-09-20 02:15:52 |
| 142.4.204.122 | attackbotsspam | Sep 19 07:47:31 hanapaa sshd\[15181\]: Invalid user ws from 142.4.204.122 Sep 19 07:47:31 hanapaa sshd\[15181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.204.122 Sep 19 07:47:32 hanapaa sshd\[15181\]: Failed password for invalid user ws from 142.4.204.122 port 52033 ssh2 Sep 19 07:51:40 hanapaa sshd\[15501\]: Invalid user bs from 142.4.204.122 Sep 19 07:51:40 hanapaa sshd\[15501\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.204.122 |
2019-09-20 02:02:08 |
| 189.163.208.217 | attackspam | Sep 19 17:16:12 hosting sshd[2608]: Invalid user lorenzo from 189.163.208.217 port 38480 ... |
2019-09-20 01:45:26 |
| 193.70.42.33 | attackspam | Sep 19 17:06:36 nextcloud sshd\[17365\]: Invalid user temp from 193.70.42.33 Sep 19 17:06:36 nextcloud sshd\[17365\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.42.33 Sep 19 17:06:38 nextcloud sshd\[17365\]: Failed password for invalid user temp from 193.70.42.33 port 41970 ssh2 ... |
2019-09-20 01:53:50 |
| 5.157.13.6 | attack | SQL injection:/index.php?menu_selected=144'A=0&sub_menu_selected=1024&language=FR&redirection=URL_Moved_Permanently&URI=http://www.servicevolontaire.be/servicevolontaire.org/index.php&orginal=http://www.servicevolontaire.be/servicevolontaire.org/index.php&numero_page=148 |
2019-09-20 02:07:08 |
| 186.193.46.8 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/186.193.46.8/ BR - 1H : (132) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN262708 IP : 186.193.46.8 CIDR : 186.193.46.0/24 PREFIX COUNT : 16 UNIQUE IP COUNT : 4096 WYKRYTE ATAKI Z ASN262708 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery |
2019-09-20 01:54:19 |
| 89.44.32.18 | attackbotsspam | 19.09.2019 18:22:25 - Wordpress fail Detected by ELinOX-ALM |
2019-09-20 01:56:17 |
| 84.217.109.6 | attackspambots | Sep 19 17:12:02 sshgateway sshd\[22353\]: Invalid user test from 84.217.109.6 Sep 19 17:12:02 sshgateway sshd\[22353\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.217.109.6 Sep 19 17:12:04 sshgateway sshd\[22353\]: Failed password for invalid user test from 84.217.109.6 port 35936 ssh2 |
2019-09-20 02:24:10 |
| 203.110.213.96 | attackspam | Sep 19 20:03:33 ns41 sshd[32031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.110.213.96 |
2019-09-20 02:20:51 |
| 5.196.67.41 | attack | Sep 19 17:11:06 markkoudstaal sshd[20266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.67.41 Sep 19 17:11:08 markkoudstaal sshd[20266]: Failed password for invalid user huangjm from 5.196.67.41 port 54292 ssh2 Sep 19 17:15:38 markkoudstaal sshd[20670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.67.41 |
2019-09-20 01:56:59 |