城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 66.249.90.144 | attack | [Wed Jul 29 10:48:41.912577 2020] [:error] [pid 26471:tid 140232860927744] [client 66.249.90.144:57740] [client 66.249.90.144] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "118"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "WASCTC/WASC-13"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/buku/508-buku-edisi-setiap-6-bulan-sekali/buku-prakiraan-musim/buku-prakiraan-musim-kemarau/buku-prakiraan-musim-kemarau-tahun-2017"] [unique_id "XyDxmTeYG8yqivQph9zfXQAAAfE"]
... |
2020-07-29 19:54:46 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.249.90.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33796
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;66.249.90.52. IN A
;; AUTHORITY SECTION:
. 528 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 09:08:03 CST 2022
;; MSG SIZE rcvd: 10552.90.249.66.in-addr.arpa domain name pointer rate-limited-proxy-66-249-90-52.google.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
52.90.249.66.in-addr.arpa name = rate-limited-proxy-66-249-90-52.google.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 139.59.85.120 | attackbotsspam | Apr 30 02:49:42 s158375 sshd[31129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.85.120 |
2020-04-30 15:50:05 |
| 185.165.31.157 | attack | lfd: (smtpauth) Failed SMTP AUTH login from 185.165.31.157 (-): 5 in the last 3600 secs - Wed Jun 13 13:20:50 2018 |
2020-04-30 16:31:04 |
| 64.227.54.28 | attack | Invalid user wp from 64.227.54.28 port 37784 |
2020-04-30 16:09:17 |
| 14.21.98.82 | attackbotsspam | Brute force blocker - service: proftpd1 - aantal: 126 - Fri Jun 15 11:05:17 2018 |
2020-04-30 16:07:37 |
| 186.113.18.109 | attackspam | Invalid user hamid from 186.113.18.109 port 37384 |
2020-04-30 16:19:03 |
| 122.160.76.224 | attackbots | $f2bV_matches |
2020-04-30 15:51:49 |
| 49.234.206.45 | attackbotsspam | 2020-04-30T05:55:43.426595shield sshd\[10554\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.206.45 user=root 2020-04-30T05:55:45.917504shield sshd\[10554\]: Failed password for root from 49.234.206.45 port 44388 ssh2 2020-04-30T05:58:42.430878shield sshd\[11308\]: Invalid user dk from 49.234.206.45 port 48948 2020-04-30T05:58:42.438695shield sshd\[11308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.206.45 2020-04-30T05:58:44.167179shield sshd\[11308\]: Failed password for invalid user dk from 49.234.206.45 port 48948 ssh2 |
2020-04-30 16:06:45 |
| 202.148.28.83 | attackbots | Fail2Ban - SSH Bruteforce Attempt |
2020-04-30 15:49:21 |
| 49.76.11.206 | attackspambots | lfd: (smtpauth) Failed SMTP AUTH login from 49.76.11.206 (-): 5 in the last 3600 secs - Wed Jun 13 22:19:19 2018 |
2020-04-30 16:28:02 |
| 221.227.110.198 | attackspambots | lfd: (smtpauth) Failed SMTP AUTH login from 221.227.110.198 (-): 5 in the last 3600 secs - Wed Jun 13 13:15:37 2018 |
2020-04-30 16:30:50 |
| 220.130.178.36 | attackspambots | Invalid user gabriel from 220.130.178.36 port 47498 |
2020-04-30 16:20:17 |
| 179.125.18.2 | attackbotsspam | SSH brute-force attempt |
2020-04-30 16:02:34 |
| 165.22.54.171 | attackspam | Invalid user mind from 165.22.54.171 port 46726 |
2020-04-30 15:59:15 |
| 177.220.172.252 | attackbots | Apr 30 07:57:25 pl3server sshd[10177]: Invalid user yan from 177.220.172.252 port 34915 Apr 30 07:57:25 pl3server sshd[10177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.220.172.252 Apr 30 07:57:27 pl3server sshd[10177]: Failed password for invalid user yan from 177.220.172.252 port 34915 ssh2 Apr 30 07:57:27 pl3server sshd[10177]: Received disconnect from 177.220.172.252 port 34915:11: Bye Bye [preauth] Apr 30 07:57:27 pl3server sshd[10177]: Disconnected from 177.220.172.252 port 34915 [preauth] Apr 30 08:27:28 pl3server sshd[2621]: Invalid user user from 177.220.172.252 port 13475 Apr 30 08:27:28 pl3server sshd[2621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.220.172.252 Apr 30 08:27:30 pl3server sshd[2621]: Failed password for invalid user user from 177.220.172.252 port 13475 ssh2 Apr 30 08:27:31 pl3server sshd[2621]: Received disconnect from 177.220.172.252 port 13475:........ ------------------------------- |
2020-04-30 16:11:01 |
| 222.186.15.62 | attackspam | 2020-04-30T09:52:10.266854centos sshd[19990]: Failed password for root from 222.186.15.62 port 59696 ssh2 2020-04-30T09:52:14.593389centos sshd[19990]: Failed password for root from 222.186.15.62 port 59696 ssh2 2020-04-30T09:52:18.841673centos sshd[19990]: Failed password for root from 222.186.15.62 port 59696 ssh2 ... |
2020-04-30 15:55:40 |