城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 69.192.41.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65412
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;69.192.41.16. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025010602 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 07 12:08:48 CST 2025
;; MSG SIZE rcvd: 10516.41.192.69.in-addr.arpa domain name pointer a69-192-41-16.deploy.static.akamaitechnologies.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
16.41.192.69.in-addr.arpa name = a69-192-41-16.deploy.static.akamaitechnologies.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 35.202.157.96 | attackbots | WordPress wp-login brute force :: 35.202.157.96 0.332 - [13/May/2020:12:38:58 0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 1837 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1" |
2020-05-13 21:15:22 |
| 45.142.195.7 | attack | 2020-05-13 16:17:57 dovecot_login authenticator failed for \(User\) \[45.142.195.7\]: 535 Incorrect authentication data \(set_id=panelstatsmail@org.ua\)2020-05-13 16:18:46 dovecot_login authenticator failed for \(User\) \[45.142.195.7\]: 535 Incorrect authentication data \(set_id=pankaj@org.ua\)2020-05-13 16:19:39 dovecot_login authenticator failed for \(User\) \[45.142.195.7\]: 535 Incorrect authentication data \(set_id=pano@org.ua\) ... |
2020-05-13 21:20:02 |
| 167.99.183.237 | attackspam | (sshd) Failed SSH login from 167.99.183.237 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 13 15:26:48 s1 sshd[29268]: Invalid user wildfly from 167.99.183.237 port 46896 May 13 15:26:50 s1 sshd[29268]: Failed password for invalid user wildfly from 167.99.183.237 port 46896 ssh2 May 13 15:37:01 s1 sshd[29623]: Invalid user nwalczak from 167.99.183.237 port 47406 May 13 15:37:03 s1 sshd[29623]: Failed password for invalid user nwalczak from 167.99.183.237 port 47406 ssh2 May 13 15:40:39 s1 sshd[29706]: Invalid user deploy from 167.99.183.237 port 55478 |
2020-05-13 21:32:10 |
| 118.97.23.33 | attackspam | May 13 14:55:22 haigwepa sshd[786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.97.23.33 May 13 14:55:24 haigwepa sshd[786]: Failed password for invalid user hao from 118.97.23.33 port 41175 ssh2 ... |
2020-05-13 21:37:17 |
| 119.40.37.126 | attackspam | May 13 18:03:35 gw1 sshd[4168]: Failed password for root from 119.40.37.126 port 28052 ssh2 May 13 18:06:56 gw1 sshd[4251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.40.37.126 ... |
2020-05-13 21:21:13 |
| 54.36.149.27 | attackbotsspam | [Wed May 13 19:38:30.804191 2020] [:error] [pid 25355:tid 140604151064320] [client 54.36.149.27:47148] [client 54.36.149.27] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "AhrefsBot" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-913-SCANNER-DETECTION.conf"] [line "183"] [id "913102"] [msg "Found User-Agent associated with web crawler/bot"] [data "Matched Data: AhrefsBot found within REQUEST_HEADERS:User-Agent: mozilla/5.0 (compatible; ahrefsbot/6.1; +http://ahrefs.com/robot/)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-reputation-crawler"] [tag "OWASP_CRS"] [tag "OWASP_CRS/AUTOMATION/CRAWLER"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/1079-klimatologi/agroklimatologi/kalender-tanam-katam-terpadu/kalender-tanam-katam-terpa ... |
2020-05-13 21:41:12 |
| 122.160.46.61 | attackspam | May 13 14:38:35 cloud sshd[32402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.160.46.61 May 13 14:38:37 cloud sshd[32402]: Failed password for invalid user user from 122.160.46.61 port 43904 ssh2 |
2020-05-13 21:36:45 |
| 49.88.112.70 | attackbotsspam | 2020-05-13T12:49:16.271935shield sshd\[13026\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.70 user=root 2020-05-13T12:49:18.286031shield sshd\[13026\]: Failed password for root from 49.88.112.70 port 16248 ssh2 2020-05-13T12:49:20.460571shield sshd\[13026\]: Failed password for root from 49.88.112.70 port 16248 ssh2 2020-05-13T12:49:22.252828shield sshd\[13026\]: Failed password for root from 49.88.112.70 port 16248 ssh2 2020-05-13T12:50:13.788162shield sshd\[13267\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.70 user=root |
2020-05-13 21:03:47 |
| 145.239.78.111 | attackspam | May 13 08:35:20 ny01 sshd[31321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.78.111 May 13 08:35:22 ny01 sshd[31321]: Failed password for invalid user gnu from 145.239.78.111 port 32924 ssh2 May 13 08:38:52 ny01 sshd[31727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.78.111 |
2020-05-13 21:20:26 |
| 51.38.130.63 | attackbots | May 13 15:03:22 buvik sshd[12562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.130.63 May 13 15:03:24 buvik sshd[12562]: Failed password for invalid user oracle10g from 51.38.130.63 port 36214 ssh2 May 13 15:05:48 buvik sshd[12888]: Invalid user wallet from 51.38.130.63 ... |
2020-05-13 21:10:26 |
| 31.154.74.110 | attackbotsspam | 1589373547 - 05/13/2020 14:39:07 Host: 31.154.74.110/31.154.74.110 Port: 445 TCP Blocked |
2020-05-13 21:08:54 |
| 89.248.172.123 | attackspam | 05/13/2020-08:38:29.882677 89.248.172.123 Protocol: 17 ET DROP Dshield Block Listed Source group 1 |
2020-05-13 21:46:11 |
| 183.89.212.244 | attack | Brute Force - Dovecot |
2020-05-13 21:23:42 |
| 112.64.34.165 | attackspam | May 13 14:35:54 legacy sshd[3018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.34.165 May 13 14:35:56 legacy sshd[3018]: Failed password for invalid user deploy from 112.64.34.165 port 34728 ssh2 May 13 14:39:22 legacy sshd[3185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.34.165 ... |
2020-05-13 20:54:21 |
| 36.48.144.158 | attack | May 13 15:22:33 plex sshd[15038]: Invalid user test from 36.48.144.158 port 6770 |
2020-05-13 21:33:03 |