城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 75.42.69.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49961
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;75.42.69.20. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025031302 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 14 03:16:36 CST 2025
;; MSG SIZE rcvd: 10420.69.42.75.in-addr.arpa domain name pointer adsl-75-42-69-20.dsl.scrm01.sbcglobal.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
20.69.42.75.in-addr.arpa name = adsl-75-42-69-20.dsl.scrm01.sbcglobal.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 138.68.210.140 | attack | " " |
2019-09-08 21:11:01 |
| 37.187.198.246 | attack | [SunSep0813:41:16.9883522019][:error][pid30457:tid47849223132928][client37.187.198.246:45046][client37.187.198.246]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\$mozilla\^\|mozilla/[45]\\\\\\\\.[1-9]\|\^mozilla/4\\\\\\\\.0\$\)"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"419"][id"330131"][rev"3"][msg"Atomicorp.comWAFRules:MaliciousBotBlocked\(FakeMozillaUserAgentStringDetected\)"][severity"CRITICAL"][hostname"mondo-it.ch"][uri"/wp-includes/js/tinymce/plugins/fullscreen/media-admin.php"][unique_id"XXTo3HZCtWdGikl8x8s1MAAAAAs"]\,referer:mondo-it.ch[SunSep0813:41:17.1966682019][:error][pid3042:tid47849312130816][client37.187.198.246:33890][client37.187.198.246]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\$mozilla\^\|mozilla/[45]\\\\\\\\.[1-9]\|\^mozilla/4\\\\\\\\.0\$\)"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"419"][id"330131\ |
2019-09-08 21:01:12 |
| 208.90.180.55 | attack | Sep 8 10:13:32 tuxlinux sshd[55426]: Invalid user felipe from 208.90.180.55 port 38478 Sep 8 10:13:32 tuxlinux sshd[55426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.90.180.55 Sep 8 10:13:32 tuxlinux sshd[55426]: Invalid user felipe from 208.90.180.55 port 38478 Sep 8 10:13:32 tuxlinux sshd[55426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.90.180.55 Sep 8 10:13:32 tuxlinux sshd[55426]: Invalid user felipe from 208.90.180.55 port 38478 Sep 8 10:13:32 tuxlinux sshd[55426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.90.180.55 Sep 8 10:13:34 tuxlinux sshd[55426]: Failed password for invalid user felipe from 208.90.180.55 port 38478 ssh2 ... |
2019-09-08 20:58:22 |
| 145.239.227.21 | attackspam | SSH Brute Force, server-1 sshd[8339]: Failed password for invalid user webuser from 145.239.227.21 port 47614 ssh2 |
2019-09-08 20:36:40 |
| 222.186.15.110 | attackspam | Sep 8 03:10:59 auw2 sshd\[24787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.110 user=root Sep 8 03:11:01 auw2 sshd\[24787\]: Failed password for root from 222.186.15.110 port 58240 ssh2 Sep 8 03:11:07 auw2 sshd\[24797\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.110 user=root Sep 8 03:11:09 auw2 sshd\[24797\]: Failed password for root from 222.186.15.110 port 64704 ssh2 Sep 8 03:11:16 auw2 sshd\[24810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.110 user=root |
2019-09-08 21:17:59 |
| 119.29.53.107 | attack | Sep 8 11:11:09 server01 sshd\[8351\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.53.107 user=www-data Sep 8 11:11:11 server01 sshd\[8351\]: Failed password for www-data from 119.29.53.107 port 49495 ssh2 Sep 8 11:13:52 server01 sshd\[8414\]: Invalid user testuser from 119.29.53.107 ... |
2019-09-08 20:40:38 |
| 49.248.110.67 | attack | Unauthorised access (Sep 8) SRC=49.248.110.67 LEN=40 PREC=0x20 TTL=238 ID=14194 TCP DPT=445 WINDOW=1024 SYN |
2019-09-08 21:12:15 |
| 31.185.49.170 | attack | TCP Port: 25 _ invalid blocked dnsbl-sorbs abuseat-org _ _ _ _ (764) |
2019-09-08 20:35:29 |
| 46.236.80.118 | attackspam | TCP Port: 25 _ invalid blocked abuseat-org spamcop _ _ _ _ (768) |
2019-09-08 20:25:20 |
| 178.63.13.154 | attack | 20 attempts against mh-misbehave-ban on pluto.magehost.pro |
2019-09-08 20:48:24 |
| 123.207.233.79 | attackbots | Sep 8 01:54:39 lcprod sshd\[19975\]: Invalid user 12345 from 123.207.233.79 Sep 8 01:54:39 lcprod sshd\[19975\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.233.79 Sep 8 01:54:41 lcprod sshd\[19975\]: Failed password for invalid user 12345 from 123.207.233.79 port 46804 ssh2 Sep 8 01:57:53 lcprod sshd\[20264\]: Invalid user 123 from 123.207.233.79 Sep 8 01:57:53 lcprod sshd\[20264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.233.79 |
2019-09-08 20:57:36 |
| 159.203.203.114 | attack | 1433/tcp 1521/tcp [2019-09-06/08]2pkt |
2019-09-08 20:55:50 |
| 182.61.133.143 | attack | SSH Brute-Force reported by Fail2Ban |
2019-09-08 21:06:15 |
| 185.176.27.14 | attackspambots | firewall-block, port(s): 33484/tcp |
2019-09-08 21:19:17 |
| 52.170.82.4 | attack | Sep 8 10:11:04 mail1 sshd\[16654\]: Invalid user git from 52.170.82.4 port 60714 Sep 8 10:11:04 mail1 sshd\[16654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.170.82.4 Sep 8 10:11:06 mail1 sshd\[16654\]: Failed password for invalid user git from 52.170.82.4 port 60714 ssh2 Sep 8 10:25:36 mail1 sshd\[23285\]: Invalid user admin from 52.170.82.4 port 54726 Sep 8 10:25:36 mail1 sshd\[23285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.170.82.4 ... |
2019-09-08 21:23:34 |