城市(city): unknown
省份(region): unknown
国家(country): India
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.39.49.146
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43880
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;1.39.49.146. IN A
;; AUTHORITY SECTION:
. 147 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011000 1800 900 604800 86400
;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 10 14:15:27 CST 2022
;; MSG SIZE rcvd: 104
146.49.39.1.in-addr.arpa domain name pointer 1-39-49-146.live.vodafone.in.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
146.49.39.1.in-addr.arpa name = 1-39-49-146.live.vodafone.in.
Authoritative answers can be found from:
IP | 类型 | 评论内容 | 时间 |
---|---|---|---|
219.235.84.15 | attackbotsspam | 33339/tcp 35553/tcp 1001/tcp... [2019-10-23/11-01]42pkt,16pt.(tcp) |
2019-11-03 15:04:12 |
92.119.160.107 | attackspam | Nov 3 06:50:34 mc1 kernel: \[4046544.576614\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=38300 PROTO=TCP SPT=48045 DPT=48262 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 3 06:55:48 mc1 kernel: \[4046858.611551\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=16351 PROTO=TCP SPT=48045 DPT=48350 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 3 06:56:25 mc1 kernel: \[4046895.412898\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=10240 PROTO=TCP SPT=48045 DPT=48167 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-03 15:02:35 |
222.186.42.4 | attackspambots | 2019-11-03T07:17:09.610204abusebot-8.cloudsearch.cf sshd\[11075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.4 user=root |
2019-11-03 15:22:21 |
185.173.35.49 | attackspam | Automatic report - Banned IP Access |
2019-11-03 15:14:07 |
62.99.78.98 | attack | Nov 3 06:54:45 dcd-gentoo sshd[20168]: Invalid user testuser from 62.99.78.98 port 1645 Nov 3 06:54:47 dcd-gentoo sshd[20168]: error: PAM: Authentication failure for illegal user testuser from 62.99.78.98 Nov 3 06:54:45 dcd-gentoo sshd[20168]: Invalid user testuser from 62.99.78.98 port 1645 Nov 3 06:54:47 dcd-gentoo sshd[20168]: error: PAM: Authentication failure for illegal user testuser from 62.99.78.98 Nov 3 06:54:45 dcd-gentoo sshd[20168]: Invalid user testuser from 62.99.78.98 port 1645 Nov 3 06:54:47 dcd-gentoo sshd[20168]: error: PAM: Authentication failure for illegal user testuser from 62.99.78.98 Nov 3 06:54:47 dcd-gentoo sshd[20168]: Failed keyboard-interactive/pam for invalid user testuser from 62.99.78.98 port 1645 ssh2 ... |
2019-11-03 14:50:14 |
185.94.188.130 | attackbots | 21/tcp 5432/tcp 1900/tcp... [2019-09-07/11-03]33pkt,11pt.(tcp),3pt.(udp) |
2019-11-03 14:59:44 |
185.156.73.52 | attackbots | 11/03/2019-01:59:48.096509 185.156.73.52 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-11-03 15:05:09 |
222.186.175.169 | attackspambots | $f2bV_matches_ltvn |
2019-11-03 14:46:23 |
178.150.132.45 | attackbots | Nov 3 06:54:09 localhost sshd\[25677\]: Invalid user hs from 178.150.132.45 port 43160 Nov 3 06:54:09 localhost sshd\[25677\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.150.132.45 Nov 3 06:54:12 localhost sshd\[25677\]: Failed password for invalid user hs from 178.150.132.45 port 43160 ssh2 |
2019-11-03 15:19:16 |
193.32.160.152 | attack | 2019-11-03T08:15:30.123954mail01 postfix/smtpd[28852]: NOQUEUE: reject: RCPT from unknown[193.32.160.152]: 550 |
2019-11-03 15:20:47 |
209.17.96.186 | attackspam | 137/udp 8081/tcp 8888/tcp... [2019-09-03/11-02]84pkt,13pt.(tcp),1pt.(udp) |
2019-11-03 14:52:19 |
186.7.128.186 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/186.7.128.186/ DO - 1H : (4) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : DO NAME ASN : ASN6400 IP : 186.7.128.186 CIDR : 186.7.128.0/18 PREFIX COUNT : 140 UNIQUE IP COUNT : 832000 ATTACKS DETECTED ASN6400 : 1H - 1 3H - 1 6H - 1 12H - 3 24H - 3 DateTime : 2019-11-03 06:54:39 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-03 14:58:27 |
217.113.28.5 | attackbotsspam | Nov 2 19:50:25 php1 sshd\[14777\]: Invalid user 12345 from 217.113.28.5 Nov 2 19:50:25 php1 sshd\[14777\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.113.28.5 Nov 2 19:50:27 php1 sshd\[14777\]: Failed password for invalid user 12345 from 217.113.28.5 port 41773 ssh2 Nov 2 19:54:48 php1 sshd\[15626\]: Invalid user sjen123 from 217.113.28.5 Nov 2 19:54:48 php1 sshd\[15626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.113.28.5 |
2019-11-03 14:50:36 |
145.239.89.243 | attack | Nov 3 06:51:10 SilenceServices sshd[1999]: Failed password for root from 145.239.89.243 port 39082 ssh2 Nov 3 06:54:43 SilenceServices sshd[4327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.89.243 Nov 3 06:54:45 SilenceServices sshd[4327]: Failed password for invalid user alberta from 145.239.89.243 port 48730 ssh2 |
2019-11-03 14:55:12 |
1.173.81.95 | attackbots | CloudCIX Reconnaissance Scan Detected, PTR: 1-173-81-95.dynamic-ip.hinet.net. |
2019-11-03 14:54:29 |