城市(city): unknown
省份(region): unknown
国家(country): Australia
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.43.198.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19644
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.43.198.149. IN A
;; AUTHORITY SECTION:
. 384 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019120100 1800 900 604800 86400
;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 01 22:33:01 CST 2019
;; MSG SIZE rcvd: 116
149.198.43.1.in-addr.arpa domain name pointer n1-43-198-149.mas2.nsw.optusnet.com.au.
Server: 100.100.2.136
Address: 100.100.2.136#53
Non-authoritative answer:
149.198.43.1.in-addr.arpa name = n1-43-198-149.mas2.nsw.optusnet.com.au.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 45.233.139.16 | attackspambots | Unauthorized access or intrusion attempt detected from Thor banned IP |
2020-01-04 00:02:43 |
| 36.238.90.183 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 03-01-2020 13:05:18. |
2020-01-03 23:39:45 |
| 107.170.192.131 | attack | Jan 3 12:56:53 ip-172-31-62-245 sshd\[23247\]: Invalid user jdu from 107.170.192.131\ Jan 3 12:56:55 ip-172-31-62-245 sshd\[23247\]: Failed password for invalid user jdu from 107.170.192.131 port 38144 ssh2\ Jan 3 13:00:40 ip-172-31-62-245 sshd\[23347\]: Invalid user prosper from 107.170.192.131\ Jan 3 13:00:42 ip-172-31-62-245 sshd\[23347\]: Failed password for invalid user prosper from 107.170.192.131 port 54379 ssh2\ Jan 3 13:04:33 ip-172-31-62-245 sshd\[23417\]: Invalid user Waschlappen from 107.170.192.131\ |
2020-01-04 00:08:04 |
| 45.136.111.109 | attack | Jan 3 15:58:09 h2177944 kernel: \[1262092.522476\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=27223 PROTO=TCP SPT=48227 DPT=3007 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 3 15:58:09 h2177944 kernel: \[1262092.522489\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=27223 PROTO=TCP SPT=48227 DPT=3007 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 3 16:33:07 h2177944 kernel: \[1264190.699883\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=62098 PROTO=TCP SPT=48227 DPT=3004 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 3 16:33:07 h2177944 kernel: \[1264190.699897\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=186 ID=62098 PROTO=TCP SPT=48227 DPT=3004 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 3 16:33:12 h2177944 kernel: \[1264195.130428\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.111.109 DST=85.214. |
2020-01-04 00:00:41 |
| 69.94.158.103 | attackspambots | Jan 3 15:04:24 grey postfix/smtpd\[13029\]: NOQUEUE: reject: RCPT from pathetic.swingthelamp.com\[69.94.158.103\]: 554 5.7.1 Service unavailable\; Client host \[69.94.158.103\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[69.94.158.103\]\; from=\ |
2020-01-04 00:16:13 |
| 109.87.91.165 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 03-01-2020 13:05:13. |
2020-01-03 23:46:17 |
| 194.27.10.20 | attackspambots | Honeypot attack, port: 445, PTR: gazi10-20.gazi.edu.tr. |
2020-01-03 23:40:17 |
| 36.72.36.181 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 03-01-2020 13:05:19. |
2020-01-03 23:37:22 |
| 128.199.243.138 | attackbotsspam | Jan 3 20:01:32 itv-usvr-01 sshd[10244]: Invalid user guest from 128.199.243.138 Jan 3 20:01:32 itv-usvr-01 sshd[10244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.243.138 Jan 3 20:01:32 itv-usvr-01 sshd[10244]: Invalid user guest from 128.199.243.138 Jan 3 20:01:34 itv-usvr-01 sshd[10244]: Failed password for invalid user guest from 128.199.243.138 port 53502 ssh2 Jan 3 20:04:43 itv-usvr-01 sshd[10363]: Invalid user finplus from 128.199.243.138 |
2020-01-04 00:03:18 |
| 146.185.183.107 | attackspam | 146.185.183.107 - - [03/Jan/2020:14:04:22 +0100] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 146.185.183.107 - - [03/Jan/2020:14:04:23 +0100] "POST /wp-login.php HTTP/1.1" 200 2298 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 146.185.183.107 - - [03/Jan/2020:14:04:23 +0100] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 146.185.183.107 - - [03/Jan/2020:14:04:23 +0100] "POST /wp-login.php HTTP/1.1" 200 2272 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 146.185.183.107 - - [03/Jan/2020:14:04:23 +0100] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 146.185.183.107 - - [03/Jan/2020:14:04:23 +0100] "POST /wp-login.php HTTP/1.1" 200 2273 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" . |
2020-01-04 00:10:56 |
| 173.124.214.35 | attack | tcp 445 |
2020-01-03 23:49:31 |
| 14.177.224.34 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 03-01-2020 13:05:14. |
2020-01-03 23:44:51 |
| 222.186.180.6 | attackspam | Jan 3 16:53:24 vmd26974 sshd[2127]: Failed password for root from 222.186.180.6 port 26530 ssh2 Jan 3 16:53:36 vmd26974 sshd[2127]: error: maximum authentication attempts exceeded for root from 222.186.180.6 port 26530 ssh2 [preauth] ... |
2020-01-03 23:53:53 |
| 115.159.66.109 | attack | Jan 3 10:04:31 ws22vmsma01 sshd[206849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.66.109 Jan 3 10:04:33 ws22vmsma01 sshd[206849]: Failed password for invalid user cclabgit from 115.159.66.109 port 41792 ssh2 ... |
2020-01-04 00:07:42 |
| 200.44.245.45 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 03-01-2020 13:05:18. |
2020-01-03 23:38:39 |