城市(city): Johannesburg
省份(region): Gauteng
国家(country): South Africa
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): Web-Africa-Networks-AS
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.65.75.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40457
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;102.65.75.161. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019071301 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jul 14 03:10:37 CST 2019
;; MSG SIZE rcvd: 117
161.75.65.102.in-addr.arpa domain name pointer 102-65-75-161.ftth.web.africa.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
161.75.65.102.in-addr.arpa name = 102-65-75-161.ftth.web.africa.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 117.102.119.34 | attackspambots | Unauthorized connection attempt from IP address 117.102.119.34 on Port 445(SMB) |
2020-09-04 17:13:52 |
| 190.37.51.21 | attackspambots | Honeypot attack, port: 445, PTR: 190-37-51-21.dyn.dsl.cantv.net. |
2020-09-04 17:23:05 |
| 118.27.9.23 | attackbots | SSH Invalid Login |
2020-09-04 17:19:20 |
| 124.123.177.102 | attackbots | Sep 3 18:45:11 mellenthin postfix/smtpd[20438]: NOQUEUE: reject: RCPT from unknown[124.123.177.102]: 554 5.7.1 Service unavailable; Client host [124.123.177.102] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/124.123.177.102; from= |
2020-09-04 17:56:10 |
| 222.186.42.137 | attackbots | Sep 4 11:52:36 minden010 sshd[23844]: Failed password for root from 222.186.42.137 port 33591 ssh2 Sep 4 11:52:39 minden010 sshd[23844]: Failed password for root from 222.186.42.137 port 33591 ssh2 Sep 4 11:52:40 minden010 sshd[23844]: Failed password for root from 222.186.42.137 port 33591 ssh2 ... |
2020-09-04 17:53:59 |
| 42.225.147.38 | attack | Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth): user=root |
2020-09-04 17:51:05 |
| 39.61.33.102 | attackbotsspam | Unauthorized connection attempt from IP address 39.61.33.102 on Port 445(SMB) |
2020-09-04 17:47:16 |
| 190.72.219.26 | attackbots | Unauthorized connection attempt from IP address 190.72.219.26 on Port 445(SMB) |
2020-09-04 17:46:00 |
| 162.243.130.35 | attack | firewall-block, port(s): 3011/tcp |
2020-09-04 17:41:17 |
| 86.62.93.100 | attackbots | 1599151526 - 09/03/2020 18:45:26 Host: 86.62.93.100/86.62.93.100 Port: 445 TCP Blocked |
2020-09-04 17:37:39 |
| 62.150.79.106 | attack | Attempted connection to port 1433. |
2020-09-04 17:14:50 |
| 82.178.43.102 | attack | Unauthorized connection attempt from IP address 82.178.43.102 on Port 445(SMB) |
2020-09-04 17:31:57 |
| 68.183.234.44 | attackbotsspam | 68.183.234.44 - - [04/Sep/2020:09:48:05 +0100] "POST /wp-login.php HTTP/1.1" 200 1836 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.234.44 - - [04/Sep/2020:09:48:07 +0100] "POST /wp-login.php HTTP/1.1" 200 1815 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.234.44 - - [04/Sep/2020:09:48:08 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-04 17:53:24 |
| 107.189.11.160 | attackspambots | 2020-08-03T04:15:37.230Z CLOSE host=107.189.11.160 port=45864 fd=4 time=20.018 bytes=6 ... |
2020-09-04 17:37:13 |
| 190.72.201.235 | attackspam | Attempted connection to port 445. |
2020-09-04 17:20:54 |