城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.170.29.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7095
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.170.29.91. IN A
;; AUTHORITY SECTION:
. 499 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023102201 1800 900 604800 86400
;; Query time: 96 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 23 07:44:07 CST 2023
;; MSG SIZE rcvd: 106
Host 91.29.170.104.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 91.29.170.104.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 27.62.113.219 | attack | Unauthorized connection attempt from IP address 27.62.113.219 on Port 445(SMB) |
2019-11-10 23:57:16 |
| 70.183.157.187 | attackspambots | Unauthorized connection attempt from IP address 70.183.157.187 on Port 445(SMB) |
2019-11-10 23:50:25 |
| 45.91.149.54 | attackbots | Nov 11 00:15:25 our-server-hostname postfix/smtpd[1407]: connect from unknown[45.91.149.54] Nov 11 00:15:28 our-server-hostname postfix/smtpd[1161]: connect from unknown[45.91.149.54] Nov x@x Nov x@x Nov 11 00:15:30 our-server-hostname postfix/smtpd[1161]: 44B74A40041: client=unknown[45.91.149.54] Nov x@x Nov x@x Nov 11 00:15:30 our-server-hostname postfix/smtpd[1407]: 4770CA40095: client=unknown[45.91.149.54] Nov 11 00:15:30 our-server-hostname postfix/smtpd[31863]: B5911A40096: client=unknown[127.0.0.1], orig_client=unknown[45.91.149.54] Nov 11 00:15:30 our-server-hostname amavis[28801]: (28801-11) Passed CLEAN, [45.91.149.54] [45.91.149.54] |
2019-11-10 23:40:53 |
| 139.198.189.36 | attackspam | Nov 10 05:28:36 wbs sshd\[13959\]: Invalid user ftpuser from 139.198.189.36 Nov 10 05:28:36 wbs sshd\[13959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.36 Nov 10 05:28:38 wbs sshd\[13959\]: Failed password for invalid user ftpuser from 139.198.189.36 port 56772 ssh2 Nov 10 05:33:32 wbs sshd\[14381\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.36 user=root Nov 10 05:33:35 wbs sshd\[14381\]: Failed password for root from 139.198.189.36 port 60966 ssh2 |
2019-11-10 23:38:27 |
| 145.255.162.130 | attack | Nov 10 15:28:26 mxgate1 postfix/postscreen[20780]: CONNECT from [145.255.162.130]:37266 to [176.31.12.44]:25 Nov 10 15:28:26 mxgate1 postfix/dnsblog[20781]: addr 145.255.162.130 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 10 15:28:26 mxgate1 postfix/dnsblog[20782]: addr 145.255.162.130 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 10 15:28:26 mxgate1 postfix/dnsblog[20782]: addr 145.255.162.130 listed by domain zen.spamhaus.org as 127.0.0.11 Nov 10 15:28:26 mxgate1 postfix/dnsblog[20785]: addr 145.255.162.130 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 10 15:28:26 mxgate1 postfix/postscreen[20780]: PREGREET 23 after 0.2 from [145.255.162.130]:37266: EHLO [145.255.160.72] Nov 10 15:28:26 mxgate1 postfix/postscreen[20780]: DNSBL rank 4 for [145.255.162.130]:37266 Nov x@x Nov 10 15:28:27 mxgate1 postfix/postscreen[20780]: HANGUP after 0.9 from [145.255.162.130]:37266 in tests after SMTP handshake Nov 10 15:28:27 mxgate1 postfix/postscreen[20780]: D........ ------------------------------- |
2019-11-10 23:44:18 |
| 190.181.4.94 | attackspam | Nov 10 15:46:03 pornomens sshd\[21686\]: Invalid user password from 190.181.4.94 port 33812 Nov 10 15:46:03 pornomens sshd\[21686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.181.4.94 Nov 10 15:46:05 pornomens sshd\[21686\]: Failed password for invalid user password from 190.181.4.94 port 33812 ssh2 ... |
2019-11-10 23:57:39 |
| 176.159.245.147 | attackspambots | Nov 10 16:44:29 MK-Soft-Root2 sshd[8454]: Failed password for backup from 176.159.245.147 port 40960 ssh2 ... |
2019-11-11 00:06:46 |
| 125.214.51.33 | attackbots | Unauthorized connection attempt from IP address 125.214.51.33 on Port 445(SMB) |
2019-11-11 00:00:36 |
| 197.245.57.143 | attackbotsspam | Unauthorized connection attempt from IP address 197.245.57.143 on Port 445(SMB) |
2019-11-10 23:54:17 |
| 181.56.69.185 | attackspam | 2019-11-10T14:42:02.821605hub.schaetter.us sshd\[23212\]: Invalid user perry from 181.56.69.185 port 23211 2019-11-10T14:42:02.843317hub.schaetter.us sshd\[23212\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.56.69.185 2019-11-10T14:42:05.566422hub.schaetter.us sshd\[23212\]: Failed password for invalid user perry from 181.56.69.185 port 23211 ssh2 2019-11-10T14:46:09.865854hub.schaetter.us sshd\[23255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.56.69.185 user=root 2019-11-10T14:46:11.831065hub.schaetter.us sshd\[23255\]: Failed password for root from 181.56.69.185 port 64362 ssh2 ... |
2019-11-10 23:50:56 |
| 81.22.45.187 | attackbots | 81.22.45.187 was recorded 71 times by 20 hosts attempting to connect to the following ports: 48000,3311,10088,2222,45000,8001,32000,44000,57000,9001,10793,46000,8933,6699,56000,8756,4010,33000,57168,18000,54000,9090,26000,6001,3010,5001,3344,41000,14000,19000,39000,52000,4001,10086,3321,20000,17000,47000,36000,3355,4002,62677,51000,7766,55001,49000,8956,3340,4003,8965,35000,33988,8090,51888. Incident counter (4h, 24h, all-time): 71, 372, 778 |
2019-11-11 00:04:01 |
| 185.53.160.203 | attackbotsspam | Nov 10 07:19:48 our-server-hostname postfix/smtpd[2181]: connect from unknown[185.53.160.203] Nov x@x Nov 10 07:19:49 our-server-hostname postfix/smtpd[2181]: lost connection after RCPT from unknown[185.53.160.203] Nov 10 07:19:49 our-server-hostname postfix/smtpd[2181]: disconnect from unknown[185.53.160.203] Nov 10 07:20:08 our-server-hostname postfix/smtpd[2320]: connect from unknown[185.53.160.203] Nov 10 07:20:09 our-server-hostname postfix/smtpd[2320]: NOQUEUE: reject: RCPT from unknown[185.53.160.203]: 554 5.7.1 Service unavailable; Client host [185.53.160.203] blocked using zen.spamhaus .... truncated .... e postfix/smtpd[21312]: disconnect from unknown[185.53.160.203] Nov 10 10:33:20 our-server-hostname postfix/smtpd[21313]: connect from unknown[185.53.160.203] Nov x@x Nov 10 10:33:22 our-server-hostname postfix/smtpd[21313]: lost connection after RCPT from unknown[185.53.160.203] Nov 10 10:33:22 our-server-hostname postfix/smtpd[21313]: disconnect from unknow........ ------------------------------- |
2019-11-10 23:58:50 |
| 102.159.17.251 | attack | Nov 10 15:31:46 mxgate1 postfix/postscreen[20780]: CONNECT from [102.159.17.251]:29361 to [176.31.12.44]:25 Nov 10 15:31:46 mxgate1 postfix/dnsblog[20785]: addr 102.159.17.251 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 10 15:31:46 mxgate1 postfix/dnsblog[20783]: addr 102.159.17.251 listed by domain zen.spamhaus.org as 127.0.0.11 Nov 10 15:31:46 mxgate1 postfix/dnsblog[20783]: addr 102.159.17.251 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 10 15:31:46 mxgate1 postfix/dnsblog[20784]: addr 102.159.17.251 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Nov 10 15:31:46 mxgate1 postfix/dnsblog[20782]: addr 102.159.17.251 listed by domain bl.spamcop.net as 127.0.0.2 Nov 10 15:31:52 mxgate1 postfix/postscreen[20780]: DNSBL rank 5 for [102.159.17.251]:29361 Nov x@x Nov 10 15:31:54 mxgate1 postfix/postscreen[20780]: HANGUP after 2.3 from [102.159.17.251]:29361 in tests after SMTP handshake Nov 10 15:31:54 mxgate1 postfix/postscreen[20780]: DISCONNECT [102.159.17.2........ ------------------------------- |
2019-11-11 00:12:03 |
| 178.176.182.111 | attack | Unauthorized connection attempt from IP address 178.176.182.111 on Port 445(SMB) |
2019-11-11 00:14:37 |
| 86.105.53.166 | attack | Nov 10 16:47:19 vps691689 sshd[24420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.105.53.166 Nov 10 16:47:20 vps691689 sshd[24420]: Failed password for invalid user guest from 86.105.53.166 port 35071 ssh2 Nov 10 16:50:24 vps691689 sshd[24527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.105.53.166 ... |
2019-11-11 00:03:37 |