城市(city): Kempton Park
省份(region): Gauteng
国家(country): South Africa
运营商(isp): Telkom
主机名(hostname): unknown
机构(organization): Telkom-Internet
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.226.234.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43378
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;105.226.234.19. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019042500 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Fri Apr 26 02:13:57 +08 2019
;; MSG SIZE rcvd: 118
19.234.226.105.in-addr.arpa domain name pointer 234-226-105-19.north.dsl.telkomsa.net.
Server: 67.207.67.3
Address: 67.207.67.3#53
Non-authoritative answer:
19.234.226.105.in-addr.arpa name = 234-226-105-19.north.dsl.telkomsa.net.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 51.68.228.85 | attack | 51.68.228.85 - - [09/Nov/2019:16:02:37 +0100] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.68.228.85 - - [09/Nov/2019:16:02:38 +0100] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.68.228.85 - - [09/Nov/2019:16:02:38 +0100] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.68.228.85 - - [09/Nov/2019:16:02:39 +0100] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.68.228.85 - - [09/Nov/2019:16:02:39 +0100] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.68.228.85 - - [09/Nov/2019:16:02:39 +0100] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-11-09 23:25:09 |
| 222.186.175.202 | attackbots | Nov 9 15:57:38 MK-Soft-VM7 sshd[25336]: Failed password for root from 222.186.175.202 port 56184 ssh2 Nov 9 15:57:43 MK-Soft-VM7 sshd[25336]: Failed password for root from 222.186.175.202 port 56184 ssh2 ... |
2019-11-09 23:02:12 |
| 72.139.96.214 | attack | RDP Bruteforce |
2019-11-09 23:30:30 |
| 110.35.173.2 | attackspambots | Nov 9 14:49:02 hcbbdb sshd\[2568\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.35.173.2 user=root Nov 9 14:49:04 hcbbdb sshd\[2568\]: Failed password for root from 110.35.173.2 port 13180 ssh2 Nov 9 14:53:16 hcbbdb sshd\[3021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.35.173.2 user=root Nov 9 14:53:18 hcbbdb sshd\[3021\]: Failed password for root from 110.35.173.2 port 3063 ssh2 Nov 9 14:57:31 hcbbdb sshd\[3427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.35.173.2 user=root |
2019-11-09 23:09:30 |
| 114.246.11.178 | attack | $f2bV_matches |
2019-11-09 22:59:42 |
| 95.211.185.69 | attackspambots | TCP Port Scanning |
2019-11-09 22:59:15 |
| 188.191.201.236 | attackspambots | Automatic report - Port Scan Attack |
2019-11-09 22:58:25 |
| 74.117.153.221 | attackbotsspam | Nov 9 05:24:17 tdfoods sshd\[28520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.117.153.221 user=root Nov 9 05:24:19 tdfoods sshd\[28520\]: Failed password for root from 74.117.153.221 port 58480 ssh2 Nov 9 05:28:25 tdfoods sshd\[28839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.117.153.221 user=root Nov 9 05:28:27 tdfoods sshd\[28839\]: Failed password for root from 74.117.153.221 port 40848 ssh2 Nov 9 05:32:29 tdfoods sshd\[29179\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.117.153.221 user=root |
2019-11-09 23:36:34 |
| 193.70.42.33 | attack | Nov 9 14:57:38 venus sshd\[6808\]: Invalid user password from 193.70.42.33 port 41154 Nov 9 14:57:38 venus sshd\[6808\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.42.33 Nov 9 14:57:40 venus sshd\[6808\]: Failed password for invalid user password from 193.70.42.33 port 41154 ssh2 ... |
2019-11-09 23:04:19 |
| 202.126.208.122 | attackbots | Nov 9 15:53:18 sd-53420 sshd\[21125\]: User root from 202.126.208.122 not allowed because none of user's groups are listed in AllowGroups Nov 9 15:53:18 sd-53420 sshd\[21125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.126.208.122 user=root Nov 9 15:53:20 sd-53420 sshd\[21125\]: Failed password for invalid user root from 202.126.208.122 port 45032 ssh2 Nov 9 15:57:40 sd-53420 sshd\[22338\]: User root from 202.126.208.122 not allowed because none of user's groups are listed in AllowGroups Nov 9 15:57:40 sd-53420 sshd\[22338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.126.208.122 user=root ... |
2019-11-09 23:02:38 |
| 68.183.85.75 | attackbotsspam | Nov 9 16:10:16 meumeu sshd[27527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.85.75 Nov 9 16:10:18 meumeu sshd[27527]: Failed password for invalid user com from 68.183.85.75 port 33656 ssh2 Nov 9 16:14:46 meumeu sshd[28161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.85.75 ... |
2019-11-09 23:24:24 |
| 77.40.2.88 | attackspambots | Chat Spam |
2019-11-09 22:55:52 |
| 185.220.101.65 | attackspam | Automatic report - XMLRPC Attack |
2019-11-09 23:16:50 |
| 23.254.231.53 | attackspambots | 23.254.231.53 has been banned for [spam] ... |
2019-11-09 23:37:13 |
| 104.236.244.98 | attack | Automatic report - Banned IP Access |
2019-11-09 23:15:09 |