城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 11.79.249.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52600
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;11.79.249.138. IN A
;; AUTHORITY SECTION:
. 596 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024010601 1800 900 604800 86400
;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 07 04:07:10 CST 2024
;; MSG SIZE rcvd: 106Host 138.249.79.11.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 138.249.79.11.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 37.139.21.75 | attackbots | Tried sshing with brute force. |
2019-07-14 03:58:30 |
| 94.176.64.125 | attack | (Jul 13) LEN=40 TTL=244 ID=32779 DF TCP DPT=23 WINDOW=14600 SYN (Jul 13) LEN=40 TTL=244 ID=61943 DF TCP DPT=23 WINDOW=14600 SYN (Jul 13) LEN=40 TTL=244 ID=35664 DF TCP DPT=23 WINDOW=14600 SYN (Jul 13) LEN=40 TTL=244 ID=12938 DF TCP DPT=23 WINDOW=14600 SYN (Jul 13) LEN=40 TTL=244 ID=51825 DF TCP DPT=23 WINDOW=14600 SYN (Jul 13) LEN=40 TTL=244 ID=41574 DF TCP DPT=23 WINDOW=14600 SYN (Jul 13) LEN=40 TTL=244 ID=58492 DF TCP DPT=23 WINDOW=14600 SYN (Jul 12) LEN=40 TTL=244 ID=44882 DF TCP DPT=23 WINDOW=14600 SYN (Jul 12) LEN=40 TTL=244 ID=27775 DF TCP DPT=23 WINDOW=14600 SYN (Jul 12) LEN=40 TTL=244 ID=8155 DF TCP DPT=23 WINDOW=14600 SYN (Jul 12) LEN=40 TTL=244 ID=4068 DF TCP DPT=23 WINDOW=14600 SYN (Jul 12) LEN=40 TTL=244 ID=30153 DF TCP DPT=23 WINDOW=14600 SYN (Jul 12) LEN=40 TTL=244 ID=3308 DF TCP DPT=23 WINDOW=14600 SYN (Jul 12) LEN=40 TTL=244 ID=46083 DF TCP DPT=23 WINDOW=14600 SYN (Jul 12) LEN=40 TTL=244 ID=29241 DF TCP DPT=23 WINDOW=14600 SYN... |
2019-07-14 04:02:46 |
| 45.229.54.187 | attackspam | Lines containing failures of 45.229.54.187 Jul 12 19:34:10 mellenthin postfix/smtpd[2554]: connect from unknown[45.229.54.187] Jul x@x Jul 12 19:34:16 mellenthin postfix/smtpd[2554]: lost connection after DATA from unknown[45.229.54.187] Jul 12 19:34:16 mellenthin postfix/smtpd[2554]: disconnect from unknown[45.229.54.187] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 Jul 13 16:52:24 mellenthin postfix/smtpd[31568]: connect from unknown[45.229.54.187] Jul x@x Jul 13 16:52:30 mellenthin postfix/smtpd[31568]: lost connection after DATA from unknown[45.229.54.187] Jul 13 16:52:30 mellenthin postfix/smtpd[31568]: disconnect from unknown[45.229.54.187] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.229.54.187 |
2019-07-14 03:53:00 |
| 190.79.178.88 | attack | Jul 13 14:35:40 aat-srv002 sshd[18115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.79.178.88 Jul 13 14:35:43 aat-srv002 sshd[18115]: Failed password for invalid user ts3 from 190.79.178.88 port 35112 ssh2 Jul 13 14:42:09 aat-srv002 sshd[18271]: Failed password for root from 190.79.178.88 port 43556 ssh2 ... |
2019-07-14 04:04:05 |
| 88.126.255.148 | attackspam | 2019-07-13T19:40:22.487439abusebot-6.cloudsearch.cf sshd\[22218\]: Invalid user test from 88.126.255.148 port 53300 |
2019-07-14 03:46:13 |
| 118.172.229.184 | attack | Jul 13 15:52:52 plusreed sshd[21732]: Invalid user cron from 118.172.229.184 ... |
2019-07-14 03:59:36 |
| 213.32.16.127 | attackspam | Jul 13 15:47:43 plusreed sshd[19303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.32.16.127 user=root Jul 13 15:47:45 plusreed sshd[19303]: Failed password for root from 213.32.16.127 port 43018 ssh2 ... |
2019-07-14 03:56:32 |
| 50.207.12.103 | attackbots | Jul 13 16:03:42 plusreed sshd[26922]: Invalid user db2fenc1 from 50.207.12.103 ... |
2019-07-14 04:16:39 |
| 218.92.0.207 | attackspambots | 2019-07-13T19:38:55.696716abusebot.cloudsearch.cf sshd\[24424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.207 user=root |
2019-07-14 03:55:21 |
| 195.24.207.252 | attackspam | $f2bV_matches |
2019-07-14 03:52:23 |
| 213.158.187.41 | attack | 213.158.187.41 - - [13/Jul/2019:17:08:27 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 213.158.187.41 - - [13/Jul/2019:17:08:46 +0200] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 213.158.187.41 - - [13/Jul/2019:17:09:06 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 213.158.187.41 - - [13/Jul/2019:17:09:30 +0200] "POST /wp-login.php HTTP/1.1" 200 1684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 213.158.187.41 - - [13/Jul/2019:17:09:54 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 213.158.187.41 - - [13/Jul/2019:17:10:20 +0200] "POST /wp-login.php HTTP/1.1" 200 1686 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-07-14 04:11:54 |
| 165.22.128.115 | attackbotsspam | 2019-07-14T02:24:37.525303enmeeting.mahidol.ac.th sshd\[22226\]: User lp from 165.22.128.115 not allowed because not listed in AllowUsers 2019-07-14T02:24:37.543880enmeeting.mahidol.ac.th sshd\[22226\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.128.115 user=lp 2019-07-14T02:24:39.067307enmeeting.mahidol.ac.th sshd\[22226\]: Failed password for invalid user lp from 165.22.128.115 port 60016 ssh2 ... |
2019-07-14 04:13:32 |
| 185.254.122.35 | attackspambots | Jul 13 21:07:36 h2177944 kernel: \[1369089.862286\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=5435 PROTO=TCP SPT=47756 DPT=9953 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 13 21:07:47 h2177944 kernel: \[1369100.098142\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=34245 PROTO=TCP SPT=47756 DPT=6271 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 13 21:11:54 h2177944 kernel: \[1369347.318305\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=61450 PROTO=TCP SPT=47756 DPT=20991 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 13 21:14:57 h2177944 kernel: \[1369530.509541\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=7028 PROTO=TCP SPT=47756 DPT=9007 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 13 21:24:21 h2177944 kernel: \[1370094.027281\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.35 DST=85.214.1 |
2019-07-14 04:16:58 |
| 118.24.57.53 | attackspambots | Jul 13 21:57:45 localhost sshd\[7462\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.57.53 user=root Jul 13 21:57:47 localhost sshd\[7462\]: Failed password for root from 118.24.57.53 port 60552 ssh2 Jul 13 22:00:23 localhost sshd\[7842\]: Invalid user ying from 118.24.57.53 port 58626 |
2019-07-14 04:17:29 |
| 177.92.240.252 | attackspambots | failed_logins |
2019-07-14 03:46:58 |