城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.56.243.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23413
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;113.56.243.139. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400
;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 14:02:22 CST 2022
;; MSG SIZE rcvd: 107Host 139.243.56.113.in-addr.arpa not found: 2(SERVFAIL)
server can't find 113.56.243.139.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 107.170.203.244 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-06-22 18:45:52 |
| 62.173.151.168 | attackbotsspam | *Port Scan* detected from 62.173.151.168 (RU/Russia/www.jhh.ij). 4 hits in the last 90 seconds |
2019-06-22 18:42:20 |
| 171.241.60.190 | attackspambots | SMB Server BruteForce Attack |
2019-06-22 17:52:57 |
| 37.32.125.241 | attackbotsspam | Jun 19 04:25:54 mxgate1 postfix/postscreen[15452]: CONNECT from [37.32.125.241]:56213 to [176.31.12.44]:25 Jun 19 04:25:54 mxgate1 postfix/dnsblog[15456]: addr 37.32.125.241 listed by domain zen.spamhaus.org as 127.0.0.11 Jun 19 04:25:54 mxgate1 postfix/dnsblog[15456]: addr 37.32.125.241 listed by domain zen.spamhaus.org as 127.0.0.4 Jun 19 04:25:54 mxgate1 postfix/dnsblog[15456]: addr 37.32.125.241 listed by domain zen.spamhaus.org as 127.0.0.3 Jun 19 04:25:54 mxgate1 postfix/dnsblog[15457]: addr 37.32.125.241 listed by domain cbl.abuseat.org as 127.0.0.2 Jun 19 04:25:54 mxgate1 postfix/dnsblog[15453]: addr 37.32.125.241 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Jun 19 04:25:54 mxgate1 postfix/dnsblog[15454]: addr 37.32.125.241 listed by domain b.barracudacentral.org as 127.0.0.2 Jun 19 04:25:54 mxgate1 postfix/postscreen[15452]: PREGREET 15 after 0.22 from [37.32.125.241]:56213: EHLO lukat.hostname Jun 19 04:25:55 mxgate1 postfix/dnsblog[15455]: addr 37.32.12........ ------------------------------- |
2019-06-22 18:33:12 |
| 153.92.0.20 | attack | SQL Injection |
2019-06-22 18:03:31 |
| 186.193.30.18 | attack | Jun 18 09:10:25 our-server-hostname postfix/smtpd[18441]: connect from unknown[186.193.30.18] Jun x@x Jun x@x Jun x@x Jun x@x Jun 18 09:10:29 our-server-hostname postfix/smtpd[18441]: lost connection after RCPT from unknown[186.193.30.18] Jun 18 09:10:29 our-server-hostname postfix/smtpd[18441]: disconnect from unknown[186.193.30.18] Jun 18 11:32:38 our-server-hostname postfix/smtpd[772]: connect from unknown[186.193.30.18] Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun 18 11:32:51 our-server-hostname postfix/smtpd[772]: lost connection after RCPT from unknown[186.193.30.18] Jun 18 11:32:51 our-server-hostname postfix/smtpd[772]: disconnect from unknown[186.193.30.18] Jun 18 12:08:06 our-server-hostname postfix/smtpd[11988]: connect from unknown[186.193.30.18] Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x Jun x@x ........ ------------------------------- |
2019-06-22 18:00:47 |
| 185.36.81.168 | attackspambots | Jun 22 09:05:30 postfix/smtpd: warning: unknown[185.36.81.168]: SASL LOGIN authentication failed |
2019-06-22 18:13:14 |
| 78.46.61.245 | attack | 20 attempts against mh-misbehave-ban on pluto.magehost.pro |
2019-06-22 18:28:19 |
| 115.135.139.117 | attackspambots | Jun 19 21:58:52 ntop sshd[7772]: Invalid user ts3server from 115.135.139.117 port 51815 Jun 19 21:58:54 ntop sshd[7772]: Failed password for invalid user ts3server from 115.135.139.117 port 51815 ssh2 Jun 19 21:58:54 ntop sshd[7772]: Received disconnect from 115.135.139.117 port 51815:11: Bye Bye [preauth] Jun 19 21:58:54 ntop sshd[7772]: Disconnected from 115.135.139.117 port 51815 [preauth] Jun 19 22:01:02 ntop sshd[9403]: Invalid user qi from 115.135.139.117 port 33459 Jun 19 22:01:04 ntop sshd[9403]: Failed password for invalid user qi from 115.135.139.117 port 33459 ssh2 Jun 19 22:01:04 ntop sshd[9403]: Received disconnect from 115.135.139.117 port 33459:11: Bye Bye [preauth] Jun 19 22:01:04 ntop sshd[9403]: Disconnected from 115.135.139.117 port 33459 [preauth] Jun 19 22:02:22 ntop sshd[15719]: Invalid user test from 115.135.139.117 port 40005 Jun 19 22:02:24 ntop sshd[15719]: Failed password for invalid user test from 115.135.139.117 port 40005 ssh2 Jun 19 22:02:........ ------------------------------- |
2019-06-22 18:02:48 |
| 148.233.0.22 | attackspam | Jun 22 06:23:54 s64-1 sshd[8645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.233.0.22 Jun 22 06:23:57 s64-1 sshd[8645]: Failed password for invalid user eng from 148.233.0.22 port 57523 ssh2 Jun 22 06:25:19 s64-1 sshd[8740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.233.0.22 ... |
2019-06-22 18:37:02 |
| 191.53.221.81 | attackbots | SMTP-sasl brute force ... |
2019-06-22 18:35:51 |
| 182.253.141.134 | attackspam | Invalid user test from 182.253.141.134 port 53768 |
2019-06-22 18:16:03 |
| 51.254.206.149 | attackbotsspam | leo_www |
2019-06-22 18:21:37 |
| 61.143.138.74 | attackbots | Port scan: Attack repeated for 24 hours |
2019-06-22 18:19:09 |
| 125.136.181.85 | attackspambots | Autoban 125.136.181.85 AUTH/CONNECT |
2019-06-22 18:12:05 |