城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.54.168.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21501
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;114.54.168.55. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 03:25:00 CST 2025
;; MSG SIZE rcvd: 106
Host 55.168.54.114.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 55.168.54.114.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 173.44.175.29 | attackspam | IP: 173.44.175.29
Ports affected
Simple Mail Transfer (25)
Found in DNSBL('s)
ASN Details
AS62904 EONIX-COMMUNICATIONS-ASBLOCK-62904
United States (US)
CIDR 173.44.168.0/21
Log Date: 20/09/2020 5:24:33 PM UTC |
2020-09-21 21:21:59 |
| 62.234.115.152 | attack | Sep 21 05:55:32 itv-usvr-01 sshd[18584]: Invalid user nagios from 62.234.115.152 Sep 21 05:55:32 itv-usvr-01 sshd[18584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.115.152 Sep 21 05:55:32 itv-usvr-01 sshd[18584]: Invalid user nagios from 62.234.115.152 Sep 21 05:55:34 itv-usvr-01 sshd[18584]: Failed password for invalid user nagios from 62.234.115.152 port 49990 ssh2 Sep 21 06:00:31 itv-usvr-01 sshd[18809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.115.152 user=root Sep 21 06:00:32 itv-usvr-01 sshd[18809]: Failed password for root from 62.234.115.152 port 47138 ssh2 |
2020-09-21 20:55:23 |
| 106.13.182.60 | attack | "Unauthorized connection attempt on SSHD detected" |
2020-09-21 21:01:48 |
| 79.37.243.21 | attackspam | Sep 20 18:50:21 pl1server sshd[24283]: Invalid user pi from 79.37.243.21 port 44278 Sep 20 18:50:21 pl1server sshd[24282]: Invalid user pi from 79.37.243.21 port 44276 Sep 20 18:50:21 pl1server sshd[24283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.37.243.21 Sep 20 18:50:21 pl1server sshd[24282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.37.243.21 Sep 20 18:50:23 pl1server sshd[24283]: Failed password for invalid user pi from 79.37.243.21 port 44278 ssh2 Sep 20 18:50:23 pl1server sshd[24282]: Failed password for invalid user pi from 79.37.243.21 port 44276 ssh2 Sep 20 18:50:23 pl1server sshd[24283]: Connection closed by 79.37.243.21 port 44278 [preauth] Sep 20 18:50:23 pl1server sshd[24282]: Connection closed by 79.37.243.21 port 44276 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=79.37.243.21 |
2020-09-21 21:09:16 |
| 103.110.160.46 | attackspam | 2020-09-20 12:00:32.628647-0500 localhost smtpd[52512]: NOQUEUE: reject: RCPT from unknown[103.110.160.46]: 554 5.7.1 Service unavailable; Client host [103.110.160.46] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/103.110.160.46; from= |
2020-09-21 21:12:43 |
| 139.198.177.151 | attack | 2020-09-21T18:28:40.337899hostname sshd[115895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.177.151 user=root 2020-09-21T18:28:42.308698hostname sshd[115895]: Failed password for root from 139.198.177.151 port 59632 ssh2 ... |
2020-09-21 21:18:39 |
| 81.68.128.180 | attackbots | [f2b] sshd bruteforce, retries: 1 |
2020-09-21 21:18:08 |
| 49.232.162.77 | attackspambots | Sep 20 16:15:18 firewall sshd[29097]: Failed password for invalid user admin from 49.232.162.77 port 37022 ssh2 Sep 20 16:20:27 firewall sshd[29223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.162.77 user=root Sep 20 16:20:28 firewall sshd[29223]: Failed password for root from 49.232.162.77 port 38008 ssh2 ... |
2020-09-21 21:21:03 |
| 106.124.130.114 | attack | Time: Mon Sep 21 08:52:09 2020 +0000 IP: 106.124.130.114 (CN/China/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 21 08:46:54 47-1 sshd[59333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.124.130.114 user=root Sep 21 08:46:56 47-1 sshd[59333]: Failed password for root from 106.124.130.114 port 35958 ssh2 Sep 21 08:49:38 47-1 sshd[59387]: Invalid user test from 106.124.130.114 port 49114 Sep 21 08:49:40 47-1 sshd[59387]: Failed password for invalid user test from 106.124.130.114 port 49114 ssh2 Sep 21 08:52:06 47-1 sshd[59437]: Invalid user user from 106.124.130.114 port 33084 |
2020-09-21 21:30:12 |
| 95.105.225.76 | attackspambots | Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM - |
2020-09-21 21:23:58 |
| 171.252.21.137 | attackbotsspam | port scan and connect, tcp 23 (telnet) |
2020-09-21 21:05:54 |
| 117.247.95.246 | attack | Unauthorised access (Sep 20) SRC=117.247.95.246 LEN=48 TTL=110 ID=23735 DF TCP DPT=445 WINDOW=8192 SYN |
2020-09-21 21:27:30 |
| 129.226.176.5 | attackspam | SSH BruteForce Attack |
2020-09-21 21:24:27 |
| 67.205.144.31 | attackbotsspam | CMS (WordPress or Joomla) login attempt. |
2020-09-21 20:54:53 |
| 179.184.0.112 | attackbots | [f2b] sshd bruteforce, retries: 1 |
2020-09-21 21:17:47 |