城市(city): unknown
省份(region): unknown
国家(country): Korea (the Republic of)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.50.249.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17361
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;118.50.249.129. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025030100 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 01 18:57:48 CST 2025
;; MSG SIZE rcvd: 107Host 129.249.50.118.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 129.249.50.118.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 103.21.148.51 | attackspambots | SSH Brute Force, server-1 sshd[20184]: Failed password for invalid user ftpuser from 103.21.148.51 port 33986 ssh2 |
2019-09-25 19:59:26 |
| 68.183.156.156 | attackbotsspam | Sep 25 14:23:44 icinga sshd[17847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.156.156 Sep 25 14:23:46 icinga sshd[17847]: Failed password for invalid user sylwester from 68.183.156.156 port 41676 ssh2 ... |
2019-09-25 20:37:46 |
| 68.183.133.21 | attackspambots | Sep 25 08:40:39 plex sshd[26526]: Invalid user yellon from 68.183.133.21 port 43650 |
2019-09-25 20:09:02 |
| 59.86.31.68 | attackspambots | Unauthorised access (Sep 25) SRC=59.86.31.68 LEN=40 PREC=0x20 TTL=41 ID=52090 TCP DPT=8080 WINDOW=48344 SYN Unauthorised access (Sep 25) SRC=59.86.31.68 LEN=40 PREC=0x20 TTL=41 ID=63383 TCP DPT=8080 WINDOW=48344 SYN Unauthorised access (Sep 25) SRC=59.86.31.68 LEN=40 PREC=0x20 TTL=41 ID=2360 TCP DPT=8080 WINDOW=48344 SYN Unauthorised access (Sep 24) SRC=59.86.31.68 LEN=40 PREC=0x20 TTL=41 ID=48495 TCP DPT=8080 WINDOW=48344 SYN |
2019-09-25 20:15:38 |
| 143.0.69.119 | attackspambots | Sep 23 20:40:39 l01 sshd[336142]: Invalid user server from 143.0.69.119 Sep 23 20:40:39 l01 sshd[336142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.0.69.119 Sep 23 20:40:41 l01 sshd[336142]: Failed password for invalid user server from 143.0.69.119 port 23393 ssh2 Sep 23 20:55:58 l01 sshd[339558]: Invalid user serguei from 143.0.69.119 Sep 23 20:55:58 l01 sshd[339558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.0.69.119 Sep 23 20:56:00 l01 sshd[339558]: Failed password for invalid user serguei from 143.0.69.119 port 35753 ssh2 Sep 23 21:00:31 l01 sshd[340571]: Invalid user adelaide from 143.0.69.119 Sep 23 21:00:31 l01 sshd[340571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.0.69.119 Sep 23 21:00:33 l01 sshd[340571]: Failed password for invalid user adelaide from 143.0.69.119 port 21824 ssh2 Sep 23 21:04:53 l01 sshd[34154........ ------------------------------- |
2019-09-25 19:59:09 |
| 91.193.204.242 | attackbots | Lines containing failures of 91.193.204.242 Sep 25 14:03:25 shared07 postfix/smtpd[22002]: connect from mx1.orghim.ua[91.193.204.242] Sep 25 14:03:26 shared07 policyd-spf[30342]: prepend Received-SPF: Softfail (mailfrom) identhostnamey=mailfrom; client-ip=91.193.204.242; helo=mx1.orghim.ua; envelope-from=x@x Sep x@x Sep x@x Sep x@x Sep x@x Sep x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=91.193.204.242 |
2019-09-25 20:38:33 |
| 42.117.184.89 | attackspam | (Sep 25) LEN=40 TTL=47 ID=10595 TCP DPT=8080 WINDOW=37779 SYN (Sep 25) LEN=40 TTL=47 ID=4555 TCP DPT=8080 WINDOW=19795 SYN (Sep 24) LEN=40 TTL=47 ID=17079 TCP DPT=8080 WINDOW=19795 SYN (Sep 24) LEN=40 TTL=44 ID=36527 TCP DPT=8080 WINDOW=9864 SYN (Sep 24) LEN=40 TTL=44 ID=24989 TCP DPT=8080 WINDOW=19795 SYN (Sep 24) LEN=40 TTL=47 ID=13715 TCP DPT=8080 WINDOW=19795 SYN (Sep 23) LEN=40 TTL=47 ID=48633 TCP DPT=8080 WINDOW=37779 SYN (Sep 23) LEN=40 TTL=47 ID=56510 TCP DPT=8080 WINDOW=19795 SYN (Sep 23) LEN=40 TTL=47 ID=22510 TCP DPT=8080 WINDOW=19795 SYN (Sep 22) LEN=40 TTL=47 ID=58639 TCP DPT=8080 WINDOW=9864 SYN |
2019-09-25 20:20:52 |
| 51.77.146.136 | attack | Sep 25 01:41:57 lcprod sshd\[1810\]: Invalid user download from 51.77.146.136 Sep 25 01:41:57 lcprod sshd\[1810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.ip-51-77-146.eu Sep 25 01:42:00 lcprod sshd\[1810\]: Failed password for invalid user download from 51.77.146.136 port 36960 ssh2 Sep 25 01:45:56 lcprod sshd\[2141\]: Invalid user operator from 51.77.146.136 Sep 25 01:45:56 lcprod sshd\[2141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.ip-51-77-146.eu |
2019-09-25 20:12:57 |
| 89.248.160.193 | attack | Port scan detected [TCP protocol] on ports: 2488, 2472, 2491 |
2019-09-25 20:04:27 |
| 211.54.40.81 | attackspambots | Invalid user vbs from 211.54.40.81 port 54174 |
2019-09-25 20:11:53 |
| 173.249.13.105 | attack | Scanning and Vuln Attempts |
2019-09-25 19:58:35 |
| 78.128.113.114 | attack | Sep 25 14:04:07 relay postfix/smtpd\[26544\]: warning: unknown\[78.128.113.114\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 14:13:03 relay postfix/smtpd\[12704\]: warning: unknown\[78.128.113.114\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 14:13:12 relay postfix/smtpd\[13729\]: warning: unknown\[78.128.113.114\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 14:23:47 relay postfix/smtpd\[14110\]: warning: unknown\[78.128.113.114\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 14:23:56 relay postfix/smtpd\[13729\]: warning: unknown\[78.128.113.114\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-09-25 20:29:48 |
| 159.203.190.189 | attackspam | Sep 25 10:42:17 lcl-usvr-01 sshd[11646]: Invalid user couchdb from 159.203.190.189 Sep 25 10:42:17 lcl-usvr-01 sshd[11646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.190.189 Sep 25 10:42:17 lcl-usvr-01 sshd[11646]: Invalid user couchdb from 159.203.190.189 Sep 25 10:42:19 lcl-usvr-01 sshd[11646]: Failed password for invalid user couchdb from 159.203.190.189 port 58571 ssh2 Sep 25 10:45:36 lcl-usvr-01 sshd[12678]: Invalid user ulpiano from 159.203.190.189 |
2019-09-25 20:12:35 |
| 77.103.0.227 | attackbots | Invalid user web from 77.103.0.227 port 40970 |
2019-09-25 20:08:44 |
| 222.186.180.147 | attack | SSH Brute-Force attacks |
2019-09-25 20:08:09 |