城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 12.160.212.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43115
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;12.160.212.134. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021900 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 19 21:28:10 CST 2025
;; MSG SIZE rcvd: 107
Host 134.212.160.12.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 134.212.160.12.in-addr.arpa: NXDOMAIN
IP | 类型 | 评论内容 | 时间 |
---|---|---|---|
212.3.124.73 | attackspam | Unauthorized connection attempt from IP address 212.3.124.73 on Port 445(SMB) |
2019-11-11 00:04:34 |
218.66.111.134 | attack | port scan and connect, tcp 1433 (ms-sql-s) |
2019-11-10 23:48:32 |
185.53.160.203 | attackbotsspam | Nov 10 07:19:48 our-server-hostname postfix/smtpd[2181]: connect from unknown[185.53.160.203] Nov x@x Nov 10 07:19:49 our-server-hostname postfix/smtpd[2181]: lost connection after RCPT from unknown[185.53.160.203] Nov 10 07:19:49 our-server-hostname postfix/smtpd[2181]: disconnect from unknown[185.53.160.203] Nov 10 07:20:08 our-server-hostname postfix/smtpd[2320]: connect from unknown[185.53.160.203] Nov 10 07:20:09 our-server-hostname postfix/smtpd[2320]: NOQUEUE: reject: RCPT from unknown[185.53.160.203]: 554 5.7.1 Service unavailable; Client host [185.53.160.203] blocked using zen.spamhaus .... truncated .... e postfix/smtpd[21312]: disconnect from unknown[185.53.160.203] Nov 10 10:33:20 our-server-hostname postfix/smtpd[21313]: connect from unknown[185.53.160.203] Nov x@x Nov 10 10:33:22 our-server-hostname postfix/smtpd[21313]: lost connection after RCPT from unknown[185.53.160.203] Nov 10 10:33:22 our-server-hostname postfix/smtpd[21313]: disconnect from unknow........ ------------------------------- |
2019-11-10 23:58:50 |
183.171.73.142 | attack | Unauthorized connection attempt from IP address 183.171.73.142 on Port 445(SMB) |
2019-11-10 23:44:53 |
185.175.93.78 | attack | ET DROP Dshield Block Listed Source group 1 - port: 443 proto: TCP cat: Misc Attack |
2019-11-11 00:14:22 |
118.89.160.141 | attack | 2019-11-10T09:16:50.4592801495-001 sshd\[37492\]: Invalid user gw from 118.89.160.141 port 33558 2019-11-10T09:16:50.4636171495-001 sshd\[37492\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.160.141 2019-11-10T09:16:51.9472241495-001 sshd\[37492\]: Failed password for invalid user gw from 118.89.160.141 port 33558 ssh2 2019-11-10T09:30:20.1565371495-001 sshd\[37946\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.160.141 user=root 2019-11-10T09:30:22.1720601495-001 sshd\[37946\]: Failed password for root from 118.89.160.141 port 51528 ssh2 2019-11-10T09:35:55.2167291495-001 sshd\[38145\]: Invalid user com from 118.89.160.141 port 59050 2019-11-10T09:35:55.2199991495-001 sshd\[38145\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.160.141 ... |
2019-11-10 23:35:32 |
27.62.113.219 | attack | Unauthorized connection attempt from IP address 27.62.113.219 on Port 445(SMB) |
2019-11-10 23:57:16 |
104.245.144.44 | attack | (From kaylene.eagar50@gmail.com) Do you want to post your ad on tons of online ad sites every month? One tiny investment every month will get you almost endless traffic to your site forever!For details check out: http://www.submitmyadnow.tech |
2019-11-10 23:49:59 |
46.105.122.127 | attackbots | Nov 10 19:57:24 gw1 sshd[19712]: Failed password for root from 46.105.122.127 port 36764 ssh2 ... |
2019-11-10 23:55:13 |
125.214.52.18 | attackbotsspam | Unauthorized connection attempt from IP address 125.214.52.18 on Port 445(SMB) |
2019-11-10 23:43:24 |
41.46.83.100 | attackspam | Unauthorized connection attempt from IP address 41.46.83.100 on Port 445(SMB) |
2019-11-10 23:55:39 |
81.22.45.187 | attackbots | 81.22.45.187 was recorded 71 times by 20 hosts attempting to connect to the following ports: 48000,3311,10088,2222,45000,8001,32000,44000,57000,9001,10793,46000,8933,6699,56000,8756,4010,33000,57168,18000,54000,9090,26000,6001,3010,5001,3344,41000,14000,19000,39000,52000,4001,10086,3321,20000,17000,47000,36000,3355,4002,62677,51000,7766,55001,49000,8956,3340,4003,8965,35000,33988,8090,51888. Incident counter (4h, 24h, all-time): 71, 372, 778 |
2019-11-11 00:04:01 |
173.30.10.184 | attack | IMAP/SMTP Authentication Failure |
2019-11-11 00:01:30 |
190.181.4.94 | attackspam | Nov 10 15:46:03 pornomens sshd\[21686\]: Invalid user password from 190.181.4.94 port 33812 Nov 10 15:46:03 pornomens sshd\[21686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.181.4.94 Nov 10 15:46:05 pornomens sshd\[21686\]: Failed password for invalid user password from 190.181.4.94 port 33812 ssh2 ... |
2019-11-10 23:57:39 |
116.203.209.23 | attackbotsspam | Lines containing failures of 116.203.209.23 Nov 10 15:12:59 smtp-out sshd[7341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.209.23 user=r.r Nov 10 15:13:00 smtp-out sshd[7341]: Failed password for r.r from 116.203.209.23 port 52762 ssh2 Nov 10 15:13:00 smtp-out sshd[7341]: Received disconnect from 116.203.209.23 port 52762:11: Bye Bye [preauth] Nov 10 15:13:00 smtp-out sshd[7341]: Disconnected from authenticating user r.r 116.203.209.23 port 52762 [preauth] Nov 10 15:25:28 smtp-out sshd[7789]: Invalid user pi from 116.203.209.23 port 53006 Nov 10 15:25:28 smtp-out sshd[7789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.209.23 Nov 10 15:25:30 smtp-out sshd[7789]: Failed password for invalid user pi from 116.203.209.23 port 53006 ssh2 Nov 10 15:25:30 smtp-out sshd[7789]: Received disconnect from 116.203.209.23 port 53006:11: Bye Bye [preauth] Nov 10 15:25:30 smtp-out ........ ------------------------------ |
2019-11-10 23:49:27 |