城市(city): unknown
省份(region): unknown
国家(country): IANA Special-Purpose Address
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 127.142.72.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11790
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;127.142.72.148. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 20:12:20 CST 2025
;; MSG SIZE rcvd: 107Host 148.72.142.127.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 148.72.142.127.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 203.195.243.146 | attackspam | Aug 26 09:54:23 server sshd[50711]: Failed password for invalid user ubuntu from 203.195.243.146 port 47044 ssh2 Aug 26 09:57:04 server sshd[51450]: Failed password for root from 203.195.243.146 port 43038 ssh2 Aug 26 09:59:30 server sshd[51987]: Failed password for invalid user mo from 203.195.243.146 port 36646 ssh2 |
2019-08-26 18:47:03 |
| 70.89.88.3 | attackbotsspam | Aug 26 04:51:27 sshgateway sshd\[10255\]: Invalid user HDP from 70.89.88.3 Aug 26 04:51:27 sshgateway sshd\[10255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.89.88.3 Aug 26 04:51:30 sshgateway sshd\[10255\]: Failed password for invalid user HDP from 70.89.88.3 port 37115 ssh2 |
2019-08-26 18:29:42 |
| 58.243.182.85 | attack | Invalid user admin from 58.243.182.85 port 38690 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.243.182.85 Failed password for invalid user admin from 58.243.182.85 port 38690 ssh2 Invalid user aleja from 58.243.182.85 port 47558 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.243.182.85 |
2019-08-26 18:37:33 |
| 122.226.89.150 | attackbots | Unauthorised access (Aug 26) SRC=122.226.89.150 LEN=52 TTL=113 ID=7490 DF TCP DPT=445 WINDOW=8192 SYN |
2019-08-26 19:19:33 |
| 91.121.148.203 | attack | Aug 26 05:08:21 mxgate1 postfix/postscreen[8868]: CONNECT from [91.121.148.203]:35772 to [176.31.12.44]:25 Aug 26 05:08:21 mxgate1 postfix/dnsblog[8870]: addr 91.121.148.203 listed by domain cbl.abuseat.org as 127.0.0.2 Aug 26 05:08:21 mxgate1 postfix/dnsblog[8872]: addr 91.121.148.203 listed by domain zen.spamhaus.org as 127.0.0.4 Aug 26 05:08:21 mxgate1 postfix/dnsblog[8871]: addr 91.121.148.203 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Aug 26 05:08:21 mxgate1 postfix/dnsblog[8869]: addr 91.121.148.203 listed by domain bl.spamcop.net as 127.0.0.2 Aug 26 05:08:27 mxgate1 postfix/postscreen[8868]: DNSBL rank 5 for [91.121.148.203]:35772 Aug x@x Aug 26 05:08:27 mxgate1 postfix/postscreen[8868]: HANGUP after 0.11 from [91.121.148.203]:35772 in tests after SMTP handshake Aug 26 05:08:27 mxgate1 postfix/postscreen[8868]: DISCONNECT [91.121.148.203]:35772 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=91.121.148.203 |
2019-08-26 18:48:47 |
| 159.148.4.236 | attackbotsspam | Aug 26 10:19:57 MK-Soft-VM3 sshd\[25934\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.148.4.236 user=root Aug 26 10:19:59 MK-Soft-VM3 sshd\[25934\]: Failed password for root from 159.148.4.236 port 48894 ssh2 Aug 26 10:24:02 MK-Soft-VM3 sshd\[26140\]: Invalid user daniele from 159.148.4.236 port 38456 ... |
2019-08-26 18:53:16 |
| 219.154.142.187 | attack | Aug 26 05:21:30 nginx sshd[55364]: error: maximum authentication attempts exceeded for root from 219.154.142.187 port 39228 ssh2 [preauth] Aug 26 05:21:30 nginx sshd[55364]: Disconnecting: Too many authentication failures [preauth] |
2019-08-26 19:16:27 |
| 128.199.59.42 | attackspam | Aug 26 12:11:27 dev0-dcde-rnet sshd[31154]: Failed password for root from 128.199.59.42 port 51144 ssh2 Aug 26 12:17:59 dev0-dcde-rnet sshd[31198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.59.42 Aug 26 12:18:01 dev0-dcde-rnet sshd[31198]: Failed password for invalid user hduser from 128.199.59.42 port 53712 ssh2 |
2019-08-26 18:28:20 |
| 116.58.227.249 | attackbotsspam | Aug 26 05:09:48 mail1 sshd[9382]: Did not receive identification string from 116.58.227.249 port 64001 Aug 26 05:09:52 mail1 sshd[9385]: Invalid user tech from 116.58.227.249 port 49864 Aug 26 05:09:52 mail1 sshd[9385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.58.227.249 Aug 26 05:09:54 mail1 sshd[9385]: Failed password for invalid user tech from 116.58.227.249 port 49864 ssh2 Aug 26 05:09:54 mail1 sshd[9385]: Connection closed by 116.58.227.249 port 49864 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=116.58.227.249 |
2019-08-26 19:14:14 |
| 206.201.5.117 | attack | Aug 26 12:18:19 MK-Soft-Root2 sshd\[8538\]: Invalid user ftptest from 206.201.5.117 port 46448 Aug 26 12:18:19 MK-Soft-Root2 sshd\[8538\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.201.5.117 Aug 26 12:18:21 MK-Soft-Root2 sshd\[8538\]: Failed password for invalid user ftptest from 206.201.5.117 port 46448 ssh2 ... |
2019-08-26 18:55:29 |
| 51.81.18.72 | attackspambots | SSHAttack |
2019-08-26 19:27:39 |
| 200.95.175.235 | attackspam | Aug 26 04:11:42 xxx sshd[1693]: Invalid user sami from 200.95.175.235 Aug 26 04:11:43 xxx sshd[1693]: Failed password for invalid user sami from 200.95.175.235 port 59025 ssh2 Aug 26 04:44:54 xxx sshd[3709]: Invalid user tomcat4 from 200.95.175.235 Aug 26 04:44:56 xxx sshd[3709]: Failed password for invalid user tomcat4 from 200.95.175.235 port 47705 ssh2 Aug 26 05:08:01 xxx sshd[6695]: Invalid user ta from 200.95.175.235 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=200.95.175.235 |
2019-08-26 18:40:01 |
| 125.227.236.60 | attackspambots | Aug 26 09:04:42 debian sshd\[31737\]: Invalid user kmem from 125.227.236.60 port 47796 Aug 26 09:04:42 debian sshd\[31737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.227.236.60 ... |
2019-08-26 19:05:34 |
| 213.231.42.177 | attackspam | 2019-08-26T14:08:41.801367ghostnamelab.hostname-sakh.net sshd[32444]: Invalid user pi from 213.231.42.177 port 44864 2019-08-26T14:08:41.889470ghostnamelab.hostname-sakh.net sshd[32446]: Invalid user pi from 213.231.42.177 port 44866 2019-08-26T14:08:42.013063ghostnamelab.hostname-sakh.net sshd[32444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.231.42.177.pool.breezein.net 2019-08-26T14:08:42.070490ghostnamelab.hostname-sakh.net sshd[32446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.231.42.177.pool.breezein.net ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=213.231.42.177 |
2019-08-26 18:51:29 |
| 120.224.101.134 | attack | Honeypot attack, port: 23, PTR: PTR record not found |
2019-08-26 19:17:12 |