城市(city): unknown
省份(region): unknown
国家(country): IANA Special-Purpose Address
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 127.99.49.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36546
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;127.99.49.30. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 07:23:32 CST 2025
;; MSG SIZE rcvd: 105Host 30.49.99.127.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 30.49.99.127.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 3.15.230.179 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/3.15.230.179/ SG - 1H : (14) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : SG NAME ASN : ASN16509 IP : 3.15.230.179 CIDR : 3.14.0.0/15 PREFIX COUNT : 3006 UNIQUE IP COUNT : 26434816 WYKRYTE ATAKI Z ASN16509 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 2 DateTime : 2019-10-13 13:47:46 INFO : Web Crawlers ? Scan Detected and Blocked by ADMIN - data recovery |
2019-10-14 01:49:12 |
| 140.143.157.207 | attackbotsspam | Oct 13 19:20:08 vps691689 sshd[4648]: Failed password for root from 140.143.157.207 port 38616 ssh2 Oct 13 19:24:58 vps691689 sshd[4715]: Failed password for root from 140.143.157.207 port 46498 ssh2 ... |
2019-10-14 01:46:26 |
| 195.133.216.215 | attackspambots | Oct 6 07:32:30 host sshd[3473]: User r.r from 195.133.216.215 not allowed because none of user's groups are listed in AllowGroups Oct 6 07:32:30 host sshd[3473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.133.216.215 user=r.r Oct 6 07:32:32 host sshd[3473]: Failed password for invalid user r.r from 195.133.216.215 port 43658 ssh2 Oct 6 07:32:32 host sshd[3473]: Received disconnect from 195.133.216.215 port 43658:11: Bye Bye [preauth] Oct 6 07:32:32 host sshd[3473]: Disconnected from invalid user r.r 195.133.216.215 port 43658 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=195.133.216.215 |
2019-10-14 01:53:36 |
| 23.236.229.63 | attack | Looking for resource vulnerabilities |
2019-10-14 02:05:40 |
| 222.186.180.223 | attackbots | SSH bruteforce (Triggered fail2ban) |
2019-10-14 01:40:54 |
| 80.211.169.105 | attackspambots | Oct 9 16:03:20 eola sshd[18227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.169.105 user=r.r Oct 9 16:03:22 eola sshd[18227]: Failed password for r.r from 80.211.169.105 port 59768 ssh2 Oct 9 16:03:22 eola sshd[18227]: Received disconnect from 80.211.169.105 port 59768:11: Bye Bye [preauth] Oct 9 16:03:22 eola sshd[18227]: Disconnected from 80.211.169.105 port 59768 [preauth] Oct 9 16:21:11 eola sshd[18825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.169.105 user=r.r Oct 9 16:21:13 eola sshd[18825]: Failed password for r.r from 80.211.169.105 port 36716 ssh2 Oct 9 16:21:13 eola sshd[18825]: Received disconnect from 80.211.169.105 port 36716:11: Bye Bye [preauth] Oct 9 16:21:13 eola sshd[18825]: Disconnected from 80.211.169.105 port 36716 [preauth] Oct 9 16:24:57 eola sshd[18859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh rus........ ------------------------------- |
2019-10-14 02:24:29 |
| 201.6.99.139 | attackbots | Oct 13 13:03:50 XXX sshd[22477]: Invalid user postgres from 201.6.99.139 port 54517 |
2019-10-14 01:59:52 |
| 103.110.169.237 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/103.110.169.237/ IN - 1H : (40) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : IN NAME ASN : ASN137132 IP : 103.110.169.237 CIDR : 103.110.169.0/24 PREFIX COUNT : 8 UNIQUE IP COUNT : 2048 WYKRYTE ATAKI Z ASN137132 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-13 13:47:45 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-14 01:50:11 |
| 77.247.108.119 | attackbots | firewall-block, port(s): 8018/tcp, 8019/tcp |
2019-10-14 02:16:21 |
| 95.87.10.121 | attackbots | Automatic report - Banned IP Access |
2019-10-14 02:10:39 |
| 118.24.71.83 | attackbots | Jun 3 09:07:32 yesfletchmain sshd\[536\]: Invalid user ian from 118.24.71.83 port 39116 Jun 3 09:07:32 yesfletchmain sshd\[536\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.71.83 Jun 3 09:07:34 yesfletchmain sshd\[536\]: Failed password for invalid user ian from 118.24.71.83 port 39116 ssh2 Jun 3 09:11:37 yesfletchmain sshd\[707\]: Invalid user mashby from 118.24.71.83 port 39780 Jun 3 09:11:37 yesfletchmain sshd\[707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.71.83 ... |
2019-10-14 02:15:11 |
| 142.93.201.168 | attack | Oct 13 17:02:53 icinga sshd[32139]: Failed password for root from 142.93.201.168 port 48520 ssh2 ... |
2019-10-14 02:05:53 |
| 176.124.17.240 | attack | " " |
2019-10-14 01:48:49 |
| 106.13.46.114 | attackbotsspam | 2019-10-13T17:02:41.552560tmaserv sshd\[13042\]: Invalid user Traduire_123 from 106.13.46.114 port 57958 2019-10-13T17:02:41.556812tmaserv sshd\[13042\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.46.114 2019-10-13T17:02:43.462292tmaserv sshd\[13042\]: Failed password for invalid user Traduire_123 from 106.13.46.114 port 57958 ssh2 2019-10-13T17:08:57.971559tmaserv sshd\[13287\]: Invalid user Losenord_!@\# from 106.13.46.114 port 38696 2019-10-13T17:08:57.976369tmaserv sshd\[13287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.46.114 2019-10-13T17:09:00.496766tmaserv sshd\[13287\]: Failed password for invalid user Losenord_!@\# from 106.13.46.114 port 38696 ssh2 ... |
2019-10-14 02:06:39 |
| 177.52.255.128 | attackspambots | Oct 9 05:02:12 our-server-hostname postfix/smtpd[15686]: connect from unknown[177.52.255.128] Oct 9 05:02:18 our-server-hostname sqlgrey: grey: new: 177.52.255.128(177.52.255.128), x@x -> x@x Oct 9 05:02:20 our-server-hostname postfix/policy-spf[15060]: : Policy action=PREPEND Received-SPF: none (netwtelecom.com.br: No applicable sender policy available) receiver=x@x Oct x@x Oct 9 05:02:20 our-server-hostname sqlgrey: grey: new: 177.52.255.128(177.52.255.128), x@x -> x@x Oct x@x Oct 9 05:02:21 our-server-hostname sqlgrey: grey: new: 177.52.255.128(177.52.255.128), x@x -> x@x Oct x@x Oct 9 05:02:22 our-server-hostname sqlgrey: grey: new: 177.52.255.128(177.52.255.128), x@x -> x@x Oct x@x Oct 9 05:02:23 our-server-hostname sqlgrey: grey: new: 177.52.255.128(177.52.255.128), x@x -> x@x Oct x@x Oct 9 05:02:24 our-server-hostname sqlgrey: grey: throttling: 177.52.255.128(177.52.255.128), x@x -> x@x Oct x@x Oct 9 05:02:26 our-server-hostname sqlgrey: grey: throttling........ ------------------------------- |
2019-10-14 02:00:21 |