城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.22.130.146
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17619
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;131.22.130.146. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025062801 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 29 08:17:17 CST 2025
;; MSG SIZE rcvd: 107
Host 146.130.22.131.in-addr.arpa not found: 2(SERVFAIL)
server can't find 131.22.130.146.in-addr.arpa: SERVFAIL
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 124.57.190.28 | attackbots | SSH Bruteforce |
2019-06-22 23:15:58 |
| 216.218.206.66 | attack | firewall-block, port(s): 80/tcp |
2019-06-22 22:26:00 |
| 190.108.121.232 | attackbots | SMTP-sasl brute force ... |
2019-06-22 22:57:31 |
| 192.228.100.16 | attackbotsspam | Probing for vulnerable services |
2019-06-22 22:45:52 |
| 104.196.16.112 | attack | Jun 22 13:54:50 work-partkepr sshd\[7345\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.196.16.112 user=root Jun 22 13:54:52 work-partkepr sshd\[7345\]: Failed password for root from 104.196.16.112 port 36222 ssh2 ... |
2019-06-22 22:36:35 |
| 149.5.118.164 | attackbotsspam | Brute forcing RDP port 3389 |
2019-06-22 22:57:04 |
| 112.219.161.178 | attackspam | Jun 18 06:58:38 HOSTNAME sshd[17557]: Invalid user pi from 112.219.161.178 port 54934 Jun 18 06:58:38 HOSTNAME sshd[17559]: Invalid user pi from 112.219.161.178 port 54940 Jun 18 06:58:38 HOSTNAME sshd[17557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.219.161.178 Jun 18 06:58:39 HOSTNAME sshd[17559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.219.161.178 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=112.219.161.178 |
2019-06-22 22:44:06 |
| 206.81.9.61 | attackbotsspam | WP Authentication failure |
2019-06-22 22:26:28 |
| 198.108.66.231 | attackbots | 8090/tcp 465/tcp 623/tcp... [2019-05-01/06-22]7pkt,6pt.(tcp),1pt.(udp) |
2019-06-22 23:28:01 |
| 109.133.152.5 | attackspam | Jun 19 04:33:02 datentool sshd[29819]: Invalid user guest from 109.133.152.5 Jun 19 04:33:02 datentool sshd[29819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.133.152.5 Jun 19 04:33:04 datentool sshd[29819]: Failed password for invalid user guest from 109.133.152.5 port 46666 ssh2 Jun 19 04:33:12 datentool sshd[29822]: Invalid user named from 109.133.152.5 Jun 19 04:33:12 datentool sshd[29822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.133.152.5 Jun 19 04:33:14 datentool sshd[29822]: Failed password for invalid user named from 109.133.152.5 port 39704 ssh2 Jun 19 04:33:22 datentool sshd[29824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.133.152.5 user=bin Jun 19 04:33:24 datentool sshd[29824]: Failed password for bin from 109.133.152.5 port 40176 ssh2 Jun 19 04:33:31 datentool sshd[29826]: pam_unix(sshd:auth): authenticat........ ------------------------------- |
2019-06-22 23:05:41 |
| 200.60.170.97 | attackspambots | 445/tcp 445/tcp [2019-06-20/22]2pkt |
2019-06-22 23:07:06 |
| 45.230.200.14 | attackbots | \[22/Jun/2019 07:13:20\] SMTP Spam attack detected from 45.230.200.14, client closed connection before SMTP greeting \[22/Jun/2019 07:13:30\] SMTP Spam attack detected from 45.230.200.14, client closed connection before SMTP greeting \[22/Jun/2019 07:13:40\] SMTP Spam attack detected from 45.230.200.14, client closed connection before SMTP greeting ... |
2019-06-22 22:33:56 |
| 185.234.219.104 | attackbots | Jun 22 14:10:11 cirrus postfix/smtpd[39731]: connect from unknown[185.234.219.104] Jun 22 14:10:11 cirrus postfix/smtpd[39731]: lost connection after AUTH from unknown[185.234.219.104] Jun 22 14:10:11 cirrus postfix/smtpd[39731]: disconnect from unknown[185.234.219.104] Jun 22 14:10:59 cirrus postfix/smtpd[39731]: connect from unknown[185.234.219.104] Jun 22 14:11:00 cirrus postfix/smtpd[39731]: lost connection after AUTH from unknown[185.234.219.104] Jun 22 14:11:00 cirrus postfix/smtpd[39731]: disconnect from unknown[185.234.219.104] Jun 22 14:20:11 cirrus postfix/anvil[39733]: statistics: max connection rate 2/60s for (smtp:185.234.219.104) at Jun 22 14:10:59 Jun 22 14:20:11 cirrus postfix/anvil[39733]: statistics: max connection count 1 for (smtp:185.234.219.104) at Jun 22 14:10:11 Jun 22 14:24:31 cirrus postfix/smtpd[39834]: connect from unknown[185.234.219.104] Jun 22 14:24:31 cirrus postfix/smtpd[39834]: lost connection after AUTH from unknown[185.234.219.104] Ju........ ------------------------------- |
2019-06-22 23:23:02 |
| 138.68.254.12 | attack | Jun 22 14:12:52 jupiter sshd\[3082\]: Invalid user node from 138.68.254.12 Jun 22 14:12:52 jupiter sshd\[3082\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.254.12 Jun 22 14:12:54 jupiter sshd\[3082\]: Failed password for invalid user node from 138.68.254.12 port 44192 ssh2 ... |
2019-06-22 22:37:37 |
| 190.249.146.199 | attack | Brute forcing RDP port 3389 |
2019-06-22 23:04:04 |