城市(city): unknown
省份(region): unknown
国家(country): Switzerland
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.248.50.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59576
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.248.50.100. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012700 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 28 00:46:34 CST 2025
;; MSG SIZE rcvd: 107
100.50.248.138.in-addr.arpa domain name pointer 100-50-248-138-pool.dsl.qlnet.ch.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
100.50.248.138.in-addr.arpa name = 100-50-248-138-pool.dsl.qlnet.ch.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 206.189.51.28 | attack | 206.189.51.28 - - [04/Sep/2019:05:20:35 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 206.189.51.28 - - [04/Sep/2019:05:20:35 +0200] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 206.189.51.28 - - [04/Sep/2019:05:20:41 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 206.189.51.28 - - [04/Sep/2019:05:20:46 +0200] "POST /wp-login.php HTTP/1.1" 200 1684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 206.189.51.28 - - [04/Sep/2019:05:20:46 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 206.189.51.28 - - [04/Sep/2019:05:20:46 +0200] "POST /wp-login.php HTTP/1.1" 200 1688 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-09-04 20:40:49 |
| 37.59.107.100 | attackspam | Aug 12 14:27:52 Server10 sshd[26391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.107.100 Aug 12 14:27:54 Server10 sshd[26391]: Failed password for invalid user server from 37.59.107.100 port 35998 ssh2 |
2019-09-04 20:36:28 |
| 105.73.80.135 | attackbots | Sep 4 12:23:26 web8 sshd\[14781\]: Invalid user testftp from 105.73.80.135 Sep 4 12:23:26 web8 sshd\[14781\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.73.80.135 Sep 4 12:23:28 web8 sshd\[14781\]: Failed password for invalid user testftp from 105.73.80.135 port 15139 ssh2 Sep 4 12:27:50 web8 sshd\[16958\]: Invalid user ftpuser from 105.73.80.135 Sep 4 12:27:50 web8 sshd\[16958\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.73.80.135 |
2019-09-04 20:30:13 |
| 118.24.101.182 | attackspambots | Sep 4 06:22:58 meumeu sshd[3387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.101.182 Sep 4 06:23:00 meumeu sshd[3387]: Failed password for invalid user bonec from 118.24.101.182 port 44908 ssh2 Sep 4 06:27:17 meumeu sshd[4001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.101.182 ... |
2019-09-04 20:45:55 |
| 68.183.236.29 | attackspam | Sep 4 09:54:57 server sshd\[3484\]: Invalid user whitney from 68.183.236.29 port 42734 Sep 4 09:54:57 server sshd\[3484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.236.29 Sep 4 09:54:59 server sshd\[3484\]: Failed password for invalid user whitney from 68.183.236.29 port 42734 ssh2 Sep 4 10:00:08 server sshd\[1974\]: Invalid user lobo from 68.183.236.29 port 59744 Sep 4 10:00:08 server sshd\[1974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.236.29 |
2019-09-04 20:03:51 |
| 121.234.25.197 | attackspambots | Sep 4 10:20:51 itv-usvr-01 sshd[9716]: Invalid user admin from 121.234.25.197 Sep 4 10:20:51 itv-usvr-01 sshd[9716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.234.25.197 Sep 4 10:20:51 itv-usvr-01 sshd[9716]: Invalid user admin from 121.234.25.197 Sep 4 10:20:52 itv-usvr-01 sshd[9716]: Failed password for invalid user admin from 121.234.25.197 port 26630 ssh2 Sep 4 10:20:51 itv-usvr-01 sshd[9716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.234.25.197 Sep 4 10:20:51 itv-usvr-01 sshd[9716]: Invalid user admin from 121.234.25.197 Sep 4 10:20:52 itv-usvr-01 sshd[9716]: Failed password for invalid user admin from 121.234.25.197 port 26630 ssh2 Sep 4 10:20:56 itv-usvr-01 sshd[9716]: Failed password for invalid user admin from 121.234.25.197 port 26630 ssh2 |
2019-09-04 20:25:38 |
| 121.134.159.21 | attackbots | Sep 4 09:10:02 microserver sshd[43149]: Invalid user test from 121.134.159.21 port 41958 Sep 4 09:10:02 microserver sshd[43149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.134.159.21 Sep 4 09:10:03 microserver sshd[43149]: Failed password for invalid user test from 121.134.159.21 port 41958 ssh2 Sep 4 09:15:44 microserver sshd[44218]: Invalid user topic from 121.134.159.21 port 58530 Sep 4 09:15:44 microserver sshd[44218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.134.159.21 Sep 4 09:26:58 microserver sshd[45635]: Invalid user johann from 121.134.159.21 port 35198 Sep 4 09:26:58 microserver sshd[45635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.134.159.21 Sep 4 09:27:00 microserver sshd[45635]: Failed password for invalid user johann from 121.134.159.21 port 35198 ssh2 Sep 4 09:32:53 microserver sshd[46322]: pam_unix(sshd:auth): authentication failure; l |
2019-09-04 20:14:40 |
| 14.177.133.28 | attackbotsspam | Sep 4 04:51:14 h2022099 sshd[18624]: Address 14.177.133.28 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Sep 4 04:51:14 h2022099 sshd[18624]: Invalid user admin from 14.177.133.28 Sep 4 04:51:14 h2022099 sshd[18624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.177.133.28 Sep 4 04:51:16 h2022099 sshd[18624]: Failed password for invalid user admin from 14.177.133.28 port 49871 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.177.133.28 |
2019-09-04 20:43:48 |
| 88.214.26.8 | attack | Sep 4 10:19:59 debian sshd\[4285\]: Invalid user admin from 88.214.26.8 port 48708 Sep 4 10:19:59 debian sshd\[4285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.214.26.8 ... |
2019-09-04 20:11:17 |
| 71.6.233.96 | attack | 10001/tcp 8060/tcp 8888/tcp... [2019-07-12/09-04]5pkt,5pt.(tcp) |
2019-09-04 20:47:17 |
| 198.108.66.175 | attack | 445/tcp 22/tcp 5432/tcp... [2019-07-14/09-04]7pkt,6pt.(tcp) |
2019-09-04 20:49:32 |
| 14.215.165.131 | attackbotsspam | Too many connections or unauthorized access detected from Arctic banned ip |
2019-09-04 20:09:35 |
| 220.76.107.50 | attack | Sep 4 10:11:30 dev0-dcde-rnet sshd[13678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.76.107.50 Sep 4 10:11:32 dev0-dcde-rnet sshd[13678]: Failed password for invalid user admin from 220.76.107.50 port 57834 ssh2 Sep 4 10:16:29 dev0-dcde-rnet sshd[13684]: Failed password for root from 220.76.107.50 port 35010 ssh2 |
2019-09-04 20:17:22 |
| 167.57.246.39 | attackbotsspam | RDP Scan |
2019-09-04 20:37:00 |
| 111.8.122.11 | attackspam | Automatic report - Port Scan Attack |
2019-09-04 19:59:32 |