城市(city): unknown
省份(region): unknown
国家(country): unknown
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.196.166.17
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59746
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.196.166.17. IN A
;; AUTHORITY SECTION:
. 124 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400
;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:18:39 CST 2022
;; MSG SIZE rcvd: 107Host 17.166.196.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 17.166.196.139.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 35.193.136.194 | attack | fail2ban honeypot |
2019-10-30 23:31:47 |
| 31.163.117.8 | attack | Chat Spam |
2019-10-30 23:42:46 |
| 123.206.18.14 | attackspam | Oct 30 08:54:40 firewall sshd[18113]: Invalid user aamaas from 123.206.18.14 Oct 30 08:54:42 firewall sshd[18113]: Failed password for invalid user aamaas from 123.206.18.14 port 50558 ssh2 Oct 30 09:03:28 firewall sshd[18262]: Invalid user edith from 123.206.18.14 ... |
2019-10-30 23:33:24 |
| 45.82.153.35 | attackbotsspam | firewall-block, port(s): 40987/tcp, 50980/tcp |
2019-10-30 23:34:47 |
| 91.238.25.40 | attackspambots | 445/tcp [2019-10-30]1pkt |
2019-10-30 23:33:10 |
| 121.34.35.123 | attackbotsspam | Oct 30 06:18:39 mxgate1 postfix/postscreen[10450]: CONNECT from [121.34.35.123]:27220 to [176.31.12.44]:25 Oct 30 06:18:39 mxgate1 postfix/dnsblog[10451]: addr 121.34.35.123 listed by domain cbl.abuseat.org as 127.0.0.2 Oct 30 06:18:39 mxgate1 postfix/dnsblog[10453]: addr 121.34.35.123 listed by domain zen.spamhaus.org as 127.0.0.3 Oct 30 06:18:39 mxgate1 postfix/dnsblog[10453]: addr 121.34.35.123 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 30 06:18:39 mxgate1 postfix/dnsblog[10453]: addr 121.34.35.123 listed by domain zen.spamhaus.org as 127.0.0.4 Oct 30 06:18:39 mxgate1 postfix/dnsblog[10454]: addr 121.34.35.123 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Oct 30 06:18:39 mxgate1 postfix/dnsblog[10455]: addr 121.34.35.123 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 30 06:18:45 mxgate1 postfix/postscreen[10450]: DNSBL rank 5 for [121.34.35.123]:27220 Oct x@x Oct 30 06:18:46 mxgate1 postfix/postscreen[10450]: DISCONNECT [121.34.35.123]:27220 ........ ------------------------------- |
2019-10-30 23:53:15 |
| 201.236.143.195 | attackspambots | 2019-10-30 06:50:33 dovecot_login authenticator failed for (vRGmjmX) [201.236.143.195]:4332 I=[192.147.25.65]:587: 535 Incorrect authentication data (set_id=naill@lerctr.org) 2019-10-30 06:50:50 dovecot_login authenticator failed for (Pess9x) [201.236.143.195]:4595 I=[192.147.25.65]:587: 535 Incorrect authentication data (set_id=naill@lerctr.org) 2019-10-30 06:51:10 dovecot_login authenticator failed for (kHKCDWGY) [201.236.143.195]:3212 I=[192.147.25.65]:587: 535 Incorrect authentication data (set_id=naill@lerctr.org) ... |
2019-10-30 23:59:58 |
| 115.239.238.46 | attack | Oct 30 12:05:20 h2177944 kernel: \[5309264.949318\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=115.239.238.46 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=10656 DF PROTO=TCP SPT=52994 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 Oct 30 12:16:29 h2177944 kernel: \[5309933.788023\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=115.239.238.46 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=7547 DF PROTO=TCP SPT=65028 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 Oct 30 12:28:48 h2177944 kernel: \[5310672.439188\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=115.239.238.46 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=10281 DF PROTO=TCP SPT=55773 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 Oct 30 12:42:26 h2177944 kernel: \[5311490.331191\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=115.239.238.46 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=22041 DF PROTO=TCP SPT=61336 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 Oct 30 12:51:36 h2177944 kernel: \[5312040.157828\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=115.239.238.46 |
2019-10-30 23:35:10 |
| 180.71.47.198 | attackbotsspam | Invalid user adcuser from 180.71.47.198 port 54706 |
2019-10-30 23:22:23 |
| 122.51.57.114 | attackspambots | Oct 30 14:03:00 site3 sshd\[104701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.57.114 user=root Oct 30 14:03:03 site3 sshd\[104701\]: Failed password for root from 122.51.57.114 port 53086 ssh2 Oct 30 14:07:57 site3 sshd\[104782\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.57.114 user=root Oct 30 14:07:59 site3 sshd\[104782\]: Failed password for root from 122.51.57.114 port 34940 ssh2 Oct 30 14:12:47 site3 sshd\[104924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.57.114 user=root ... |
2019-10-30 23:40:38 |
| 180.76.169.192 | attackspambots | Oct 30 16:36:04 server sshd\[27931\]: Invalid user !qa@ws from 180.76.169.192 port 54748 Oct 30 16:36:04 server sshd\[27931\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.169.192 Oct 30 16:36:06 server sshd\[27931\]: Failed password for invalid user !qa@ws from 180.76.169.192 port 54748 ssh2 Oct 30 16:42:51 server sshd\[25410\]: Invalid user ventura from 180.76.169.192 port 35700 Oct 30 16:42:51 server sshd\[25410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.169.192 |
2019-10-30 23:46:35 |
| 46.201.32.95 | attackbots | Fail2Ban Ban Triggered |
2019-10-30 23:24:54 |
| 35.201.243.170 | attackspambots | Oct 30 11:00:14 debian sshd\[15727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.201.243.170 user=root Oct 30 11:00:16 debian sshd\[15727\]: Failed password for root from 35.201.243.170 port 27786 ssh2 Oct 30 11:04:00 debian sshd\[15761\]: Invalid user yyy from 35.201.243.170 port 37802 ... |
2019-10-30 23:20:59 |
| 66.70.247.212 | attackspam | Oct 30 16:46:24 odie postfix/smtpd\[30129\]: warning: ip212.ip-66-70-247.net\[66.70.247.212\]: SASL LOGIN authentication failed: authentication failure Oct 30 16:50:50 odie postfix/smtpd\[30368\]: warning: ip212.ip-66-70-247.net\[66.70.247.212\]: SASL LOGIN authentication failed: authentication failure Oct 30 16:55:28 odie postfix/smtpd\[30573\]: warning: ip212.ip-66-70-247.net\[66.70.247.212\]: SASL LOGIN authentication failed: authentication failure Oct 30 16:59:43 odie postfix/smtpd\[30739\]: warning: ip212.ip-66-70-247.net\[66.70.247.212\]: SASL LOGIN authentication failed: authentication failure Oct 30 17:04:10 odie postfix/smtpd\[31055\]: warning: ip212.ip-66-70-247.net\[66.70.247.212\]: SASL LOGIN authentication failed: authentication failure |
2019-10-30 23:13:03 |
| 93.179.73.232 | attack | 445/tcp [2019-10-30]1pkt |
2019-10-30 23:54:01 |