城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 144.157.94.81
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47953
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;144.157.94.81. IN A
;; AUTHORITY SECTION:
. 470 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011000 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 10 17:19:17 CST 2022
;; MSG SIZE rcvd: 10681.94.157.144.in-addr.arpa domain name pointer nothing.attdns.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
81.94.157.144.in-addr.arpa name = nothing.attdns.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 92.63.194.115 | attackspambots | 23.06.2019 16:15:54 Connection to port 27369 blocked by firewall |
2019-06-24 00:27:20 |
| 185.208.208.198 | attackbotsspam | Jun 23 16:47:31 box kernel: [418373.838069] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=185.208.208.198 DST=[munged] LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=2900 PROTO=TCP SPT=47705 DPT=6018 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 23 17:17:55 box kernel: [420197.599773] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=185.208.208.198 DST=[munged] LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=46665 PROTO=TCP SPT=47705 DPT=13340 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 23 17:46:55 box kernel: [421937.919640] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=185.208.208.198 DST=[munged] LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=20906 PROTO=TCP SPT=47705 DPT=15158 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 23 17:49:19 box kernel: [422082.443763] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=185.208.208.198 DST=[munged] LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=32349 PROTO=TCP SPT=47705 DPT=6886 WINDOW=1024 RES=0x00 SYN URGP=0 Jun 23 17:49:48 box kernel: [422110.982563] [UFW BLOCK] IN=eth0 OUT= MAC=[munged] SRC=185.208.208.198 DST=[munged] LEN=40 TOS=0x00 PREC=0x00 T |
2019-06-24 00:34:20 |
| 218.92.0.192 | attackspambots | Jun 23 16:00:52 *** sshd[6477]: User root from 218.92.0.192 not allowed because not listed in AllowUsers |
2019-06-24 00:46:30 |
| 185.137.233.42 | attackbots | MultiHost/MultiPort Probe, Scan, Hack - |
2019-06-23 23:54:55 |
| 81.89.56.241 | attackspambots | SSH-BRUTEFORCE |
2019-06-24 00:10:05 |
| 186.223.229.247 | attackspam | SSH/22 MH Probe, BF, Hack - |
2019-06-24 00:17:10 |
| 107.170.204.28 | attackspam | 3389/tcp 389/tcp 5903/tcp... [2019-04-22/06-23]55pkt,43pt.(tcp),2pt.(udp) |
2019-06-24 00:05:20 |
| 140.250.123.180 | attackspam | Jun 19 00:30:56 shared09 sshd[2735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.250.123.180 user=r.r Jun 19 00:30:58 shared09 sshd[2735]: Failed password for r.r from 140.250.123.180 port 52630 ssh2 Jun 19 00:31:01 shared09 sshd[2735]: Failed password for r.r from 140.250.123.180 port 52630 ssh2 Jun 19 00:31:03 shared09 sshd[2735]: Failed password for r.r from 140.250.123.180 port 52630 ssh2 Jun 19 00:31:05 shared09 sshd[2735]: Failed password for r.r from 140.250.123.180 port 52630 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=140.250.123.180 |
2019-06-23 23:56:51 |
| 110.137.171.128 | attack | 445/tcp [2019-06-23]1pkt |
2019-06-24 00:40:59 |
| 180.120.190.154 | attackspambots | 2019-06-23T11:17:28.197569 X postfix/smtpd[19976]: warning: unknown[180.120.190.154]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-06-23T11:21:55.403618 X postfix/smtpd[19976]: warning: unknown[180.120.190.154]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-06-23T11:51:41.422356 X postfix/smtpd[23518]: warning: unknown[180.120.190.154]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-06-24 00:37:45 |
| 177.54.147.139 | attack | 445/tcp [2019-06-23]1pkt |
2019-06-24 00:35:15 |
| 206.189.159.108 | attackspam | Jun 22 22:41:11 h02 sshd[23939]: Received disconnect from 206.189.159.108: 11: Bye Bye [preauth] Jun 22 22:41:13 h02 sshd[23941]: Invalid user admin from 206.189.159.108 Jun 22 22:41:13 h02 sshd[23941]: Received disconnect from 206.189.159.108: 11: Bye Bye [preauth] Jun 22 22:41:14 h02 sshd[23944]: Invalid user admin from 206.189.159.108 Jun 22 22:41:14 h02 sshd[23944]: Received disconnect from 206.189.159.108: 11: Bye Bye [preauth] Jun 22 22:41:16 h02 sshd[23946]: Invalid user user from 206.189.159.108 Jun 22 22:41:16 h02 sshd[23946]: Received disconnect from 206.189.159.108: 11: Bye Bye [preauth] Jun 22 22:41:17 h02 sshd[23948]: Invalid user ubnt from 206.189.159.108 Jun 22 22:41:17 h02 sshd[23948]: Received disconnect from 206.189.159.108: 11: Bye Bye [preauth] Jun 22 22:41:19 h02 sshd[23950]: Invalid user admin from 206.189.159.108 Jun 22 22:41:19 h02 sshd[23950]: Received disconnect from 206.189.159.108: 11: Bye Bye [preauth] Jun 22 22:41:20 h02 sshd[23952]: Invali........ ------------------------------- |
2019-06-24 00:24:23 |
| 207.46.13.185 | attack | Automatic report - Web App Attack |
2019-06-24 00:29:54 |
| 54.223.168.233 | attackspam | 2019-06-23T15:37:56.039996abusebot-4.cloudsearch.cf sshd\[4854\]: Invalid user elasticsearch from 54.223.168.233 port 44088 |
2019-06-23 23:51:22 |
| 95.173.215.141 | attackbotsspam | Jun 23 12:33:48 62-210-73-4 sshd\[28800\]: Invalid user xq from 95.173.215.141 port 53913 Jun 23 12:33:50 62-210-73-4 sshd\[28800\]: Failed password for invalid user xq from 95.173.215.141 port 53913 ssh2 ... |
2019-06-24 00:50:52 |