城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 146.42.9.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40885
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;146.42.9.242. IN A
;; AUTHORITY SECTION:
. 365 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2021123001 1800 900 604800 86400
;; Query time: 47 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 31 07:31:56 CST 2021
;; MSG SIZE rcvd: 105242.9.42.146.in-addr.arpa domain name pointer non-routed-un-exposed-IP.42.146.in-addr.arpa.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
242.9.42.146.in-addr.arpa name = non-routed-un-exposed-IP.42.146.in-addr.arpa.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 112.85.42.72 | attackspambots | Jul 28 16:23:41 srv-4 sshd\[13863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.72 user=root Jul 28 16:23:44 srv-4 sshd\[13863\]: Failed password for root from 112.85.42.72 port 59934 ssh2 Jul 28 16:24:45 srv-4 sshd\[14023\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.72 user=root ... |
2019-07-28 22:25:13 |
| 5.62.51.44 | attack | (From excellence1st@tutanota.com) Hi, I came across your website and thought you would be interested. We are the supplier of ready made AliExpress dropshipping business websites. The average markup on products is 300% or more. No stock, No headaches, all items are dropshipped direcly from the suppliers. There are no monthly fees - domain and hosting are also n/c. You keep all of the profits on each sale. We design ready made dropship sites that is all we do. To see our latest available dropshipping sites please visit us at https://dropshippingincome.com We look forward to seing you there. Best, Justin DSI |
2019-07-28 22:39:43 |
| 159.224.87.241 | attack | Jul 28 10:27:03 vps200512 sshd\[13319\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.224.87.241 user=root Jul 28 10:27:05 vps200512 sshd\[13319\]: Failed password for root from 159.224.87.241 port 51985 ssh2 Jul 28 10:31:54 vps200512 sshd\[13399\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.224.87.241 user=root Jul 28 10:31:55 vps200512 sshd\[13399\]: Failed password for root from 159.224.87.241 port 49619 ssh2 Jul 28 10:36:48 vps200512 sshd\[13481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.224.87.241 user=root |
2019-07-28 22:41:37 |
| 218.164.54.126 | attack | Jul 28 05:32:08 localhost kernel: [15550521.823600] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=218.164.54.126 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=42818 PROTO=TCP SPT=51249 DPT=37215 WINDOW=57372 RES=0x00 SYN URGP=0 Jul 28 05:32:08 localhost kernel: [15550521.823625] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=218.164.54.126 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=42818 PROTO=TCP SPT=51249 DPT=37215 SEQ=758669438 ACK=0 WINDOW=57372 RES=0x00 SYN URGP=0 Jul 28 07:26:00 localhost kernel: [15557353.720072] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=218.164.54.126 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=26413 PROTO=TCP SPT=51249 DPT=37215 WINDOW=57372 RES=0x00 SYN URGP=0 Jul 28 07:26:00 localhost kernel: [15557353.720104] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=218.164.54.126 DST=[mungedIP2] LEN=40 TOS |
2019-07-28 23:14:46 |
| 167.71.46.127 | attackspambots | 167.71.46.127 - - [28/Jul/2019:15:49:42 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.46.127 - - [28/Jul/2019:15:49:43 +0200] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.46.127 - - [28/Jul/2019:15:49:43 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.46.127 - - [28/Jul/2019:15:49:45 +0200] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.46.127 - - [28/Jul/2019:15:49:45 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.71.46.127 - - [28/Jul/2019:15:49:50 +0200] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-07-28 22:33:00 |
| 123.206.135.16 | attack | Jul 28 16:37:59 hosting sshd[8310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.135.16 user=root Jul 28 16:38:01 hosting sshd[8310]: Failed password for root from 123.206.135.16 port 50546 ssh2 ... |
2019-07-28 22:15:08 |
| 192.162.68.22 | attack | Jul 27 15:43:44 cumulus sshd[15798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.162.68.22 user=r.r Jul 27 15:43:46 cumulus sshd[15798]: Failed password for r.r from 192.162.68.22 port 33852 ssh2 Jul 27 15:43:46 cumulus sshd[15798]: Received disconnect from 192.162.68.22 port 33852:11: Bye Bye [preauth] Jul 27 15:43:46 cumulus sshd[15798]: Disconnected from 192.162.68.22 port 33852 [preauth] Jul 27 18:40:51 cumulus sshd[23780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.162.68.22 user=r.r Jul 27 18:40:53 cumulus sshd[23780]: Failed password for r.r from 192.162.68.22 port 53548 ssh2 Jul 27 18:40:53 cumulus sshd[23780]: Received disconnect from 192.162.68.22 port 53548:11: Bye Bye [preauth] Jul 27 18:40:53 cumulus sshd[23780]: Disconnected from 192.162.68.22 port 53548 [preauth] Jul 27 18:46:44 cumulus sshd[24039]: pam_unix(sshd:auth): authentication failure; logname= uid=0........ ------------------------------- |
2019-07-28 22:42:21 |
| 180.126.130.130 | attack | Too many connections or unauthorized access detected from Yankee banned ip |
2019-07-28 23:14:02 |
| 89.248.172.16 | attackbots | Port scan: Attack repeated for 24 hours |
2019-07-28 22:57:13 |
| 36.7.168.224 | attackbotsspam | Unauthorised access (Jul 28) SRC=36.7.168.224 LEN=52 TTL=115 ID=26966 DF TCP DPT=1433 WINDOW=8192 SYN |
2019-07-28 22:54:34 |
| 134.73.129.144 | attack | 2019-07-28T12:22:48.703563abusebot-2.cloudsearch.cf sshd\[27850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.129.144 user=root |
2019-07-28 22:47:33 |
| 177.141.196.253 | attack | Jul 28 13:10:17 Ubuntu-1404-trusty-64-minimal sshd\[20737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.141.196.253 user=root Jul 28 13:10:19 Ubuntu-1404-trusty-64-minimal sshd\[20737\]: Failed password for root from 177.141.196.253 port 21249 ssh2 Jul 28 13:20:01 Ubuntu-1404-trusty-64-minimal sshd\[23203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.141.196.253 user=root Jul 28 13:20:02 Ubuntu-1404-trusty-64-minimal sshd\[23203\]: Failed password for root from 177.141.196.253 port 14945 ssh2 Jul 28 13:26:54 Ubuntu-1404-trusty-64-minimal sshd\[27653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.141.196.253 user=root |
2019-07-28 22:36:38 |
| 216.29.205.90 | attack | Jul 27 16:28:19 host2 sshd[7784]: Did not receive identification string from 216.29.205.90 Jul 27 16:28:40 host2 sshd[8815]: Received disconnect from 216.29.205.90: 11: Bye Bye [preauth] Jul 27 16:28:45 host2 sshd[9105]: reveeclipse mapping checking getaddrinfo for ip-216-29-205-90.ewebforce.net [216.29.205.90] failed - POSSIBLE BREAK-IN ATTEMPT! Jul 27 16:28:45 host2 sshd[9105]: Invalid user admin from 216.29.205.90 Jul 27 16:28:45 host2 sshd[9105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.29.205.90 Jul 27 16:28:47 host2 sshd[9105]: Failed password for invalid user admin from 216.29.205.90 port 46462 ssh2 Jul 27 16:28:47 host2 sshd[9105]: Received disconnect from 216.29.205.90: 11: Bye Bye [preauth] Jul 27 16:28:50 host2 sshd[9258]: reveeclipse mapping checking getaddrinfo for ip-216-29-205-90.ewebforce.net [216.29.205.90] failed - POSSIBLE BREAK-IN ATTEMPT! Jul 27 16:28:50 host2 sshd[9258]: Invalid user ubuntu from 2........ ------------------------------- |
2019-07-28 22:34:09 |
| 123.19.17.211 | attackspambots | Jul 28 13:18:23 shared06 sshd[12858]: Did not receive identification string from 123.19.17.211 Jul 28 13:18:23 shared06 sshd[12859]: Did not receive identification string from 123.19.17.211 Jul 28 13:18:32 shared06 sshd[12868]: Invalid user ubnt from 123.19.17.211 Jul 28 13:18:32 shared06 sshd[12868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.19.17.211 Jul 28 13:18:34 shared06 sshd[12868]: Failed password for invalid user ubnt from 123.19.17.211 port 55892 ssh2 Jul 28 13:18:34 shared06 sshd[12868]: Connection closed by 123.19.17.211 port 55892 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=123.19.17.211 |
2019-07-28 22:27:00 |
| 181.89.141.232 | attack | Automatic report - Port Scan Attack |
2019-07-28 22:10:08 |