城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.129.42.73
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43845
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;148.129.42.73. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 15:03:53 CST 2025
;; MSG SIZE rcvd: 106
Host 73.42.129.148.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 73.42.129.148.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 202.62.224.61 | attackspambots | Bruteforce detected by fail2ban |
2020-08-12 01:56:32 |
| 187.180.199.48 | attackspambots | Aug 11 19:23:30 ns3164893 sshd[11406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.180.199.48 user=root Aug 11 19:23:32 ns3164893 sshd[11406]: Failed password for root from 187.180.199.48 port 49697 ssh2 ... |
2020-08-12 02:11:44 |
| 37.49.230.156 | attackbots | Unauthorized connection attempt from IP address 37.49.230.156 on Port 25(SMTP) |
2020-08-12 02:25:37 |
| 51.145.128.128 | attackbotsspam | SSH brutforce |
2020-08-12 02:09:44 |
| 137.74.16.65 | attack | Aug 10 00:00:17 localhost postfix/smtpd[154410]: lost connection after EHLO from ip65.ip-137-74-16.eu[137.74.16.65] Aug 10 00:00:18 localhost postfix/smtpd[154410]: lost connection after EHLO from ip65.ip-137-74-16.eu[137.74.16.65] Aug 10 00:00:19 localhost postfix/smtpd[154410]: lost connection after EHLO from ip65.ip-137-74-16.eu[137.74.16.65] Aug 10 00:00:20 localhost postfix/smtpd[154410]: lost connection after EHLO from ip65.ip-137-74-16.eu[137.74.16.65] Aug 10 01:07:58 localhost postfix/smtpd[171171]: lost connection after EHLO from ip65.ip-137-74-16.eu[137.74.16.65] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=137.74.16.65 |
2020-08-12 01:56:49 |
| 171.241.101.177 | attackbots | 1597147688 - 08/11/2020 14:08:08 Host: 171.241.101.177/171.241.101.177 Port: 445 TCP Blocked |
2020-08-12 01:54:36 |
| 46.105.132.32 | attackbotsspam | Unauthorised access (Aug 11) SRC=46.105.132.32 LEN=40 PREC=0x20 TTL=244 ID=54321 TCP DPT=139 WINDOW=65535 SYN |
2020-08-12 02:28:24 |
| 91.216.190.252 | attackbotsspam | 2020-08-11T17:29:22.459461abusebot-4.cloudsearch.cf sshd[4686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.216.190.252 user=root 2020-08-11T17:29:24.346480abusebot-4.cloudsearch.cf sshd[4686]: Failed password for root from 91.216.190.252 port 33176 ssh2 2020-08-11T17:32:37.947687abusebot-4.cloudsearch.cf sshd[4711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.216.190.252 user=root 2020-08-11T17:32:40.271290abusebot-4.cloudsearch.cf sshd[4711]: Failed password for root from 91.216.190.252 port 56846 ssh2 2020-08-11T17:35:41.584293abusebot-4.cloudsearch.cf sshd[4740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.216.190.252 user=root 2020-08-11T17:35:43.832842abusebot-4.cloudsearch.cf sshd[4740]: Failed password for root from 91.216.190.252 port 52286 ssh2 2020-08-11T17:38:50.277867abusebot-4.cloudsearch.cf sshd[4768]: pam_unix(sshd:auth): authen ... |
2020-08-12 02:30:08 |
| 212.83.186.26 | attackspam | Aug 11 19:12:25 marvibiene sshd[27774]: Failed password for root from 212.83.186.26 port 12074 ssh2 |
2020-08-12 01:54:20 |
| 3.0.69.254 | attack | 3.0.69.254 - - \[11/Aug/2020:17:04:49 +0300\] "POST /xmlrpc.php HTTP/1.1" 200 4657 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2020-08-12 02:16:00 |
| 198.23.152.218 | attackspambots | Registration form abuse |
2020-08-12 02:05:35 |
| 118.24.241.254 | attack | Lines containing failures of 118.24.241.254 (max 1000) Aug 11 01:04:56 localhost sshd[15240]: User r.r from 118.24.241.254 not allowed because listed in DenyUsers Aug 11 01:04:56 localhost sshd[15240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.241.254 user=r.r Aug 11 01:04:58 localhost sshd[15240]: Failed password for invalid user r.r from 118.24.241.254 port 35716 ssh2 Aug 11 01:05:00 localhost sshd[15240]: Received disconnect from 118.24.241.254 port 35716:11: Bye Bye [preauth] Aug 11 01:05:00 localhost sshd[15240]: Disconnected from invalid user r.r 118.24.241.254 port 35716 [preauth] Aug 11 01:15:42 localhost sshd[18267]: User r.r from 118.24.241.254 not allowed because listed in DenyUsers Aug 11 01:15:43 localhost sshd[18267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.241.254 user=r.r Aug 11 01:15:44 localhost sshd[18267]: Failed password for invalid user r.r ........ ------------------------------ |
2020-08-12 01:55:18 |
| 117.232.127.51 | attack | 2020-08-11T19:44:58+0200 Failed SSH Authentication/Brute Force Attack. (Server 9) |
2020-08-12 01:52:26 |
| 167.99.157.37 | attackbotsspam | Bruteforce detected by fail2ban |
2020-08-12 02:30:37 |
| 120.131.14.125 | attackbotsspam | 2020-08-11T12:18:15.960379dreamphreak.com sshd[46879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.131.14.125 user=root 2020-08-11T12:18:17.943620dreamphreak.com sshd[46879]: Failed password for root from 120.131.14.125 port 19160 ssh2 ... |
2020-08-12 02:17:53 |