城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.212.249.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3603
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;148.212.249.68. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020900 1800 900 604800 86400
;; Query time: 125 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 01:27:48 CST 2025
;; MSG SIZE rcvd: 107
Host 68.249.212.148.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 68.249.212.148.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 81.22.45.225 | attackbots | Sep 17 17:02:54 h2177944 kernel: \[1608989.871365\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.225 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=33352 PROTO=TCP SPT=44942 DPT=48003 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 17 17:40:20 h2177944 kernel: \[1611235.502698\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.225 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=61703 PROTO=TCP SPT=44942 DPT=58002 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 17 17:45:42 h2177944 kernel: \[1611557.569860\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.225 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=6169 PROTO=TCP SPT=44942 DPT=46004 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 17 17:53:12 h2177944 kernel: \[1612008.119213\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.225 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=10267 PROTO=TCP SPT=44942 DPT=55005 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 17 17:58:14 h2177944 kernel: \[1612309.550164\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.225 DST=85.214.117.9 L |
2019-09-18 01:28:12 |
| 185.211.245.198 | attackbotsspam | Sep 17 18:52:31 relay postfix/smtpd\[32358\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 17 18:52:43 relay postfix/smtpd\[32328\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 17 18:53:41 relay postfix/smtpd\[32358\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 17 18:53:51 relay postfix/smtpd\[32328\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 17 18:54:20 relay postfix/smtpd\[418\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-09-18 01:21:41 |
| 113.53.188.91 | attackbots | Unauthorized connection attempt from IP address 113.53.188.91 on Port 445(SMB) |
2019-09-18 00:42:55 |
| 177.38.98.74 | attack | Unauthorized connection attempt from IP address 177.38.98.74 on Port 445(SMB) |
2019-09-18 01:12:28 |
| 159.89.188.167 | attackbotsspam | ssh failed login |
2019-09-18 00:49:12 |
| 79.110.201.195 | attack | Sep 17 19:38:05 icinga sshd[3305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.110.201.195 Sep 17 19:38:07 icinga sshd[3305]: Failed password for invalid user 123udadmin from 79.110.201.195 port 38594 ssh2 ... |
2019-09-18 01:51:01 |
| 1.1.205.108 | attackbotsspam | Unauthorized connection attempt from IP address 1.1.205.108 on Port 445(SMB) |
2019-09-18 01:17:28 |
| 189.15.66.135 | attackspam | Unauthorized connection attempt from IP address 189.15.66.135 on Port 445(SMB) |
2019-09-18 01:36:48 |
| 190.13.146.85 | attackspambots | proto=tcp . spt=56490 . dpt=25 . (listed on Blocklist de Sep 16) (647) |
2019-09-18 01:36:27 |
| 89.35.39.180 | attack | ENG,WP GET /wp-login.php?f=fdb53a |
2019-09-18 01:50:34 |
| 113.125.19.85 | attackspam | Sep 17 12:37:13 ny01 sshd[11377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.125.19.85 Sep 17 12:37:15 ny01 sshd[11377]: Failed password for invalid user catherine from 113.125.19.85 port 56642 ssh2 Sep 17 12:42:33 ny01 sshd[12286]: Failed password for root from 113.125.19.85 port 40082 ssh2 |
2019-09-18 01:16:47 |
| 112.51.94.27 | attackbots | Sep 17 13:36:35 **** sshd[17050]: Did not receive identification string from 112.51.94.27 port 58896 |
2019-09-18 01:48:50 |
| 142.93.187.58 | attackbotsspam | Sep 17 13:22:48 plusreed sshd[21034]: Invalid user polycom from 142.93.187.58 ... |
2019-09-18 01:25:32 |
| 223.16.216.92 | attack | Sep 17 19:20:24 dedicated sshd[28160]: Invalid user bnq_ops from 223.16.216.92 port 46832 |
2019-09-18 01:42:52 |
| 111.230.157.219 | attackbotsspam | Sep 17 16:35:51 markkoudstaal sshd[21816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.157.219 Sep 17 16:35:53 markkoudstaal sshd[21816]: Failed password for invalid user sradido from 111.230.157.219 port 46212 ssh2 Sep 17 16:41:57 markkoudstaal sshd[22564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.157.219 |
2019-09-18 01:18:29 |