城市(city): unknown
省份(region): unknown
国家(country): Uganda
运营商(isp): Airtel
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.229.81.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17240
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;154.229.81.117. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025011800 1800 900 604800 86400
;; Query time: 42 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 18 14:39:22 CST 2025
;; MSG SIZE rcvd: 107
117.81.229.154.in-addr.arpa domain name pointer 117-81-229-154.r.airtel.ug.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
117.81.229.154.in-addr.arpa name = 117-81-229-154.r.airtel.ug.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 134.209.26.166 | attack | 134.209.26.166 - - [02/Jul/2019:15:52:13 +0200] "GET /wp-login.php HTTP/1.1" 200 4405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.26.166 - - [02/Jul/2019:15:52:14 +0200] "POST /wp-login.php HTTP/1.1" 200 4405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.26.166 - - [02/Jul/2019:15:52:14 +0200] "GET /wp-login.php HTTP/1.1" 200 4405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.26.166 - - [02/Jul/2019:15:52:14 +0200] "POST /wp-login.php HTTP/1.1" 200 4405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.26.166 - - [02/Jul/2019:15:52:14 +0200] "GET /wp-login.php HTTP/1.1" 200 4405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.26.166 - - [02/Jul/2019:15:52:15 +0200] "POST /wp-login.php HTTP/1.1" 200 4405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-07-03 01:08:50 |
| 149.129.50.37 | attack | Unauthorised access (Jul 2) SRC=149.129.50.37 LEN=40 PREC=0x20 TTL=240 ID=54321 TCP DPT=8080 WINDOW=65535 SYN |
2019-07-03 00:46:15 |
| 182.74.219.150 | attackbotsspam | Jul 2 16:22:58 mail sshd\[5514\]: Invalid user ocadmin from 182.74.219.150 port 58875 Jul 2 16:22:58 mail sshd\[5514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.74.219.150 Jul 2 16:23:00 mail sshd\[5514\]: Failed password for invalid user ocadmin from 182.74.219.150 port 58875 ssh2 Jul 2 16:25:31 mail sshd\[5869\]: Invalid user tftpd from 182.74.219.150 port 42641 Jul 2 16:25:31 mail sshd\[5869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.74.219.150 |
2019-07-03 00:45:20 |
| 190.128.159.118 | attackbots | $f2bV_matches |
2019-07-03 01:15:09 |
| 189.58.98.21 | attackspam | Mar 4 01:10:02 motanud sshd\[21034\]: Invalid user administrator from 189.58.98.21 port 41406 Mar 4 01:10:02 motanud sshd\[21034\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.58.98.21 Mar 4 01:10:04 motanud sshd\[21034\]: Failed password for invalid user administrator from 189.58.98.21 port 41406 ssh2 |
2019-07-03 00:33:14 |
| 116.1.1.165 | attackspambots | Autoban 116.1.1.165 ABORTED AUTH |
2019-07-03 01:11:49 |
| 92.118.161.45 | attack | Port scan: Attack repeated for 24 hours |
2019-07-03 00:41:28 |
| 196.27.127.61 | attackbotsspam | 2019-07-02T17:55:54.231206cavecanem sshd[31531]: Invalid user wu from 196.27.127.61 port 38730 2019-07-02T17:55:54.238399cavecanem sshd[31531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.27.127.61 2019-07-02T17:55:54.231206cavecanem sshd[31531]: Invalid user wu from 196.27.127.61 port 38730 2019-07-02T17:55:56.204551cavecanem sshd[31531]: Failed password for invalid user wu from 196.27.127.61 port 38730 ssh2 2019-07-02T17:58:52.686446cavecanem sshd[32338]: Invalid user chef from 196.27.127.61 port 51487 2019-07-02T17:58:52.688858cavecanem sshd[32338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.27.127.61 2019-07-02T17:58:52.686446cavecanem sshd[32338]: Invalid user chef from 196.27.127.61 port 51487 2019-07-02T17:58:54.424665cavecanem sshd[32338]: Failed password for invalid user chef from 196.27.127.61 port 51487 ssh2 2019-07-02T18:01:50.895992cavecanem sshd[757]: Invalid user budi from 19 ... |
2019-07-03 00:47:27 |
| 212.83.189.253 | attack | firewall-block, port(s): 5038/tcp |
2019-07-03 01:05:05 |
| 18.162.56.184 | attackspambots | Honeypot hit. |
2019-07-03 00:56:56 |
| 193.112.72.180 | attack | 2019-07-02T13:58:13.525489abusebot-4.cloudsearch.cf sshd\[31314\]: Invalid user lois from 193.112.72.180 port 36892 |
2019-07-03 00:37:26 |
| 210.242.157.12 | attack | Jul 2 16:56:03 * sshd[29525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.242.157.12 Jul 2 16:56:05 * sshd[29525]: Failed password for invalid user deploy from 210.242.157.12 port 56320 ssh2 |
2019-07-03 01:13:11 |
| 111.205.247.2 | attackspambots | Jul 2 15:46:12 mail sshd\[31016\]: Invalid user nithya from 111.205.247.2 port 50102 Jul 2 15:46:12 mail sshd\[31016\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.205.247.2 Jul 2 15:46:15 mail sshd\[31016\]: Failed password for invalid user nithya from 111.205.247.2 port 50102 ssh2 Jul 2 15:47:16 mail sshd\[31179\]: Invalid user user7 from 111.205.247.2 port 61674 Jul 2 15:47:16 mail sshd\[31179\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.205.247.2 |
2019-07-03 00:46:52 |
| 118.25.128.19 | attack | Jul 2 15:54:25 core01 sshd\[15760\]: Invalid user deployer from 118.25.128.19 port 40876 Jul 2 15:54:25 core01 sshd\[15760\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.128.19 ... |
2019-07-03 01:13:37 |
| 49.249.243.235 | attackbots | Jul 2 18:03:15 localhost sshd\[7337\]: Invalid user nrpe from 49.249.243.235 port 45345 Jul 2 18:03:15 localhost sshd\[7337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.249.243.235 Jul 2 18:03:17 localhost sshd\[7337\]: Failed password for invalid user nrpe from 49.249.243.235 port 45345 ssh2 |
2019-07-03 00:50:54 |