城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.145.209.244
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52169
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;157.145.209.244. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021300 1800 900 604800 86400
;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 17:47:25 CST 2025
;; MSG SIZE rcvd: 108Host 244.209.145.157.in-addr.arpa not found: 2(SERVFAIL)
server can't find 157.145.209.244.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 103.62.153.222 | attack | php WP PHPmyadamin ABUSE blocked for 12h |
2020-09-16 23:46:23 |
| 54.84.185.193 | attackspam | 2020-09-14 20:14:33 server sshd[94432]: Failed password for invalid user root from 54.84.185.193 port 33252 ssh2 |
2020-09-16 23:40:48 |
| 222.240.223.85 | attack | SSH login attempts. |
2020-09-16 23:38:54 |
| 120.56.118.128 | attackspam | port scan and connect, tcp 23 (telnet) |
2020-09-17 00:11:53 |
| 122.152.205.92 | attack | 122.152.205.92 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 16 08:21:51 server sshd[22081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.108.50 user=root Sep 16 08:19:59 server sshd[21935]: Failed password for root from 122.152.205.92 port 34672 ssh2 Sep 16 08:16:48 server sshd[21593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.203.12 user=root Sep 16 08:16:51 server sshd[21593]: Failed password for root from 139.99.203.12 port 49176 ssh2 Sep 16 08:15:33 server sshd[21360]: Failed password for root from 49.229.69.4 port 63028 ssh2 Sep 16 08:19:56 server sshd[21935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.152.205.92 user=root IP Addresses Blocked: 189.8.108.50 (BR/Brazil/-) |
2020-09-17 00:06:31 |
| 201.102.59.240 | attackspambots | Sep 16 17:26:09 ns382633 sshd\[20281\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.102.59.240 user=root Sep 16 17:26:11 ns382633 sshd\[20281\]: Failed password for root from 201.102.59.240 port 54242 ssh2 Sep 16 17:30:11 ns382633 sshd\[20932\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.102.59.240 user=root Sep 16 17:30:13 ns382633 sshd\[20932\]: Failed password for root from 201.102.59.240 port 43428 ssh2 Sep 16 17:32:18 ns382633 sshd\[21250\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.102.59.240 user=root |
2020-09-17 00:05:50 |
| 113.161.204.171 | attackspambots | 1600189144 - 09/15/2020 18:59:04 Host: 113.161.204.171/113.161.204.171 Port: 445 TCP Blocked |
2020-09-16 23:43:45 |
| 106.12.151.250 | attack | Sep 16 03:42:35 Tower sshd[34082]: Connection from 106.12.151.250 port 51708 on 192.168.10.220 port 22 rdomain "" Sep 16 03:42:38 Tower sshd[34082]: Failed password for root from 106.12.151.250 port 51708 ssh2 Sep 16 03:42:38 Tower sshd[34082]: Received disconnect from 106.12.151.250 port 51708:11: Bye Bye [preauth] Sep 16 03:42:38 Tower sshd[34082]: Disconnected from authenticating user root 106.12.151.250 port 51708 [preauth] |
2020-09-16 23:36:43 |
| 64.225.102.125 | attackbots | Sep 16 09:06:59 ws24vmsma01 sshd[77342]: Failed password for root from 64.225.102.125 port 56956 ssh2 ... |
2020-09-16 23:49:56 |
| 165.22.215.192 | attack | Invalid user rosenblum from 165.22.215.192 port 50804 |
2020-09-16 23:35:40 |
| 111.229.120.31 | attackbotsspam | 111.229.120.31 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 16 08:03:25 server2 sshd[9713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.102.59.240 user=root Sep 16 08:03:27 server2 sshd[9762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.120.31 user=root Sep 16 08:02:37 server2 sshd[9115]: Failed password for root from 52.82.61.24 port 34232 ssh2 Sep 16 08:02:55 server2 sshd[9259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.37.75.157 user=root Sep 16 08:02:57 server2 sshd[9259]: Failed password for root from 70.37.75.157 port 53330 ssh2 IP Addresses Blocked: 201.102.59.240 (MX/Mexico/-) |
2020-09-17 00:10:01 |
| 159.89.194.103 | attackbots | Sep 16 15:27:21 minden010 sshd[28600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.194.103 Sep 16 15:27:23 minden010 sshd[28600]: Failed password for invalid user neske from 159.89.194.103 port 39782 ssh2 Sep 16 15:30:05 minden010 sshd[29487]: Failed password for root from 159.89.194.103 port 48654 ssh2 ... |
2020-09-17 00:11:14 |
| 49.235.129.226 | attackbotsspam | CMS (WordPress or Joomla) login attempt. |
2020-09-17 00:14:16 |
| 182.52.70.202 | attack | Sep 16 05:44:33 r.ca sshd[7656]: Failed password for root from 182.52.70.202 port 38404 ssh2 |
2020-09-16 23:53:21 |
| 141.98.10.213 | attack | Invalid user admin from 141.98.10.213 port 46505 |
2020-09-16 23:57:20 |