城市(city): unknown
省份(region): unknown
国家(country): United Kingdom
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 160.104.149.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20629
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;160.104.149.142. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025031600 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 16 16:35:31 CST 2025
;; MSG SIZE rcvd: 108b'Host 142.149.104.160.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 160.104.149.142.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 112.30.117.22 | attackbots | Jun 23 14:57:58 *** sshd[22445]: Failed password for invalid user jeanmarc from 112.30.117.22 port 34566 ssh2 |
2019-06-24 08:33:32 |
| 14.55.204.70 | attackspam | Jun 16 18:30:44 wp sshd[4625]: Bad protocol version identification '' from 14.55.204.70 port 60944 Jun 16 18:31:15 wp sshd[4626]: Invalid user support from 14.55.204.70 Jun 16 18:31:17 wp sshd[4626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.55.204.70 Jun 16 18:31:19 wp sshd[4626]: Failed password for invalid user support from 14.55.204.70 port 39282 ssh2 Jun 16 18:31:22 wp sshd[4626]: Connection closed by 14.55.204.70 [preauth] Jun 16 18:31:55 wp sshd[4630]: Invalid user ubnt from 14.55.204.70 Jun 16 18:31:57 wp sshd[4630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.55.204.70 Jun 16 18:31:59 wp sshd[4630]: Failed password for invalid user ubnt from 14.55.204.70 port 44102 ssh2 Jun 16 18:32:02 wp sshd[4630]: Connection closed by 14.55.204.70 [preauth] Jun 16 18:32:26 wp sshd[4632]: Invalid user cisco from 14.55.204.70 Jun 16 18:32:29 wp sshd[4632]: pam_unix(sshd:auth): aut........ ------------------------------- |
2019-06-24 08:44:46 |
| 185.84.180.48 | attack | 185.84.180.48 - - \[23/Jun/2019:22:01:21 +0200\] "GET /wp-login.php HTTP/1.1" 200 1256 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 185.84.180.48 - - \[23/Jun/2019:22:01:21 +0200\] "POST /wp-login.php HTTP/1.1" 200 1651 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 185.84.180.48 - - \[23/Jun/2019:22:01:22 +0200\] "GET /wp-login.php HTTP/1.1" 200 1256 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 185.84.180.48 - - \[23/Jun/2019:22:01:22 +0200\] "POST /wp-login.php HTTP/1.1" 200 1629 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 185.84.180.48 - - \[23/Jun/2019:22:01:23 +0200\] "GET /wp-login.php HTTP/1.1" 200 1256 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 185.84.180.48 - - \[23/Jun/2019:22:01:23 +0200\] "POST /wp-login.php HTTP/1.1" 200 1626 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) |
2019-06-24 08:04:12 |
| 59.144.137.186 | attack | Jun 24 07:35:52 itv-usvr-02 sshd[5484]: Invalid user support from 59.144.137.186 port 41761 Jun 24 07:35:52 itv-usvr-02 sshd[5484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.144.137.186 Jun 24 07:35:52 itv-usvr-02 sshd[5484]: Invalid user support from 59.144.137.186 port 41761 Jun 24 07:35:54 itv-usvr-02 sshd[5484]: Failed password for invalid user support from 59.144.137.186 port 41761 ssh2 Jun 24 07:36:11 itv-usvr-02 sshd[5488]: Invalid user cisco from 59.144.137.186 port 48783 |
2019-06-24 08:48:07 |
| 189.91.4.237 | attackspam | failed_logins |
2019-06-24 08:15:42 |
| 119.55.77.86 | attackspam | firewall-block, port(s): 23/tcp |
2019-06-24 08:44:15 |
| 86.241.250.150 | attackspambots | SSH Bruteforce |
2019-06-24 08:18:55 |
| 84.54.153.49 | attackspambots | Unauthorised access (Jun 23) SRC=84.54.153.49 LEN=40 PREC=0x40 TTL=245 ID=49523 DF TCP DPT=8080 WINDOW=14600 SYN |
2019-06-24 08:17:28 |
| 145.239.88.31 | attackspambots | [munged]::80 145.239.88.31 - - [23/Jun/2019:22:52:21 +0200] "POST /[munged]: HTTP/1.1" 200 1779 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::80 145.239.88.31 - - [23/Jun/2019:22:52:22 +0200] "POST /[munged]: HTTP/1.1" 200 2064 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-06-24 08:05:05 |
| 157.33.29.136 | attackspam | Unauthorised access (Jun 23) SRC=157.33.29.136 LEN=64 TTL=245 ID=25436 DF TCP DPT=21 WINDOW=4380 SYN |
2019-06-24 08:00:19 |
| 27.254.34.181 | attackspambots | 19/6/23@16:02:51: FAIL: Alarm-Intrusion address from=27.254.34.181 ... |
2019-06-24 07:57:55 |
| 85.25.117.53 | attackspam | firewall-block, port(s): 6379/tcp |
2019-06-24 08:48:37 |
| 199.249.230.100 | attackspambots | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.249.230.100 user=root Failed password for root from 199.249.230.100 port 64938 ssh2 Failed password for root from 199.249.230.100 port 64938 ssh2 Failed password for root from 199.249.230.100 port 64938 ssh2 Failed password for root from 199.249.230.100 port 64938 ssh2 |
2019-06-24 08:40:37 |
| 117.34.73.162 | attack | Jun 22 19:20:06 colo1 sshd[28473]: Bad protocol version identification '' from 117.34.73.162 port 53574 Jun 22 19:20:12 colo1 sshd[28474]: Failed password for invalid user support from 117.34.73.162 port 54184 ssh2 Jun 22 19:20:12 colo1 sshd[28474]: Connection closed by 117.34.73.162 [preauth] Jun 22 19:20:16 colo1 sshd[28476]: Failed password for invalid user ubnt from 117.34.73.162 port 59936 ssh2 Jun 22 19:20:17 colo1 sshd[28476]: Connection closed by 117.34.73.162 [preauth] Jun 22 19:20:23 colo1 sshd[28478]: Failed password for invalid user cisco from 117.34.73.162 port 35810 ssh2 Jun 22 19:20:23 colo1 sshd[28478]: Connection closed by 117.34.73.162 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.34.73.162 |
2019-06-24 08:06:38 |
| 92.242.86.245 | attackbots | spam in wordpress comments: Stevenhindy site-znatomstv.na-chas-muzh.ru/admin lukooms24@gmail.com |
2019-06-24 08:21:32 |