城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 164.176.55.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4871
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;164.176.55.42. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025062801 1800 900 604800 86400
;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 29 12:08:24 CST 2025
;; MSG SIZE rcvd: 106Host 42.55.176.164.in-addr.arpa not found: 2(SERVFAIL)
server can't find 164.176.55.42.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 104.41.147.212 | attackbotsspam | 20 attempts against mh-ssh on star.magehost.pro |
2019-07-29 23:17:02 |
| 45.67.14.151 | attackbots | Jul 29 15:09:58 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=45.67.14.151 DST=172.31.1.100 LEN=44 TOS=0x00 PREC=0x00 TTL=247 ID=36325 PROTO=TCP SPT=58529 DPT=3405 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-07-29 22:40:58 |
| 134.175.109.203 | attackbots | SSH/22 MH Probe, BF, Hack - |
2019-07-29 22:43:57 |
| 68.183.219.43 | attackbots | Jul 29 10:18:57 OPSO sshd\[20228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.219.43 user=root Jul 29 10:18:59 OPSO sshd\[20228\]: Failed password for root from 68.183.219.43 port 54282 ssh2 Jul 29 10:23:16 OPSO sshd\[20910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.219.43 user=root Jul 29 10:23:18 OPSO sshd\[20910\]: Failed password for root from 68.183.219.43 port 48644 ssh2 Jul 29 10:27:28 OPSO sshd\[21446\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.219.43 user=root |
2019-07-29 23:16:28 |
| 94.74.177.116 | attack | Jul 29 08:26:12 pl3server postfix/smtpd[1264410]: connect from unknown[94.74.177.116] Jul 29 08:26:15 pl3server postfix/smtpd[1264410]: warning: unknown[94.74.177.116]: SASL CRAM-MD5 authentication failed: authentication failure Jul 29 08:26:15 pl3server postfix/smtpd[1264410]: warning: unknown[94.74.177.116]: SASL PLAIN authentication failed: authentication failure Jul 29 08:26:16 pl3server postfix/smtpd[1264410]: warning: unknown[94.74.177.116]: SASL LOGIN authentication failed: authentication failure Jul 29 08:26:16 pl3server postfix/smtpd[1264410]: disconnect from unknown[94.74.177.116] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=94.74.177.116 |
2019-07-29 23:24:51 |
| 116.1.3.209 | attack | Jul 29 12:38:40 localhost sshd\[24551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.1.3.209 user=root Jul 29 12:38:42 localhost sshd\[24551\]: Failed password for root from 116.1.3.209 port 6001 ssh2 Jul 29 12:44:13 localhost sshd\[24768\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.1.3.209 user=root Jul 29 12:44:15 localhost sshd\[24768\]: Failed password for root from 116.1.3.209 port 5739 ssh2 Jul 29 12:49:50 localhost sshd\[24962\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.1.3.209 user=root ... |
2019-07-29 23:38:02 |
| 34.215.48.135 | attackbotsspam | frenzy |
2019-07-29 23:53:23 |
| 213.147.113.131 | attack | Port scan: Attack repeated for 24 hours |
2019-07-29 23:26:01 |
| 128.92.150.18 | attackbots | NAME : SPRR-128-92-241-0 CIDR : 128.92.241.0/24 SYN Flood DDoS Attack USA - California - block certain countries :) IP: 128.92.150.18 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-07-29 23:51:12 |
| 223.223.188.208 | attackbots | [Aegis] @ 2019-07-29 10:28:21 0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack |
2019-07-29 23:45:09 |
| 2400:6180:0:d1::7e8:b001 | attack | Jul 29 04:11:43 wildwolf wplogin[6822]: 2400:6180:0:d1::7e8:b001 prometheus.ngo [2019-07-29 04:11:43+0000] "POST /wp-login.php HTTP/1.1" "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "admin" "admin_2020" Jul 29 04:11:45 wildwolf wplogin[7318]: 2400:6180:0:d1::7e8:b001 prometheus.ngo [2019-07-29 04:11:45+0000] "POST /wp-login.php HTTP/1.1" "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "alina" "alina_2020" Jul 29 04:11:48 wildwolf wplogin[9843]: 2400:6180:0:d1::7e8:b001 prometheus.ngo [2019-07-29 04:11:48+0000] "POST /wp-login.php HTTP/1.1" "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "burko" "burko_2020" Jul 29 04:11:49 wildwolf wplogin[7454]: 2400:6180:0:d1::7e8:b001 prometheus.ngo [2019-07-29 04:11:49+0000] "POST /wp-login.php HTTP/1.1" "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "pavlo" "pavlo_2020" Jul 29 04:11:50 wildw........ ------------------------------ |
2019-07-29 23:44:39 |
| 151.177.130.169 | attack | Jul 29 08:32:22 cps sshd[11622]: Invalid user pi from 151.177.130.169 Jul 29 08:32:22 cps sshd[11621]: Invalid user pi from 151.177.130.169 Jul 29 08:32:22 cps sshd[11622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.177.130.169 Jul 29 08:32:22 cps sshd[11621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.177.130.169 Jul 29 08:32:23 cps sshd[11622]: Failed password for invalid user pi from 151.177.130.169 port 35620 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=151.177.130.169 |
2019-07-29 23:40:14 |
| 117.93.96.62 | attackbots | Jul 29 09:47:50 s64-1 sshd[28901]: Failed password for root from 117.93.96.62 port 53208 ssh2 Jul 29 09:52:04 s64-1 sshd[28990]: Failed password for root from 117.93.96.62 port 34492 ssh2 ... |
2019-07-29 23:13:29 |
| 115.79.88.79 | attackspam | Honeypot hit. |
2019-07-29 23:52:21 |
| 140.143.67.146 | attackspam | Jul 29 02:22:45 hostnameproxy sshd[7909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.67.146 user=r.r Jul 29 02:22:47 hostnameproxy sshd[7909]: Failed password for r.r from 140.143.67.146 port 53666 ssh2 Jul 29 02:25:57 hostnameproxy sshd[7952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.67.146 user=r.r Jul 29 02:25:59 hostnameproxy sshd[7952]: Failed password for r.r from 140.143.67.146 port 56804 ssh2 Jul 29 02:27:21 hostnameproxy sshd[7965]: Invalid user 1234 from 140.143.67.146 port 43642 Jul 29 02:27:21 hostnameproxy sshd[7965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.67.146 Jul 29 02:27:22 hostnameproxy sshd[7965]: Failed password for invalid user 1234 from 140.143.67.146 port 43642 ssh2 Jul 29 02:28:39 hostnameproxy sshd[7983]: Invalid user test123+ from 140.143.67.146 port 58680 Jul 29 02:28:39 hostname........ ------------------------------ |
2019-07-29 22:49:23 |