城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 170.241.42.36
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3109
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;170.241.42.36. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025011500 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 15 14:26:04 CST 2025
;; MSG SIZE rcvd: 106
Host 36.42.241.170.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 36.42.241.170.in-addr.arpa: SERVFAIL
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 92.119.160.125 | attackbots | firewall-block, port(s): 11210/tcp, 11222/tcp, 11241/tcp, 11249/tcp, 11333/tcp, 11349/tcp |
2019-08-17 10:34:07 |
| 88.208.244.171 | attackbotsspam | xmlrpc attack |
2019-08-17 10:34:36 |
| 185.234.218.16 | attackspam | 3389BruteforceIDS |
2019-08-17 09:55:41 |
| 61.57.88.55 | attack | Telnet Server BruteForce Attack |
2019-08-17 10:16:36 |
| 189.121.19.7 | attackbotsspam | 3389BruteforceIDS |
2019-08-17 09:52:48 |
| 40.117.135.57 | attackbots | Aug 16 14:40:06 php1 sshd\[13822\]: Invalid user ajeet from 40.117.135.57 Aug 16 14:40:06 php1 sshd\[13822\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.117.135.57 Aug 16 14:40:09 php1 sshd\[13822\]: Failed password for invalid user ajeet from 40.117.135.57 port 41900 ssh2 Aug 16 14:44:59 php1 sshd\[14348\]: Invalid user iris from 40.117.135.57 Aug 16 14:44:59 php1 sshd\[14348\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.117.135.57 |
2019-08-17 09:52:31 |
| 189.203.230.84 | attackbots | Unauthorized connection attempt from IP address 189.203.230.84 on Port 445(SMB) |
2019-08-17 10:28:56 |
| 129.144.180.112 | attackbots | Aug 17 03:42:23 lnxmail61 sshd[12817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.144.180.112 Aug 17 03:42:25 lnxmail61 sshd[12817]: Failed password for invalid user test from 129.144.180.112 port 12693 ssh2 Aug 17 03:47:31 lnxmail61 sshd[13890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.144.180.112 |
2019-08-17 10:16:05 |
| 175.205.113.249 | attack | Aug 17 03:20:36 XXX sshd[32063]: Invalid user ofsaa from 175.205.113.249 port 53146 |
2019-08-17 10:12:16 |
| 47.106.177.124 | attack | : |
2019-08-17 10:18:23 |
| 112.199.233.206 | attackspam | firewall-block, port(s): 21/tcp, 22/tcp, 80/tcp, 8080/tcp |
2019-08-17 10:28:27 |
| 41.33.12.34 | attackbots | Unauthorized connection attempt from IP address 41.33.12.34 on Port 445(SMB) |
2019-08-17 10:14:41 |
| 185.176.27.98 | attack | firewall-block, port(s): 26380/tcp, 26483/tcp |
2019-08-17 10:15:09 |
| 167.250.31.18 | attackspam | Aug 16 16:01:17 localhost kernel: [17229871.091842] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=167.250.31.18 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=39595 PROTO=TCP SPT=57871 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 16 16:01:17 localhost kernel: [17229871.091870] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=167.250.31.18 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=39595 PROTO=TCP SPT=57871 DPT=445 SEQ=3911973736 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 OPT (020405A0) Aug 16 16:01:17 localhost kernel: [17229871.100783] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=167.250.31.18 DST=[mungedIP2] LEN=44 TOS=0x00 PREC=0x00 TTL=243 ID=39595 PROTO=TCP SPT=57871 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 16 16:01:17 localhost kernel: [17229871.100792] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=167.250.31.18 DST=[mungedIP2] LEN= |
2019-08-17 09:59:18 |
| 207.154.194.145 | attack | Aug 16 15:48:34 wbs sshd\[11637\]: Invalid user nexus from 207.154.194.145 Aug 16 15:48:34 wbs sshd\[11637\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.194.145 Aug 16 15:48:37 wbs sshd\[11637\]: Failed password for invalid user nexus from 207.154.194.145 port 49896 ssh2 Aug 16 15:53:44 wbs sshd\[12065\]: Invalid user life from 207.154.194.145 Aug 16 15:53:44 wbs sshd\[12065\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.194.145 |
2019-08-17 09:54:29 |