城市(city): Johannesburg
省份(region): Gauteng
国家(country): South Africa
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 172.68.42.247
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32326
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;172.68.42.247. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024121600 1800 900 604800 86400
;; Query time: 182 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 16 19:31:42 CST 2024
;; MSG SIZE rcvd: 106Host 247.42.68.172.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 247.42.68.172.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 185.173.35.57 | attackspambots | Unauthorized connection attempt detected from IP address 185.173.35.57 to port 8080 [J] |
2020-01-30 00:25:11 |
| 200.59.1.236 | attack | 2020-01-26 04:12:00 1ivYL9-0003dU-Jf SMTP connection from \(host236.200-59-1.cotelcam.net.ar\) \[200.59.1.236\]:40026 I=\[193.107.88.166\]:25 closed by DROP in ACL 2020-01-26 04:12:26 1ivYLY-0003eP-4O SMTP connection from \(host236.200-59-1.cotelcam.net.ar\) \[200.59.1.236\]:40220 I=\[193.107.88.166\]:25 closed by DROP in ACL 2020-01-26 04:12:40 1ivYLm-0003em-9d SMTP connection from \(host236.200-59-1.cotelcam.net.ar\) \[200.59.1.236\]:40330 I=\[193.107.88.166\]:25 closed by DROP in ACL ... |
2020-01-29 23:49:34 |
| 86.206.124.132 | attackbotsspam | Unauthorized connection attempt detected from IP address 86.206.124.132 to port 2220 [J] |
2020-01-30 00:06:12 |
| 77.123.20.173 | attack | Jan 29 16:43:37 debian-2gb-nbg1-2 kernel: \[2571881.541463\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=77.123.20.173 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=43209 PROTO=TCP SPT=50565 DPT=3042 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-01-29 23:49:11 |
| 200.52.66.6 | attackspambots | 2019-07-09 04:52:33 1hkgF6-00044J-3m SMTP connection from \(6.66.52.200.in-addr.arpa\) \[200.52.66.6\]:61643 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-09 04:52:48 1hkgFK-00044b-M9 SMTP connection from \(6.66.52.200.in-addr.arpa\) \[200.52.66.6\]:43974 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-09 04:52:57 1hkgFU-00044s-Ct SMTP connection from \(6.66.52.200.in-addr.arpa\) \[200.52.66.6\]:53102 I=\[193.107.88.166\]:25 closed by DROP in ACL ... |
2020-01-30 00:00:52 |
| 222.186.180.41 | attackspam | Jan 29 17:15:07 SilenceServices sshd[13282]: Failed password for root from 222.186.180.41 port 63420 ssh2 Jan 29 17:15:10 SilenceServices sshd[13282]: Failed password for root from 222.186.180.41 port 63420 ssh2 Jan 29 17:15:13 SilenceServices sshd[13282]: Failed password for root from 222.186.180.41 port 63420 ssh2 Jan 29 17:15:16 SilenceServices sshd[13282]: Failed password for root from 222.186.180.41 port 63420 ssh2 |
2020-01-30 00:26:46 |
| 178.32.221.142 | attackspam | Jan 29 04:15:50 eddieflores sshd\[27523\]: Invalid user kshirja from 178.32.221.142 Jan 29 04:15:50 eddieflores sshd\[27523\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3011648.ip-178-32-221.eu Jan 29 04:15:52 eddieflores sshd\[27523\]: Failed password for invalid user kshirja from 178.32.221.142 port 39477 ssh2 Jan 29 04:22:47 eddieflores sshd\[28390\]: Invalid user nabhith from 178.32.221.142 Jan 29 04:22:47 eddieflores sshd\[28390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3011648.ip-178-32-221.eu |
2020-01-30 00:00:00 |
| 157.44.172.127 | attack | 1580304843 - 01/29/2020 14:34:03 Host: 157.44.172.127/157.44.172.127 Port: 445 TCP Blocked |
2020-01-30 00:12:27 |
| 111.119.187.44 | attack | Lines containing failures of 111.119.187.44 (max 1000) Jan 29 14:39:06 server sshd[11866]: Connection from 111.119.187.44 port 50587 on 62.116.165.82 port 22 Jan 29 14:39:08 server sshd[11866]: Invalid user admin from 111.119.187.44 port 50587 Jan 29 14:39:09 server sshd[11866]: Connection closed by 111.119.187.44 port 50587 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=111.119.187.44 |
2020-01-30 00:18:59 |
| 124.115.21.51 | attack | Jan 29 11:36:25 firewall sshd[9814]: Invalid user syama from 124.115.21.51 Jan 29 11:36:27 firewall sshd[9814]: Failed password for invalid user syama from 124.115.21.51 port 63847 ssh2 Jan 29 11:38:56 firewall sshd[9899]: Invalid user nawang from 124.115.21.51 ... |
2020-01-29 23:42:12 |
| 159.203.201.249 | attackspambots | 46830/tcp 45188/tcp 49154/tcp... [2019-11-30/2020-01-29]53pkt,40pt.(tcp),3pt.(udp) |
2020-01-30 00:23:30 |
| 185.234.217.194 | attackbots | Jan 29 14:32:08 mail postfix/smtpd[25950]: warning: unknown[185.234.217.194]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 29 14:32:14 mail postfix/smtpd[25950]: warning: unknown[185.234.217.194]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 29 14:32:24 mail postfix/smtpd[25950]: warning: unknown[185.234.217.194]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-01-29 23:37:13 |
| 181.171.75.251 | attackbotsspam | Lines containing failures of 181.171.75.251 Jan 27 01:26:08 kmh-vmh-001-fsn05 sshd[5086]: Invalid user allan from 181.171.75.251 port 42774 Jan 27 01:26:08 kmh-vmh-001-fsn05 sshd[5086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.171.75.251 Jan 27 01:26:10 kmh-vmh-001-fsn05 sshd[5086]: Failed password for invalid user allan from 181.171.75.251 port 42774 ssh2 Jan 27 01:26:11 kmh-vmh-001-fsn05 sshd[5086]: Received disconnect from 181.171.75.251 port 42774:11: Bye Bye [preauth] Jan 27 01:26:11 kmh-vmh-001-fsn05 sshd[5086]: Disconnected from invalid user allan 181.171.75.251 port 42774 [preauth] Jan 27 01:28:19 kmh-vmh-001-fsn05 sshd[5434]: Invalid user rasa from 181.171.75.251 port 49708 Jan 27 01:28:19 kmh-vmh-001-fsn05 sshd[5434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.171.75.251 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=181.171.75.251 |
2020-01-29 23:37:48 |
| 176.100.120.28 | attackbots | 20/1/29@08:33:58: FAIL: Alarm-Network address from=176.100.120.28 ... |
2020-01-30 00:18:20 |
| 200.68.141.42 | attackspam | 2019-07-08 23:36:56 1hkbJf-0004rE-Jz SMTP connection from \(\[200.68.141.42\]\) \[200.68.141.42\]:23716 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-08 23:37:08 1hkbJq-0004rN-Sf SMTP connection from \(\[200.68.141.42\]\) \[200.68.141.42\]:27775 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-08 23:37:15 1hkbJy-0004rX-3L SMTP connection from \(\[200.68.141.42\]\) \[200.68.141.42\]:15417 I=\[193.107.88.166\]:25 closed by DROP in ACL ... |
2020-01-29 23:41:42 |