城市(city): unknown
省份(region): unknown
国家(country): Iran (ISLAMIC Republic Of)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 185.50.39.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62022
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;185.50.39.142. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021801 1800 900 604800 86400
;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 04:01:35 CST 2022
;; MSG SIZE rcvd: 106142.39.50.185.in-addr.arpa domain name pointer lh052.irandns.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
142.39.50.185.in-addr.arpa name = lh052.irandns.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 219.240.99.110 | attackspam | Aug 6 05:16:00 localhost sshd[59078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.240.99.110 user=root Aug 6 05:16:02 localhost sshd[59078]: Failed password for root from 219.240.99.110 port 35834 ssh2 Aug 6 05:20:28 localhost sshd[59454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.240.99.110 user=root Aug 6 05:20:30 localhost sshd[59454]: Failed password for root from 219.240.99.110 port 45996 ssh2 Aug 6 05:24:55 localhost sshd[59800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.240.99.110 user=root Aug 6 05:24:57 localhost sshd[59800]: Failed password for root from 219.240.99.110 port 56164 ssh2 ... |
2020-08-06 13:39:29 |
| 192.99.4.59 | attack | 192.99.4.59 - - [06/Aug/2020:06:52:01 +0100] "POST /wp-login.php HTTP/1.1" 200 5864 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 192.99.4.59 - - [06/Aug/2020:06:53:18 +0100] "POST /wp-login.php HTTP/1.1" 200 5864 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 192.99.4.59 - - [06/Aug/2020:06:55:47 +0100] "POST /wp-login.php HTTP/1.1" 200 5864 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" ... |
2020-08-06 13:57:19 |
| 121.28.69.85 | attack | Aug 6 10:39:52 gw1 sshd[15260]: Failed password for root from 121.28.69.85 port 54384 ssh2 ... |
2020-08-06 13:46:35 |
| 63.82.54.132 | attack | Aug 6 07:09:58 online-web-1 postfix/smtpd[257749]: connect from circa.huzeshoes.com[63.82.54.132] Aug x@x Aug 6 07:10:04 online-web-1 postfix/smtpd[257749]: disconnect from circa.huzeshoes.com[63.82.54.132] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 Aug 6 07:10:06 online-web-1 postfix/smtpd[253928]: connect from circa.huzeshoes.com[63.82.54.132] Aug x@x Aug 6 07:10:11 online-web-1 postfix/smtpd[253928]: disconnect from circa.huzeshoes.com[63.82.54.132] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 Aug 6 07:13:06 online-web-1 postfix/smtpd[256525]: connect from circa.huzeshoes.com[63.82.54.132] Aug x@x Aug 6 07:13:12 online-web-1 postfix/smtpd[256525]: disconnect from circa.huzeshoes.com[63.82.54.132] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 Aug 6 07:13:34 online-web-1 postfix/smtpd[253928]: connect from circa.huzeshoes.com[63.82.54.132] Aug x@x Aug 6 07:13:39 online-web-1 postfix/smtpd[253928]: disconnect from circa.hu........ ------------------------------- |
2020-08-06 13:27:52 |
| 59.120.227.134 | attack | Aug 5 19:16:12 sachi sshd\[9489\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.120.227.134 user=root Aug 5 19:16:14 sachi sshd\[9489\]: Failed password for root from 59.120.227.134 port 47006 ssh2 Aug 5 19:20:41 sachi sshd\[9859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.120.227.134 user=root Aug 5 19:20:43 sachi sshd\[9859\]: Failed password for root from 59.120.227.134 port 58966 ssh2 Aug 5 19:25:03 sachi sshd\[10256\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.120.227.134 user=root |
2020-08-06 13:29:55 |
| 145.239.87.35 | attack | $f2bV_matches |
2020-08-06 13:35:52 |
| 177.22.35.126 | attackbotsspam | *Port Scan* detected from 177.22.35.126 (BR/Brazil/Ceará/Fortaleza (Joaquim Távora)/-). 4 hits in the last 225 seconds |
2020-08-06 13:26:08 |
| 14.183.117.174 | attackspam | Host Scan |
2020-08-06 13:28:38 |
| 66.249.64.89 | attackspambots | 404 NOT FOUND |
2020-08-06 13:29:36 |
| 222.186.180.130 | attack | 08/06/2020-01:11:04.238131 222.186.180.130 Protocol: 6 ET SCAN Potential SSH Scan |
2020-08-06 13:21:18 |
| 14.241.245.179 | attackbots | Aug 6 01:15:33 ny01 sshd[19417]: Failed password for root from 14.241.245.179 port 59040 ssh2 Aug 6 01:20:16 ny01 sshd[19971]: Failed password for root from 14.241.245.179 port 41920 ssh2 |
2020-08-06 13:40:40 |
| 79.78.3.245 | attack | Automatic report - Banned IP Access |
2020-08-06 13:38:39 |
| 182.216.245.188 | attackspam | "$f2bV_matches" |
2020-08-06 13:37:15 |
| 104.131.231.109 | attackbots | Aug 5 19:17:13 auw2 sshd\[22860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.231.109 user=root Aug 5 19:17:15 auw2 sshd\[22860\]: Failed password for root from 104.131.231.109 port 52710 ssh2 Aug 5 19:21:07 auw2 sshd\[23202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.231.109 user=root Aug 5 19:21:09 auw2 sshd\[23202\]: Failed password for root from 104.131.231.109 port 36042 ssh2 Aug 5 19:25:01 auw2 sshd\[23513\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.231.109 user=root |
2020-08-06 13:27:24 |
| 40.115.242.24 | attack | Aug 5 23:54:19 mail sshd\[32515\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.115.242.24 user=root ... |
2020-08-06 13:19:28 |