城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 196.54.27.217
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30183
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;196.54.27.217. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021701 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 09:52:39 CST 2025
;; MSG SIZE rcvd: 106
Host 217.27.54.196.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 217.27.54.196.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 218.92.0.133 | attackbotsspam | Sep 5 01:19:27 dignus sshd[3238]: Failed password for root from 218.92.0.133 port 37459 ssh2 Sep 5 01:19:31 dignus sshd[3238]: Failed password for root from 218.92.0.133 port 37459 ssh2 Sep 5 01:19:35 dignus sshd[3238]: Failed password for root from 218.92.0.133 port 37459 ssh2 Sep 5 01:19:39 dignus sshd[3238]: Failed password for root from 218.92.0.133 port 37459 ssh2 Sep 5 01:19:42 dignus sshd[3238]: Failed password for root from 218.92.0.133 port 37459 ssh2 ... |
2020-09-05 16:20:22 |
| 148.72.158.151 | attackspambots | port |
2020-09-05 17:02:37 |
| 120.92.45.102 | attackbots | DATE:2020-09-05 08:59:59,IP:120.92.45.102,MATCHES:10,PORT:ssh |
2020-09-05 16:31:29 |
| 122.51.167.108 | attack | Bruteforce detected by fail2ban |
2020-09-05 16:46:57 |
| 91.149.213.154 | attackbotsspam | Hi, Hi, The IP 91.149.213.154 has just been banned by after 5 attempts against postfix. Here is more information about 91.149.213.154 : % This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Condhostnameions. % See hxxp://www.ripe.net/db/support/db-terms-condhostnameions.pdf % Note: this output has been filtered. % To receive output for a database update, use the "-B" flag. % Information related to '91.149.213.0 - 91.149.213.255' % x@x inetnum: 91.149.213.0 - 91.149.213.255 org: ORG-IB111-RIPE netname: IPV4-BUYERS-NET country: PL admin-c: ACRO23711-RIPE tech-c: ACRO23711-RIPE mnt-domains: MARTON-MNT mnt-domains: IPV4BUYERS mnt-routes: MARTON-MNT mnt-routes: IPV4MNT status: ASSIGNED PA mnt-by: MARTON-MNT created: 2007-05-29T09:22:33Z last-modified: 2020-07-02T08:54:59Z source: RIPE organisation: ........ ------------------------------ |
2020-09-05 16:51:43 |
| 159.65.12.43 | attack | Sep 5 04:25:43 george sshd[9959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.12.43 user=root Sep 5 04:25:45 george sshd[9959]: Failed password for root from 159.65.12.43 port 48650 ssh2 Sep 5 04:30:18 george sshd[10060]: Invalid user sai from 159.65.12.43 port 55494 Sep 5 04:30:18 george sshd[10060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.12.43 Sep 5 04:30:21 george sshd[10060]: Failed password for invalid user sai from 159.65.12.43 port 55494 ssh2 ... |
2020-09-05 16:33:28 |
| 182.74.25.246 | attack | Sep 5 09:42:03 h2646465 sshd[20864]: Invalid user terry from 182.74.25.246 Sep 5 09:42:03 h2646465 sshd[20864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.74.25.246 Sep 5 09:42:03 h2646465 sshd[20864]: Invalid user terry from 182.74.25.246 Sep 5 09:42:06 h2646465 sshd[20864]: Failed password for invalid user terry from 182.74.25.246 port 29565 ssh2 Sep 5 09:45:53 h2646465 sshd[21462]: Invalid user ftp from 182.74.25.246 Sep 5 09:45:53 h2646465 sshd[21462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.74.25.246 Sep 5 09:45:53 h2646465 sshd[21462]: Invalid user ftp from 182.74.25.246 Sep 5 09:45:55 h2646465 sshd[21462]: Failed password for invalid user ftp from 182.74.25.246 port 30585 ssh2 Sep 5 09:48:52 h2646465 sshd[21573]: Invalid user sergey from 182.74.25.246 ... |
2020-09-05 16:56:08 |
| 1.180.230.98 | attack | Honeypot attack, port: 5555, PTR: PTR record not found |
2020-09-05 16:21:41 |
| 72.19.13.150 | attack | 2020-09-04 11:42:02.635046-0500 localhost smtpd[27340]: NOQUEUE: reject: RCPT from mail-a.webstudioten.com[72.19.13.150]: 554 5.7.1 Service unavailable; Client host [72.19.13.150] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBL494153; from= |
2020-09-05 16:54:38 |
| 212.34.20.102 | attackspam | Sep 4 18:48:25 mellenthin postfix/smtpd[32476]: NOQUEUE: reject: RCPT from unknown[212.34.20.102]: 554 5.7.1 Service unavailable; Client host [212.34.20.102] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/212.34.20.102; from= |
2020-09-05 16:28:25 |
| 103.80.49.136 | attackbots | Port Scan ... |
2020-09-05 17:01:31 |
| 1.52.220.68 | attackspam | Brute Force |
2020-09-05 16:40:16 |
| 65.155.30.101 | attack | Automatic report - Banned IP Access |
2020-09-05 16:43:07 |
| 167.71.72.70 | attackbots | Invalid user tester from 167.71.72.70 port 59404 |
2020-09-05 16:23:58 |
| 186.167.249.219 | attackbotsspam | Sep 4 18:48:20 mellenthin postfix/smtpd[31060]: NOQUEUE: reject: RCPT from unknown[186.167.249.219]: 554 5.7.1 Service unavailable; Client host [186.167.249.219] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/186.167.249.219; from= |
2020-09-05 16:36:11 |