城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 207.48.147.234
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53730
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;207.48.147.234. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025031401 1800 900 604800 86400
;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 15 02:16:55 CST 2025
;; MSG SIZE rcvd: 107Host 234.147.48.207.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 234.147.48.207.in-addr.arpa: SERVFAIL
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 218.92.0.139 | attackspam | Failed password for root from 218.92.0.139 port 23750 ssh2 Failed password for root from 218.92.0.139 port 23750 ssh2 Failed password for root from 218.92.0.139 port 23750 ssh2 Failed password for root from 218.92.0.139 port 23750 ssh2 Failed password for root from 218.92.0.139 port 23750 ssh2 |
2019-11-14 13:59:46 |
| 59.173.65.85 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/59.173.65.85/ CN - 1H : (737) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4134 IP : 59.173.65.85 CIDR : 59.173.0.0/17 PREFIX COUNT : 5430 UNIQUE IP COUNT : 106919680 ATTACKS DETECTED ASN4134 : 1H - 25 3H - 73 6H - 139 12H - 264 24H - 329 DateTime : 2019-11-14 05:56:15 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-14 13:41:58 |
| 144.255.6.79 | attackbotsspam | Nov 14 05:52:42 meumeu sshd[19533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.255.6.79 Nov 14 05:52:44 meumeu sshd[19533]: Failed password for invalid user sasuke from 144.255.6.79 port 10743 ssh2 Nov 14 05:56:01 meumeu sshd[19864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.255.6.79 ... |
2019-11-14 13:50:49 |
| 106.54.225.244 | attack | Nov 14 02:50:56 ws12vmsma01 sshd[23747]: Failed password for invalid user apache from 106.54.225.244 port 60696 ssh2 Nov 14 02:54:39 ws12vmsma01 sshd[24280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.225.244 user=root Nov 14 02:54:41 ws12vmsma01 sshd[24280]: Failed password for root from 106.54.225.244 port 35134 ssh2 ... |
2019-11-14 14:15:43 |
| 206.189.122.133 | attack | Nov 14 01:52:04 firewall sshd[14048]: Invalid user rossy from 206.189.122.133 Nov 14 01:52:05 firewall sshd[14048]: Failed password for invalid user rossy from 206.189.122.133 port 50220 ssh2 Nov 14 01:55:35 firewall sshd[14078]: Invalid user quent from 206.189.122.133 ... |
2019-11-14 14:08:17 |
| 104.131.13.199 | attack | Nov 14 06:56:07 MK-Soft-VM3 sshd[29938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.13.199 Nov 14 06:56:09 MK-Soft-VM3 sshd[29938]: Failed password for invalid user rooooot from 104.131.13.199 port 42790 ssh2 ... |
2019-11-14 14:03:21 |
| 169.48.82.51 | attack | Nov 14 06:39:06 localhost sshd\[23215\]: Invalid user leah from 169.48.82.51 port 41236 Nov 14 06:39:06 localhost sshd\[23215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=169.48.82.51 Nov 14 06:39:08 localhost sshd\[23215\]: Failed password for invalid user leah from 169.48.82.51 port 41236 ssh2 |
2019-11-14 13:58:04 |
| 109.105.227.242 | attack | Automatic report - Banned IP Access |
2019-11-14 13:59:03 |
| 110.77.148.62 | attack | IMAP |
2019-11-14 13:51:51 |
| 220.130.222.156 | attackbotsspam | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.130.222.156 user=root Failed password for root from 220.130.222.156 port 60472 ssh2 Invalid user qwert from 220.130.222.156 port 40140 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.130.222.156 Failed password for invalid user qwert from 220.130.222.156 port 40140 ssh2 |
2019-11-14 14:04:37 |
| 81.22.45.116 | attackspam | Nov 14 06:57:19 h2177944 kernel: \[6586553.419514\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.116 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=41259 PROTO=TCP SPT=40333 DPT=64822 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 14 07:01:50 h2177944 kernel: \[6586824.824063\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.116 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=43465 PROTO=TCP SPT=40333 DPT=64831 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 14 07:02:07 h2177944 kernel: \[6586841.087485\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.116 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=24516 PROTO=TCP SPT=40333 DPT=64850 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 14 07:03:33 h2177944 kernel: \[6586927.810042\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.116 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=34212 PROTO=TCP SPT=40333 DPT=64801 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 14 07:04:25 h2177944 kernel: \[6586979.437407\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.116 DST=85.214.117.9 |
2019-11-14 14:14:04 |
| 185.153.199.133 | attack | Port scan |
2019-11-14 13:41:26 |
| 64.6.64.6 | attack | 1412/udp 61012/udp 8224/udp... [2019-09-13/11-12]516pkt,43pt.(udp) |
2019-11-14 14:07:00 |
| 185.220.100.254 | attackspam | fail2ban honeypot |
2019-11-14 13:46:30 |
| 203.129.207.4 | attack | Invalid user test from 203.129.207.4 port 42586 |
2019-11-14 14:19:36 |