城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 21.11.81.47
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56963
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;21.11.81.47. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021201 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 02:03:14 CST 2025
;; MSG SIZE rcvd: 104
Host 47.81.11.21.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 47.81.11.21.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 45.136.109.34 | attackspambots | Port scan |
2019-09-12 00:42:14 |
| 91.211.248.114 | attackspam | " " |
2019-09-12 00:27:16 |
| 207.46.13.53 | attackbots | Automatic report - Banned IP Access |
2019-09-11 23:44:25 |
| 167.71.13.164 | attackspambots | firewall-block, port(s): 137/tcp |
2019-09-11 23:27:54 |
| 37.49.227.109 | attackbotsspam | 09/11/2019-12:11:13.980632 37.49.227.109 Protocol: 6 ET COMPROMISED Known Compromised or Hostile Host Traffic group 22 |
2019-09-12 00:50:04 |
| 51.38.186.182 | attackspambots | /var/log/secure-20190818:Aug 14 21:38:36 XXX sshd[50072]: Invalid user noc from 51.38.186.182 port 55014 |
2019-09-11 23:47:56 |
| 123.151.146.250 | attackbots | Sep 11 11:04:36 ny01 sshd[14684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.151.146.250 Sep 11 11:04:38 ny01 sshd[14684]: Failed password for invalid user ftptest from 123.151.146.250 port 57046 ssh2 Sep 11 11:10:27 ny01 sshd[15755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.151.146.250 |
2019-09-11 23:40:44 |
| 45.136.109.39 | attackspam | Sep 11 17:01:04 mc1 kernel: \[764629.365862\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.39 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54834 PROTO=TCP SPT=59403 DPT=7729 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 17:03:38 mc1 kernel: \[764783.347683\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.39 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=1598 PROTO=TCP SPT=59403 DPT=7747 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 17:05:24 mc1 kernel: \[764889.518580\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.39 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=5907 PROTO=TCP SPT=59403 DPT=7186 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-12 00:38:36 |
| 54.83.91.255 | attack | xmlrpc attack |
2019-09-11 23:43:52 |
| 162.144.89.205 | attackspambots | Port scan attempt detected by AWS-CCS, CTS, India |
2019-09-12 01:10:54 |
| 218.59.72.20 | attack | 2019-09-11T11:49:39.002Z CLOSE host=218.59.72.20 port=38795 fd=4 time=5023.857 bytes=8833 ... |
2019-09-11 23:37:09 |
| 118.113.177.127 | attackspambots | Lines containing failures of 118.113.177.127 Sep 11 08:07:05 jarvis sshd[9450]: Invalid user test from 118.113.177.127 port 41548 Sep 11 08:07:05 jarvis sshd[9450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.113.177.127 Sep 11 08:07:07 jarvis sshd[9450]: Failed password for invalid user test from 118.113.177.127 port 41548 ssh2 Sep 11 08:07:10 jarvis sshd[9450]: Received disconnect from 118.113.177.127 port 41548:11: Bye Bye [preauth] Sep 11 08:07:10 jarvis sshd[9450]: Disconnected from invalid user test 118.113.177.127 port 41548 [preauth] Sep 11 08:11:44 jarvis sshd[10605]: Invalid user rtest from 118.113.177.127 port 38100 Sep 11 08:11:44 jarvis sshd[10605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.113.177.127 Sep 11 08:11:46 jarvis sshd[10605]: Failed password for invalid user rtest from 118.113.177.127 port 38100 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/ |
2019-09-11 23:20:32 |
| 178.91.94.146 | attack | Unauthorised access (Sep 11) SRC=178.91.94.146 LEN=40 TTL=242 ID=42519 TCP DPT=445 WINDOW=1024 SYN |
2019-09-12 01:08:40 |
| 185.176.27.18 | attackbots | Excessive Port-Scanning |
2019-09-12 01:02:27 |
| 103.122.201.89 | attackbots | Automatic report - Port Scan Attack |
2019-09-11 23:36:27 |