城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 21.51.18.160
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2315
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;21.51.18.160. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021300 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 20:46:22 CST 2025
;; MSG SIZE rcvd: 105Host 160.18.51.21.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 160.18.51.21.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 120.52.152.17 | attackbots | firewall-block, port(s): 162/udp, 2123/udp, 2424/udp, 30313/udp |
2019-10-04 16:21:12 |
| 49.236.214.127 | attack | Oct 2 18:53:50 pl3server sshd[4141102]: Invalid user admin from 49.236.214.127 Oct 2 18:53:50 pl3server sshd[4141102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.236.214.127 Oct 2 18:53:53 pl3server sshd[4141102]: Failed password for invalid user admin from 49.236.214.127 port 36501 ssh2 Oct 2 18:53:53 pl3server sshd[4141102]: Connection closed by 49.236.214.127 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.236.214.127 |
2019-10-04 16:01:16 |
| 138.36.96.46 | attackspambots | Oct 4 10:27:57 vps691689 sshd[20125]: Failed password for root from 138.36.96.46 port 42016 ssh2 Oct 4 10:33:31 vps691689 sshd[20255]: Failed password for root from 138.36.96.46 port 54046 ssh2 ... |
2019-10-04 16:41:30 |
| 138.99.103.229 | attackbots | Lines containing failures of 138.99.103.229 Oct 2 04:31:38 omfg postfix/smtpd[14767]: connect from 229-103-99-138.schmhostnamezinformatica.com.py[138.99.103.229] Oct x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=138.99.103.229 |
2019-10-04 16:24:44 |
| 189.175.247.67 | attack | 189.175.247.67 - - [04/Oct/2019:05:52:04 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 189.175.247.67 - - [04/Oct/2019:05:52:31 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 189.175.247.67 - - [04/Oct/2019:05:53:39 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 189.175.247.67 - - [04/Oct/2019:05:53:39 +0200] "POST /wp-login.php HTTP/1.1" 200 1613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 189.175.247.67 - - [04/Oct/2019:05:53:40 +0200] "POST /wp-login.php HTTP/1.1" 200 1622 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 189.175.247.67 - - [04/Oct/2019:05:53:41 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-10-04 16:25:59 |
| 185.176.27.54 | attackbots | 10/04/2019-08:16:43.598047 185.176.27.54 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-04 16:23:47 |
| 222.128.2.60 | attackbotsspam | $f2bV_matches |
2019-10-04 16:27:45 |
| 49.88.112.68 | attackbots | Oct 4 04:25:15 xentho sshd[4692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.68 user=root Oct 4 04:25:17 xentho sshd[4692]: Failed password for root from 49.88.112.68 port 36177 ssh2 Oct 4 04:25:20 xentho sshd[4692]: Failed password for root from 49.88.112.68 port 36177 ssh2 Oct 4 04:25:15 xentho sshd[4692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.68 user=root Oct 4 04:25:17 xentho sshd[4692]: Failed password for root from 49.88.112.68 port 36177 ssh2 Oct 4 04:25:20 xentho sshd[4692]: Failed password for root from 49.88.112.68 port 36177 ssh2 Oct 4 04:25:15 xentho sshd[4692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.68 user=root Oct 4 04:25:17 xentho sshd[4692]: Failed password for root from 49.88.112.68 port 36177 ssh2 Oct 4 04:25:20 xentho sshd[4692]: Failed password for root from 49.88.112.68 port 36177 ... |
2019-10-04 16:37:48 |
| 103.119.230.249 | attackspambots | [portscan] Port scan |
2019-10-04 16:33:45 |
| 61.177.172.158 | attackbots | Oct 4 02:29:23 host sshd\[9292\]: error: PAM: Authentication failure for root from 61.177.172.158Oct 4 02:30:00 host sshd\[9445\]: error: PAM: Authentication failure for root from 61.177.172.158Oct 4 02:30:38 host sshd\[9690\]: error: PAM: Authentication failure for root from 61.177.172.158 ... |
2019-10-04 16:13:21 |
| 178.140.96.145 | attack | Oct 1 21:51:36 xb3 sshd[28018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=broadband-178-140-96-145.ip.moscow.rt.ru user=r.r Oct 1 21:51:37 xb3 sshd[28018]: Failed password for r.r from 178.140.96.145 port 42896 ssh2 Oct 1 21:51:40 xb3 sshd[28018]: Failed password for r.r from 178.140.96.145 port 42896 ssh2 Oct 1 21:51:42 xb3 sshd[28018]: Failed password for r.r from 178.140.96.145 port 42896 ssh2 Oct 1 21:51:42 xb3 sshd[28018]: Disconnecting: Too many authentication failures for r.r from 178.140.96.145 port 42896 ssh2 [preauth] Oct 1 21:51:42 xb3 sshd[28018]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=broadband-178-140-96-145.ip.moscow.rt.ru user=r.r Oct 1 21:51:48 xb3 sshd[28229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=broadband-178-140-96-145.ip.moscow.rt.ru user=r.r Oct 1 21:51:50 xb3 sshd[28229]: Failed password for r.r from 1........ ------------------------------- |
2019-10-04 16:35:19 |
| 216.170.126.122 | attack | Sep 30 06:01:08 mxgate1 postfix/postscreen[3258]: CONNECT from [216.170.126.122]:64140 to [176.31.12.44]:25 Sep 30 06:01:08 mxgate1 postfix/dnsblog[3261]: addr 216.170.126.122 listed by domain zen.spamhaus.org as 127.0.0.4 Sep 30 06:01:08 mxgate1 postfix/dnsblog[3262]: addr 216.170.126.122 listed by domain cbl.abuseat.org as 127.0.0.2 Sep 30 06:01:08 mxgate1 postfix/dnsblog[3263]: addr 216.170.126.122 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Sep 30 06:01:14 mxgate1 postfix/postscreen[3258]: DNSBL rank 4 for [216.170.126.122]:64140 Sep x@x Sep 30 06:01:14 mxgate1 postfix/postscreen[3258]: DISCONNECT [216.170.126.122]:64140 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=216.170.126.122 |
2019-10-04 16:19:00 |
| 192.163.197.138 | attackspambots | Oct 3 22:06:07 hpm sshd\[15918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.163.197.138 user=root Oct 3 22:06:09 hpm sshd\[15918\]: Failed password for root from 192.163.197.138 port 42722 ssh2 Oct 3 22:09:58 hpm sshd\[16351\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.163.197.138 user=root Oct 3 22:10:00 hpm sshd\[16351\]: Failed password for root from 192.163.197.138 port 54900 ssh2 Oct 3 22:13:47 hpm sshd\[16686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.163.197.138 user=root |
2019-10-04 16:22:07 |
| 207.154.234.102 | attackbotsspam | Oct 3 18:20:35 tdfoods sshd\[8133\]: Invalid user Exotic@2017 from 207.154.234.102 Oct 3 18:20:35 tdfoods sshd\[8133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.234.102 Oct 3 18:20:37 tdfoods sshd\[8133\]: Failed password for invalid user Exotic@2017 from 207.154.234.102 port 57350 ssh2 Oct 3 18:24:36 tdfoods sshd\[8475\]: Invalid user Caramel123 from 207.154.234.102 Oct 3 18:24:36 tdfoods sshd\[8475\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.234.102 |
2019-10-04 16:50:26 |
| 139.59.59.194 | attackbots | Oct 4 10:04:37 dedicated sshd[8477]: Invalid user Reality@123 from 139.59.59.194 port 53526 |
2019-10-04 16:12:42 |