城市(city): unknown
省份(region): unknown
国家(country): United Kingdom of Great Britain and Northern Ireland (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.159.36.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61369
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;212.159.36.214. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021900 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 19 17:27:29 CST 2025
;; MSG SIZE rcvd: 107214.36.159.212.in-addr.arpa domain name pointer 214-36.gw02.sheff.dial.plus.net.uk.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
214.36.159.212.in-addr.arpa name = 214-36.gw02.sheff.dial.plus.net.uk.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 222.186.180.8 | attackbots | Oct 30 23:33:42 mail sshd\[13809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.8 user=root Oct 30 23:33:44 mail sshd\[13809\]: Failed password for root from 222.186.180.8 port 10892 ssh2 Oct 30 23:33:48 mail sshd\[13809\]: Failed password for root from 222.186.180.8 port 10892 ssh2 ... |
2019-10-31 06:33:58 |
| 170.238.46.6 | attackspambots | Oct 30 22:27:37 icinga sshd[24835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.238.46.6 Oct 30 22:27:39 icinga sshd[24835]: Failed password for invalid user pa$sword! from 170.238.46.6 port 50192 ssh2 ... |
2019-10-31 06:12:53 |
| 159.89.169.137 | attack | Oct 30 11:50:43 web9 sshd\[26816\]: Invalid user 123456 from 159.89.169.137 Oct 30 11:50:43 web9 sshd\[26816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.169.137 Oct 30 11:50:45 web9 sshd\[26816\]: Failed password for invalid user 123456 from 159.89.169.137 port 48874 ssh2 Oct 30 11:55:15 web9 sshd\[27417\]: Invalid user jia7515798 from 159.89.169.137 Oct 30 11:55:15 web9 sshd\[27417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.169.137 |
2019-10-31 06:13:07 |
| 178.128.218.56 | attack | Oct 30 21:44:52 vps666546 sshd\[6674\]: Invalid user awfizz from 178.128.218.56 port 53708 Oct 30 21:44:52 vps666546 sshd\[6674\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.218.56 Oct 30 21:44:55 vps666546 sshd\[6674\]: Failed password for invalid user awfizz from 178.128.218.56 port 53708 ssh2 Oct 30 21:49:22 vps666546 sshd\[6741\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.218.56 user=root Oct 30 21:49:24 vps666546 sshd\[6741\]: Failed password for root from 178.128.218.56 port 36874 ssh2 ... |
2019-10-31 06:28:04 |
| 95.80.252.189 | attackbots | Mail sent to address harvested from public web site |
2019-10-31 06:26:23 |
| 182.138.223.169 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/182.138.223.169/ CN - 1H : (727) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4134 IP : 182.138.223.169 CIDR : 182.136.0.0/14 PREFIX COUNT : 5430 UNIQUE IP COUNT : 106919680 ATTACKS DETECTED ASN4134 : 1H - 8 3H - 31 6H - 65 12H - 141 24H - 300 DateTime : 2019-10-30 21:26:54 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-31 06:27:46 |
| 46.1.214.190 | attack | Honeypot attack, port: 23, PTR: PTR record not found |
2019-10-31 06:29:32 |
| 168.196.221.226 | attackbots | Oct 31 02:53:41 gw1 sshd[1569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.196.221.226 Oct 31 02:53:43 gw1 sshd[1569]: Failed password for invalid user 1qaz2wsx from 168.196.221.226 port 46800 ssh2 ... |
2019-10-31 06:03:29 |
| 150.95.82.79 | attackbots | Lines containing failures of 150.95.82.79 Oct 30 20:21:15 srv02 sshd[23123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.82.79 user=r.r Oct 30 20:21:17 srv02 sshd[23123]: Failed password for r.r from 150.95.82.79 port 59320 ssh2 Oct 30 20:21:17 srv02 sshd[23123]: Received disconnect from 150.95.82.79 port 59320:11: Bye Bye [preauth] Oct 30 20:21:17 srv02 sshd[23123]: Disconnected from authenticating user r.r 150.95.82.79 port 59320 [preauth] Oct 30 20:46:40 srv02 sshd[24350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.82.79 user=r.r Oct 30 20:46:42 srv02 sshd[24350]: Failed password for r.r from 150.95.82.79 port 57600 ssh2 Oct 30 20:46:42 srv02 sshd[24350]: Received disconnect from 150.95.82.79 port 57600:11: Bye Bye [preauth] Oct 30 20:46:42 srv02 sshd[24350]: Disconnected from authenticating user r.r 150.95.82.79 port 57600 [preauth] Oct 30 20:51:21 srv02 sshd[2452........ ------------------------------ |
2019-10-31 06:04:24 |
| 23.129.64.192 | attackbots | Honeypot hit, critical abuseConfidenceScore, incoming Traffic from this IP |
2019-10-31 06:09:14 |
| 193.32.160.152 | attack | 2019-10-30T22:44:41.642645mail01 postfix/smtpd[14067]: NOQUEUE: reject: RCPT from unknown[193.32.160.152]: 550 |
2019-10-31 06:41:23 |
| 128.0.130.116 | attackspam | $f2bV_matches_ltvn |
2019-10-31 06:04:48 |
| 134.73.78.216 | attackspambots | Lines containing failures of 134.73.78.216 Oct 30 21:17:29 shared04 postfix/smtpd[31971]: connect from amazon-us-west-amazonaws216.bcgjc.com[134.73.78.216] Oct 30 21:17:29 shared04 policyd-spf[3377]: prepend Received-SPF: Pass (mailfrom) identhostnamey=mailfrom; client-ip=134.73.78.216; helo=amazon-us-west-amazonaws216.bcgjc.com; envelope-from=x@x Oct x@x Oct 30 21:17:29 shared04 postfix/smtpd[31971]: disconnect from amazon-us-west-amazonaws216.bcgjc.com[134.73.78.216] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=134.73.78.216 |
2019-10-31 06:28:40 |
| 37.189.101.188 | attackspambots | Oct 28 20:03:07 penfold postfix/smtpd[31296]: warning: hostname bl28-101-188.dsl.telepac.pt does not resolve to address 37.189.101.188: Name or service not known Oct 28 20:03:07 penfold postfix/smtpd[31296]: connect from unknown[37.189.101.188] Oct x@x Oct 28 20:03:08 penfold postfix/smtpd[31296]: disconnect from unknown[37.189.101.188] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4 Oct 29 17:26:22 penfold postfix/smtpd[6451]: warning: hostname bl28-101-188.dsl.telepac.pt does not resolve to address 37.189.101.188: Name or service not known Oct 29 17:26:22 penfold postfix/smtpd[6451]: connect from unknown[37.189.101.188] Oct x@x Oct 29 17:26:23 penfold postfix/smtpd[6451]: disconnect from unknown[37.189.101.188] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4 Oct 29 20:25:48 penfold postfix/smtpd[12541]: warning: hostname bl28-101-188.dsl.telepac.pt does not resolve to address 37.189.101.188: Name or service not known Oct 29 20:25:48 penfold postfix/smtpd[12541]: con........ ------------------------------- |
2019-10-31 06:29:55 |
| 109.94.113.48 | attack | Automatic report - Port Scan Attack |
2019-10-31 06:17:55 |