城市(city): unknown
省份(region): unknown
国家(country): IANA Special-Purpose Address
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 244.131.254.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61883
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;244.131.254.214. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012401 1800 900 604800 86400
;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 25 04:07:14 CST 2025
;; MSG SIZE rcvd: 108Host 214.254.131.244.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 214.254.131.244.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 112.135.232.170 | attack | Attempts against non-existent wp-login |
2020-09-09 06:11:28 |
| 109.194.166.11 | attack | $f2bV_matches |
2020-09-09 05:59:55 |
| 58.33.35.82 | attackbots | $f2bV_matches |
2020-09-09 05:45:21 |
| 222.186.136.164 | attackbots | REQUESTED PAGE: //dede/tpl.php |
2020-09-09 06:16:36 |
| 101.226.253.162 | attack | Lines containing failures of 101.226.253.162 Sep 8 18:55:57 mellenthin sshd[28852]: Invalid user libuuid from 101.226.253.162 port 46080 Sep 8 18:55:57 mellenthin sshd[28852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.226.253.162 Sep 8 18:55:59 mellenthin sshd[28852]: Failed password for invalid user libuuid from 101.226.253.162 port 46080 ssh2 Sep 8 18:56:00 mellenthin sshd[28852]: Received disconnect from 101.226.253.162 port 46080:11: Bye Bye [preauth] Sep 8 18:56:00 mellenthin sshd[28852]: Disconnected from invalid user libuuid 101.226.253.162 port 46080 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=101.226.253.162 |
2020-09-09 06:01:00 |
| 54.38.53.251 | attackbots | Sep 8 17:23:23 firewall sshd[12809]: Failed password for root from 54.38.53.251 port 56148 ssh2 Sep 8 17:27:20 firewall sshd[12947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.53.251 user=root Sep 8 17:27:22 firewall sshd[12947]: Failed password for root from 54.38.53.251 port 34222 ssh2 ... |
2020-09-09 05:54:42 |
| 81.68.142.128 | attackbots | Sep 8 21:06:52 sip sshd[1543396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.142.128 Sep 8 21:06:52 sip sshd[1543396]: Invalid user maggiora from 81.68.142.128 port 37800 Sep 8 21:06:53 sip sshd[1543396]: Failed password for invalid user maggiora from 81.68.142.128 port 37800 ssh2 ... |
2020-09-09 05:41:07 |
| 144.172.93.124 | attack | Spam |
2020-09-09 05:57:06 |
| 81.68.135.238 | attackspam | 2020-09-08T16:55:35.641781www1-sb.mstrade.org sshd[28047]: Invalid user mick from 81.68.135.238 port 40866 2020-09-08T16:55:35.652859www1-sb.mstrade.org sshd[28047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.135.238 2020-09-08T16:55:35.641781www1-sb.mstrade.org sshd[28047]: Invalid user mick from 81.68.135.238 port 40866 2020-09-08T16:55:37.625343www1-sb.mstrade.org sshd[28047]: Failed password for invalid user mick from 81.68.135.238 port 40866 ssh2 2020-09-08T16:59:16.517313www1-sb.mstrade.org sshd[28248]: Invalid user cpanelrrdtool from 81.68.135.238 port 59602 ... |
2020-09-09 06:00:12 |
| 112.85.42.181 | attackbots | 2020-09-08 16:52:00.540390-0500 localhost sshd[3773]: Failed password for root from 112.85.42.181 port 21151 ssh2 |
2020-09-09 06:05:56 |
| 37.59.98.179 | attackspam | 37.59.98.179 - - [08/Sep/2020:23:11:14 +0200] "GET /wp-login.php HTTP/1.1" 200 9184 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 37.59.98.179 - - [08/Sep/2020:23:11:17 +0200] "POST /wp-login.php HTTP/1.1" 200 9435 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 37.59.98.179 - - [08/Sep/2020:23:11:20 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-09 06:05:09 |
| 188.166.150.17 | attackbots | Sep 8 23:24:29 PorscheCustomer sshd[1674]: Failed password for root from 188.166.150.17 port 49374 ssh2 Sep 8 23:27:48 PorscheCustomer sshd[1745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.150.17 Sep 8 23:27:50 PorscheCustomer sshd[1745]: Failed password for invalid user 1andrewscudder from 188.166.150.17 port 52543 ssh2 ... |
2020-09-09 05:42:29 |
| 45.142.120.93 | attack | Sep 7 01:35:42 nirvana postfix/smtpd[15112]: connect from unknown[45.142.120.93] Sep 7 01:35:47 nirvana postfix/smtpd[15112]: warning: unknown[45.142.120.93]: SASL LOGIN authentication failed: authentication failure Sep 7 01:35:48 nirvana postfix/smtpd[15112]: disconnect from unknown[45.142.120.93] Sep 7 01:35:50 nirvana postfix/smtpd[15112]: connect from unknown[45.142.120.93] Sep 7 01:35:53 nirvana postfix/smtpd[15117]: connect from unknown[45.142.120.93] Sep 7 01:35:53 nirvana postfix/smtpd[15118]: connect from unknown[45.142.120.93] Sep 7 01:35:54 nirvana postfix/smtpd[15116]: connect from unknown[45.142.120.93] Sep 7 01:35:55 nirvana postfix/smtpd[15112]: warning: unknown[45.142.120.93]: SASL LOGIN authentication failed: authentication failure Sep 7 01:35:56 nirvana postfix/smtpd[15112]: disconnect from unknown[45.142.120.93] Sep 7 01:35:57 nirvana postfix/smtpd[15116]: warning: unknown[45.142.120.93]: SASL LOGIN authentication failed: authentication fail........ ------------------------------- |
2020-09-09 06:19:07 |
| 165.84.180.12 | attackspambots | Sep 8 23:57:07 s1 sshd\[21318\]: User root from 165.84.180.12 not allowed because not listed in AllowUsers Sep 8 23:57:07 s1 sshd\[21318\]: Failed password for invalid user root from 165.84.180.12 port 35086 ssh2 Sep 8 23:58:55 s1 sshd\[21358\]: User root from 165.84.180.12 not allowed because not listed in AllowUsers Sep 8 23:58:55 s1 sshd\[21358\]: Failed password for invalid user root from 165.84.180.12 port 46293 ssh2 Sep 8 23:59:54 s1 sshd\[21387\]: User root from 165.84.180.12 not allowed because not listed in AllowUsers Sep 8 23:59:54 s1 sshd\[21387\]: Failed password for invalid user root from 165.84.180.12 port 53128 ssh2 ... |
2020-09-09 06:12:32 |
| 1.54.88.41 | attack | Brute forcing RDP port 3389 |
2020-09-09 05:47:41 |