城市(city): unknown
省份(region): unknown
国家(country): IANA Special-Purpose Address
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 244.252.50.4
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39416
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;244.252.50.4. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2024121600 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 16 19:08:52 CST 2024
;; MSG SIZE rcvd: 105Host 4.50.252.244.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 4.50.252.244.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 94.134.146.76 | attackspam | Caught in portsentry honeypot |
2019-09-05 16:30:08 |
| 129.204.202.89 | attack | $f2bV_matches |
2019-09-05 16:53:16 |
| 109.228.143.179 | attackbots | Sep 5 01:46:06 pkdns2 sshd\[14955\]: Invalid user mcserver from 109.228.143.179Sep 5 01:46:08 pkdns2 sshd\[14955\]: Failed password for invalid user mcserver from 109.228.143.179 port 22189 ssh2Sep 5 01:49:53 pkdns2 sshd\[15062\]: Invalid user alex from 109.228.143.179Sep 5 01:49:56 pkdns2 sshd\[15062\]: Failed password for invalid user alex from 109.228.143.179 port 24607 ssh2Sep 5 01:53:41 pkdns2 sshd\[15247\]: Invalid user ftpsecure from 109.228.143.179Sep 5 01:53:44 pkdns2 sshd\[15247\]: Failed password for invalid user ftpsecure from 109.228.143.179 port 26853 ssh2 ... |
2019-09-05 16:21:43 |
| 175.145.58.168 | attackspambots | 175.145.58.168 - - \[05/Sep/2019:10:35:08 +0200\] "GET ../../mnt/custom/ProductDefinition HTTP" 400 226 "-" "-" |
2019-09-05 16:40:15 |
| 196.219.229.178 | attackspambots | Unauthorized connection attempt from IP address 196.219.229.178 on Port 445(SMB) |
2019-09-05 16:43:24 |
| 94.191.47.240 | attack | Sep 5 10:30:12 mail sshd\[21448\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.47.240 Sep 5 10:30:14 mail sshd\[21448\]: Failed password for invalid user test from 94.191.47.240 port 52737 ssh2 Sep 5 10:34:27 mail sshd\[21994\]: Invalid user factorio from 94.191.47.240 port 45388 Sep 5 10:34:27 mail sshd\[21994\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.47.240 Sep 5 10:34:28 mail sshd\[21994\]: Failed password for invalid user factorio from 94.191.47.240 port 45388 ssh2 |
2019-09-05 16:53:35 |
| 117.247.182.223 | attackbots | Unauthorized connection attempt from IP address 117.247.182.223 on Port 445(SMB) |
2019-09-05 16:45:41 |
| 138.197.103.160 | attack | Sep 4 19:23:38 vtv3 sshd\[7547\]: Invalid user dedy from 138.197.103.160 port 40788 Sep 4 19:23:38 vtv3 sshd\[7547\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.103.160 Sep 4 19:23:41 vtv3 sshd\[7547\]: Failed password for invalid user dedy from 138.197.103.160 port 40788 ssh2 Sep 4 19:27:36 vtv3 sshd\[9830\]: Invalid user malaga from 138.197.103.160 port 56380 Sep 4 19:27:36 vtv3 sshd\[9830\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.103.160 Sep 4 19:39:43 vtv3 sshd\[15660\]: Invalid user usuario from 138.197.103.160 port 46676 Sep 4 19:39:43 vtv3 sshd\[15660\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.103.160 Sep 4 19:39:45 vtv3 sshd\[15660\]: Failed password for invalid user usuario from 138.197.103.160 port 46676 ssh2 Sep 4 19:43:52 vtv3 sshd\[17795\]: Invalid user main from 138.197.103.160 port 34030 Sep 4 19:43:52 vtv3 sshd\ |
2019-09-05 16:17:58 |
| 92.118.161.33 | attack | Honeypot attack, port: 139, PTR: 92.118.161.33.netsystemsresearch.com. |
2019-09-05 16:20:18 |
| 117.217.76.213 | attack | Automatic report - Port Scan Attack |
2019-09-05 16:46:08 |
| 213.6.8.38 | attackspambots | Sep 5 08:29:53 hb sshd\[1295\]: Invalid user hadoopuser from 213.6.8.38 Sep 5 08:29:53 hb sshd\[1295\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.8.38 Sep 5 08:29:55 hb sshd\[1295\]: Failed password for invalid user hadoopuser from 213.6.8.38 port 37382 ssh2 Sep 5 08:35:06 hb sshd\[1767\]: Invalid user teamspeak from 213.6.8.38 Sep 5 08:35:06 hb sshd\[1767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.8.38 |
2019-09-05 16:42:49 |
| 120.88.185.39 | attack | Sep 4 22:48:45 lcprod sshd\[28751\]: Invalid user demo from 120.88.185.39 Sep 4 22:48:45 lcprod sshd\[28751\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.88.185.39 Sep 4 22:48:47 lcprod sshd\[28751\]: Failed password for invalid user demo from 120.88.185.39 port 55304 ssh2 Sep 4 22:53:21 lcprod sshd\[29106\]: Invalid user user from 120.88.185.39 Sep 4 22:53:21 lcprod sshd\[29106\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.88.185.39 |
2019-09-05 17:00:47 |
| 185.173.35.33 | attackspambots | Honeypot attack, port: 135, PTR: 185.173.35.33.netsystemsresearch.com. |
2019-09-05 16:21:58 |
| 113.116.242.203 | attackbotsspam | Sep510:34:30server2pure-ftpd:\(\?@113.116.242.203\)[WARNING]Authenticationfailedforuser[anonymous]Sep510:34:35server2pure-ftpd:\(\?@113.116.242.203\)[WARNING]Authenticationfailedforuser[admin]Sep510:34:41server2pure-ftpd:\(\?@113.116.242.203\)[WARNING]Authenticationfailedforuser[admin]Sep510:34:48server2pure-ftpd:\(\?@113.116.242.203\)[WARNING]Authenticationfailedforuser[admin]Sep510:34:53server2pure-ftpd:\(\?@113.116.242.203\)[WARNING]Authenticationfailedforuser[root] |
2019-09-05 16:55:05 |
| 185.176.27.178 | attack | Sep 5 10:19:57 h2177944 kernel: \[548206.440906\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=7904 PROTO=TCP SPT=51912 DPT=13746 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 5 10:25:10 h2177944 kernel: \[548519.150167\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=32902 PROTO=TCP SPT=51912 DPT=35334 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 5 10:28:54 h2177944 kernel: \[548743.214432\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=50006 PROTO=TCP SPT=51912 DPT=52908 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 5 10:29:55 h2177944 kernel: \[548804.339444\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=37620 PROTO=TCP SPT=51912 DPT=39878 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 5 10:34:50 h2177944 kernel: \[549099.596132\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.176.27.178 DST=85.214.11 |
2019-09-05 16:59:06 |