城市(city): unknown
省份(region): unknown
国家(country): IANA Special-Purpose Address
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 245.12.53.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30703
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;245.12.53.94. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022401 1800 900 604800 86400
;; Query time: 42 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 25 10:38:26 CST 2025
;; MSG SIZE rcvd: 105Host 94.53.12.245.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 94.53.12.245.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 182.61.179.75 | attackspam | Aug 23 22:55:08 legacy sshd[11332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.179.75 Aug 23 22:55:09 legacy sshd[11332]: Failed password for invalid user gregg from 182.61.179.75 port 36886 ssh2 Aug 23 22:59:53 legacy sshd[11431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.179.75 ... |
2019-08-24 05:35:30 |
| 121.141.5.199 | attackbotsspam | Aug 23 21:04:47 MK-Soft-VM6 sshd\[28352\]: Invalid user pcap from 121.141.5.199 port 56168 Aug 23 21:04:47 MK-Soft-VM6 sshd\[28352\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.141.5.199 Aug 23 21:04:49 MK-Soft-VM6 sshd\[28352\]: Failed password for invalid user pcap from 121.141.5.199 port 56168 ssh2 ... |
2019-08-24 05:07:46 |
| 181.95.174.5 | attackbots | 2019-08-23 17:16:05 unexpected disconnection while reading SMTP command from (host5.181-95-174.telecom.net.ar) [181.95.174.5]:10306 I=[10.100.18.22]:25 (error: Connection reset by peer) 2019-08-23 17:19:45 unexpected disconnection while reading SMTP command from (host5.181-95-174.telecom.net.ar) [181.95.174.5]:10854 I=[10.100.18.22]:25 (error: Connection reset by peer) 2019-08-23 17:20:15 unexpected disconnection while reading SMTP command from (host5.181-95-174.telecom.net.ar) [181.95.174.5]:10938 I=[10.100.18.22]:25 (error: Connection reset by peer) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=181.95.174.5 |
2019-08-24 05:24:04 |
| 5.196.110.170 | attackbotsspam | SSH brute-force: detected 6 distinct usernames within a 24-hour window. |
2019-08-24 05:11:40 |
| 123.148.208.165 | attackbotsspam | ft-1848-fussball.de 123.148.208.165 \[23/Aug/2019:18:18:04 +0200\] "POST /wp-login.php HTTP/1.1" 200 2319 "-" "Mozilla/5.0 \(Windows NT 6.1\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0" ft-1848-fussball.de 123.148.208.165 \[23/Aug/2019:18:18:05 +0200\] "POST /wp-login.php HTTP/1.1" 200 2309 "-" "Mozilla/5.0 \(Windows NT 6.1\; WOW64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/58.0.3029.110 Safari/537.36 SE 2.X MetaSr 1.0" |
2019-08-24 04:58:03 |
| 121.181.239.71 | attack | Reported by AbuseIPDB proxy server. |
2019-08-24 05:37:44 |
| 66.7.148.40 | attackspam | Aug 23 23:23:35 mail postfix/smtpd\[29425\]: warning: unknown\[66.7.148.40\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 23 23:26:58 mail postfix/smtpd\[2694\]: warning: unknown\[66.7.148.40\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 23 23:28:04 mail postfix/smtpd\[2655\]: warning: unknown\[66.7.148.40\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-08-24 05:38:11 |
| 39.73.59.189 | attackbotsspam | 23/tcp 5555/tcp [2019-08-15/23]2pkt |
2019-08-24 05:32:23 |
| 218.92.0.211 | attackbotsspam | Aug 23 16:18:05 *** sshd[22980]: User root from 218.92.0.211 not allowed because not listed in AllowUsers |
2019-08-24 04:57:47 |
| 181.97.71.201 | attack | 2019-08-23 17:07:39 H=(host201.181-97-71.telecom.net.ar) [181.97.71.201]:22818 I=[10.100.18.25]:25 F= |
2019-08-24 05:32:53 |
| 191.241.242.58 | attack | 445/tcp 445/tcp 445/tcp [2019-07-31/08-23]3pkt |
2019-08-24 04:55:28 |
| 106.75.86.217 | attack | Invalid user ns from 106.75.86.217 port 40110 |
2019-08-24 05:09:34 |
| 51.68.70.72 | attackbots | Aug 23 14:50:37 *** sshd[5890]: Failed password for invalid user antivirus from 51.68.70.72 port 48102 ssh2 Aug 23 15:02:51 *** sshd[6165]: Failed password for invalid user ronald from 51.68.70.72 port 38744 ssh2 Aug 23 15:06:41 *** sshd[6275]: Failed password for invalid user rasa from 51.68.70.72 port 56028 ssh2 Aug 23 15:10:25 *** sshd[6405]: Failed password for invalid user bg from 51.68.70.72 port 45076 ssh2 Aug 23 15:14:10 *** sshd[6475]: Failed password for invalid user bdos from 51.68.70.72 port 34124 ssh2 Aug 23 15:18:06 *** sshd[6556]: Failed password for invalid user joshka from 51.68.70.72 port 51408 ssh2 Aug 23 15:21:55 *** sshd[6683]: Failed password for invalid user sensivity from 51.68.70.72 port 40456 ssh2 Aug 23 15:26:02 *** sshd[6811]: Failed password for invalid user idonia from 51.68.70.72 port 57740 ssh2 Aug 23 15:30:02 *** sshd[6890]: Failed password for invalid user feng from 51.68.70.72 port 46788 ssh2 Aug 23 15:33:59 *** sshd[6996]: Failed password for invalid user support1 from 51.6 |
2019-08-24 05:08:30 |
| 61.39.74.69 | attackspambots | Invalid user postgresql from 61.39.74.69 port 33462 |
2019-08-24 05:06:52 |
| 165.22.255.179 | attack | Aug 23 11:04:30 web9 sshd\[13224\]: Invalid user tempuser from 165.22.255.179 Aug 23 11:04:30 web9 sshd\[13224\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.255.179 Aug 23 11:04:32 web9 sshd\[13224\]: Failed password for invalid user tempuser from 165.22.255.179 port 34962 ssh2 Aug 23 11:09:18 web9 sshd\[14186\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.255.179 user=root Aug 23 11:09:19 web9 sshd\[14186\]: Failed password for root from 165.22.255.179 port 52204 ssh2 |
2019-08-24 05:27:17 |