城市(city): unknown
省份(region): unknown
国家(country): IANA Special-Purpose Address
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 249.221.94.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39593
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;249.221.94.91. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013100 1800 900 604800 86400
;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 15:55:47 CST 2025
;; MSG SIZE rcvd: 106
Host 91.94.221.249.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 91.94.221.249.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 171.242.122.46 | attack | 1583383705 - 03/05/2020 05:48:25 Host: 171.242.122.46/171.242.122.46 Port: 445 TCP Blocked |
2020-03-05 17:57:38 |
| 178.64.126.127 | attack | Unauthorized connection attempt from IP address 178.64.126.127 on Port 445(SMB) |
2020-03-05 18:26:00 |
| 45.141.84.29 | attack | firewall-block, port(s): 5909/tcp |
2020-03-05 18:16:17 |
| 106.13.165.247 | attackbots | Mar 5 08:02:49 ns41 sshd[18555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.165.247 |
2020-03-05 17:56:02 |
| 118.89.30.44 | attackbotsspam | Mar 5 04:45:30 NPSTNNYC01T sshd[9641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.30.44 Mar 5 04:45:32 NPSTNNYC01T sshd[9641]: Failed password for invalid user tecnici from 118.89.30.44 port 40750 ssh2 Mar 5 04:53:25 NPSTNNYC01T sshd[10280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.30.44 ... |
2020-03-05 18:04:54 |
| 5.101.0.209 | attackbots | Scanning for open ports and vulnerable services: 2375,6379,6800,8081,8088,8983 |
2020-03-05 18:06:18 |
| 109.122.59.228 | attackbotsspam | Honeypot attack, port: 445, PTR: 109.122.59.228.dynamic.uch.net. |
2020-03-05 18:20:15 |
| 49.149.110.181 | attackbotsspam | 20/3/4@23:48:19: FAIL: Alarm-Network address from=49.149.110.181 20/3/4@23:48:20: FAIL: Alarm-Network address from=49.149.110.181 ... |
2020-03-05 18:01:11 |
| 218.92.0.191 | attack | Mar 5 11:05:48 dcd-gentoo sshd[11156]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Mar 5 11:05:51 dcd-gentoo sshd[11156]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Mar 5 11:05:48 dcd-gentoo sshd[11156]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Mar 5 11:05:51 dcd-gentoo sshd[11156]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Mar 5 11:05:48 dcd-gentoo sshd[11156]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Mar 5 11:05:51 dcd-gentoo sshd[11156]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Mar 5 11:05:51 dcd-gentoo sshd[11156]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 23855 ssh2 ... |
2020-03-05 18:09:03 |
| 64.225.6.252 | attackbotsspam | Chat Spam |
2020-03-05 18:10:49 |
| 92.63.194.93 | attack | Mar 5 04:11:29 pptp[8257]: Connect: ppp12 <--> pptp (92.63.194.93) Mar 5 04:11:30 pptp[8267]: Connect: ppp13 <--> pptp (92.63.194.94) Mar 5 04:11:30 pptp[8285]: Connect: ppp15 <--> pptp (92.63.194.47) Mar 5 07:51:20 pptp[11707]: Connect: ppp10 <--> pptp (92.63.194.155) Mar 5 07:51:21 pptp[11727]: Connect: ppp12 <--> pptp (92.63.194.157) etc. |
2020-03-05 18:03:53 |
| 64.27.55.250 | spam | MARRE de ces ORDURES et autres FILS de PUTE genre SOUS MERDES capables de POLLUER STUPIDEMENT pour ne pas dire CONNEMENT la Planète par des POURRIELS INUTILES sur des listes VOLÉES on ne sait où et SANS notre accord, en TOTALE INFRACTION avec les Législations Européennes comme Française sur la RGPD, donc à condamner à 750 € par pourriel émis, tout ça pour du PHISHING par une FAUSSE COPIE... BounceEmail@namedu.astalido.org.uk=>69.197.139.254 https://en.asytech.cn/check-ip/69.197.139.254 astalido.org.uk=>register.com astalido.org.uk=>69.197.139.250 69.197.128.0 - 69.197.191.255=>wholesaleinternet.net https://www.mywot.com/scorecard/astalido.org.uk https://www.mywot.com/scorecard/wholesaleinternet.net https://en.asytech.cn/check-ip/69.197.139.250 alichobein.co.uk=>register.com alichobein.co.uk=>87.236.196.214 87.236.196.214=>coolhousing.net https://www.mywot.com/scorecard/alichobein.co.uk https://www.mywot.com/scorecard/coolhousing.net https://en.asytech.cn/check-ip/87.236.196.214 Message-Id:<2100295267.gezxtj.82159@topspeech.net> topspeech.net=>enom.com=>whoisprivacyprotect.com topspeech.net=>64.27.55.250 64.27.55.250=>wehostwebsites.com https://www.mywot.com/scorecard/topspeech.net https://www.mywot.com/scorecard/enom.com https://www.mywot.com/scorecard/whoisprivacyprotect.com https://www.mywot.com/scorecard/wehostwebsites.com https://en.asytech.cn/check-ip/64.27.55.250 |
2020-03-05 18:17:24 |
| 64.190.91.24 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/64.190.91.24/ US - 1H : (92) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN11403 IP : 64.190.91.24 CIDR : 64.190.90.0/23 PREFIX COUNT : 81 UNIQUE IP COUNT : 48384 ATTACKS DETECTED ASN11403 : 1H - 1 3H - 1 6H - 1 12H - 2 24H - 2 DateTime : 2020-03-05 05:48:02 INFO : Potentially Bad Traffic Scan Detected and Blocked by ADMIN - data recovery |
2020-03-05 18:21:09 |
| 185.173.35.5 | attack | 67/tcp 5916/tcp 20249/tcp... [2020-01-04/03-03]51pkt,41pt.(tcp),4pt.(udp),1tp.(icmp) |
2020-03-05 18:27:10 |
| 192.241.181.33 | attackspam | [portscan] tcp/143 [IMAP] *(RWIN=65535)(03051213) |
2020-03-05 18:18:27 |