城市(city): unknown
省份(region): unknown
国家(country): IANA Special-Purpose Address
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 254.129.31.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53007
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;254.129.31.49. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021900 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 19 21:21:53 CST 2025
;; MSG SIZE rcvd: 106
Host 49.31.129.254.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 49.31.129.254.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 51.68.220.249 | attackspambots | Sep 30 17:49:22 friendsofhawaii sshd\[2381\]: Invalid user david from 51.68.220.249 Sep 30 17:49:22 friendsofhawaii sshd\[2381\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=249.ip-51-68-220.eu Sep 30 17:49:24 friendsofhawaii sshd\[2381\]: Failed password for invalid user david from 51.68.220.249 port 50962 ssh2 Sep 30 17:55:30 friendsofhawaii sshd\[2898\]: Invalid user design from 51.68.220.249 Sep 30 17:55:30 friendsofhawaii sshd\[2898\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=249.ip-51-68-220.eu |
2019-10-01 12:09:45 |
| 45.136.109.185 | attack | firewall-block, port(s): 148/tcp, 48484/tcp |
2019-10-01 12:31:53 |
| 140.143.142.190 | attackspambots | Oct 1 06:51:02 www sshd\[37094\]: Invalid user cumulus from 140.143.142.190Oct 1 06:51:04 www sshd\[37094\]: Failed password for invalid user cumulus from 140.143.142.190 port 35090 ssh2Oct 1 06:55:33 www sshd\[37134\]: Invalid user adityaeee from 140.143.142.190 ... |
2019-10-01 12:03:01 |
| 80.79.179.2 | attackspam | Oct 1 03:47:55 ip-172-31-62-245 sshd\[680\]: Invalid user cafea from 80.79.179.2\ Oct 1 03:47:57 ip-172-31-62-245 sshd\[680\]: Failed password for invalid user cafea from 80.79.179.2 port 43344 ssh2\ Oct 1 03:51:43 ip-172-31-62-245 sshd\[701\]: Invalid user achilles from 80.79.179.2\ Oct 1 03:51:45 ip-172-31-62-245 sshd\[701\]: Failed password for invalid user achilles from 80.79.179.2 port 55530 ssh2\ Oct 1 03:55:35 ip-172-31-62-245 sshd\[737\]: Invalid user admin from 80.79.179.2\ |
2019-10-01 12:06:42 |
| 212.237.14.203 | attackspambots | Sep 30 18:07:07 kapalua sshd\[18766\]: Invalid user jszpila from 212.237.14.203 Sep 30 18:07:07 kapalua sshd\[18766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.14.203 Sep 30 18:07:09 kapalua sshd\[18766\]: Failed password for invalid user jszpila from 212.237.14.203 port 38736 ssh2 Sep 30 18:11:06 kapalua sshd\[19240\]: Invalid user leilane from 212.237.14.203 Sep 30 18:11:06 kapalua sshd\[19240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.14.203 |
2019-10-01 12:14:10 |
| 193.32.194.61 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/193.32.194.61/ PL - 1H : (228) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : PL NAME ASN : ASN41952 IP : 193.32.194.61 CIDR : 193.32.192.0/22 PREFIX COUNT : 15 UNIQUE IP COUNT : 12800 WYKRYTE ATAKI Z ASN41952 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-01 05:55:16 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery |
2019-10-01 12:18:40 |
| 218.161.49.227 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 01-10-2019 04:55:16. |
2019-10-01 12:18:22 |
| 165.227.53.38 | attackbots | [Aegis] @ 2019-10-01 04:55:25 0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack |
2019-10-01 12:02:37 |
| 36.66.75.19 | attackbots | Attempt to attack host OS, exploiting network vulnerabilities, on 01-10-2019 04:55:16. |
2019-10-01 12:20:17 |
| 199.195.249.6 | attackbotsspam | Oct 1 06:50:51 www sshd\[21886\]: Invalid user techhelpportal from 199.195.249.6Oct 1 06:50:53 www sshd\[21886\]: Failed password for invalid user techhelpportal from 199.195.249.6 port 59320 ssh2Oct 1 06:55:19 www sshd\[22251\]: Invalid user redmond from 199.195.249.6 ... |
2019-10-01 12:17:08 |
| 153.36.242.143 | attack | Oct 1 07:28:16 server2 sshd\[26863\]: User root from 153.36.242.143 not allowed because not listed in AllowUsers Oct 1 07:28:16 server2 sshd\[26865\]: User root from 153.36.242.143 not allowed because not listed in AllowUsers Oct 1 07:28:16 server2 sshd\[26861\]: User root from 153.36.242.143 not allowed because not listed in AllowUsers Oct 1 07:28:16 server2 sshd\[26867\]: User root from 153.36.242.143 not allowed because not listed in AllowUsers Oct 1 07:33:38 server2 sshd\[27262\]: User root from 153.36.242.143 not allowed because not listed in AllowUsers Oct 1 07:33:42 server2 sshd\[27264\]: User root from 153.36.242.143 not allowed because not listed in AllowUsers |
2019-10-01 12:36:09 |
| 113.176.118.127 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 01-10-2019 04:55:13. |
2019-10-01 12:23:46 |
| 58.254.132.49 | attackspam | Oct 1 06:54:41 www sshd\[165355\]: Invalid user hj from 58.254.132.49 Oct 1 06:54:41 www sshd\[165355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.49 Oct 1 06:54:43 www sshd\[165355\]: Failed password for invalid user hj from 58.254.132.49 port 38935 ssh2 ... |
2019-10-01 12:00:53 |
| 41.137.137.92 | attackspam | Oct 1 06:46:14 www sshd\[37007\]: Invalid user marla from 41.137.137.92Oct 1 06:46:16 www sshd\[37007\]: Failed password for invalid user marla from 41.137.137.92 port 32877 ssh2Oct 1 06:55:34 www sshd\[37136\]: Invalid user bitrix from 41.137.137.92 ... |
2019-10-01 12:07:03 |
| 46.229.168.148 | attack | 46.229.168.148 - - \[01/Oct/2019:05:37:19 +0200\] "GET /Liste-tronquee-t-715.html HTTP/1.1" 200 9308 "-" "Mozilla/5.0 \(compatible\; SemrushBot/6\~bl\; +http://www.semrush.com/bot.html\)" 46.229.168.148 - - \[01/Oct/2019:05:47:52 +0200\] "GET /index.php\?oldid=2733\&printable=yes\&title=Utilisation_des_listes HTTP/1.1" 200 8266 "-" "Mozilla/5.0 \(compatible\; SemrushBot/6\~bl\; +http://www.semrush.com/bot.html\)" |
2019-10-01 12:08:03 |