城市(city): unknown
省份(region): unknown
国家(country): IANA Special-Purpose Address
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 254.189.53.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42874
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;254.189.53.34. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022200 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 22 14:09:38 CST 2025
;; MSG SIZE rcvd: 106Host 34.53.189.254.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 34.53.189.254.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 218.92.0.205 | attack | Failed password for root from 218.92.0.205 port 48440 ssh2 Failed password for root from 218.92.0.205 port 48440 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.205 user=root Failed password for root from 218.92.0.205 port 13490 ssh2 Failed password for root from 218.92.0.205 port 13490 ssh2 |
2019-07-15 13:37:33 |
| 1.169.25.222 | attackbots | " " |
2019-07-15 13:28:58 |
| 196.28.34.66 | attackspambots | 14.07.2019 23:06:38 - SMTP Spam without Auth on hMailserver Detected by ELinOX-hMail-A2F |
2019-07-15 12:51:58 |
| 175.136.241.161 | attack | Jul 15 05:54:39 debian sshd\[18560\]: Invalid user zope from 175.136.241.161 port 45306 Jul 15 05:54:39 debian sshd\[18560\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.136.241.161 ... |
2019-07-15 12:56:03 |
| 104.244.225.97 | attackspambots | Jul 14 22:51:01 h2034429 postfix/smtpd[18329]: connect from unknown[104.244.225.97] Jul x@x Jul 14 22:51:03 h2034429 postfix/smtpd[18329]: lost connection after DATA from unknown[104.244.225.97] Jul 14 22:51:03 h2034429 postfix/smtpd[18329]: disconnect from unknown[104.244.225.97] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 Jul 14 22:51:07 h2034429 postfix/smtpd[18329]: connect from unknown[104.244.225.97] Jul x@x Jul 14 22:51:08 h2034429 postfix/smtpd[18329]: lost connection after DATA from unknown[104.244.225.97] Jul 14 22:51:08 h2034429 postfix/smtpd[18329]: disconnect from unknown[104.244.225.97] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 Jul 14 22:51:10 h2034429 postfix/smtpd[18329]: connect from unknown[104.244.225.97] Jul x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=104.244.225.97 |
2019-07-15 13:09:59 |
| 82.53.149.58 | attackspambots | Jul 14 22:54:50 lively sshd[11155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.53.149.58 user=r.r Jul 14 22:54:53 lively sshd[11155]: Failed password for r.r from 82.53.149.58 port 62340 ssh2 Jul 14 22:55:01 lively sshd[11155]: message repeated 4 times: [ Failed password for r.r from 82.53.149.58 port 62340 ssh2] Jul 14 22:55:04 lively sshd[11155]: Failed password for r.r from 82.53.149.58 port 62340 ssh2 Jul 14 22:55:04 lively sshd[11155]: error: maximum authentication attempts exceeded for r.r from 82.53.149.58 port 62340 ssh2 [preauth] Jul 14 22:55:04 lively sshd[11155]: Disconnecting authenticating user r.r 82.53.149.58 port 62340: Too many authentication failures [preauth] Jul 14 22:55:04 lively sshd[11155]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.53.149.58 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=82.53.149.58 |
2019-07-15 13:38:30 |
| 75.97.83.80 | attackbotsspam | Jul 15 07:03:41 meumeu sshd[5915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.97.83.80 Jul 15 07:03:43 meumeu sshd[5915]: Failed password for invalid user rupert from 75.97.83.80 port 57272 ssh2 Jul 15 07:08:39 meumeu sshd[6828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.97.83.80 ... |
2019-07-15 13:09:06 |
| 79.2.9.254 | attack | Automatic report - Banned IP Access |
2019-07-15 12:37:57 |
| 41.60.110.135 | attackbots | Sent mail to address hacked/leaked from Patreon |
2019-07-15 12:56:20 |
| 49.69.144.219 | attackspambots | Jul 14 22:47:39 mxgate1 postfix/postscreen[5349]: CONNECT from [49.69.144.219]:51945 to [176.31.12.44]:25 Jul 14 22:47:39 mxgate1 postfix/dnsblog[5366]: addr 49.69.144.219 listed by domain zen.spamhaus.org as 127.0.0.11 Jul 14 22:47:45 mxgate1 postfix/postscreen[5349]: DNSBL rank 2 for [49.69.144.219]:51945 Jul x@x Jul 14 22:47:46 mxgate1 postfix/postscreen[5349]: DISCONNECT [49.69.144.219]:51945 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.69.144.219 |
2019-07-15 12:44:33 |
| 106.13.51.110 | attack | Jul 15 04:20:46 animalibera sshd[4914]: Invalid user art from 106.13.51.110 port 49104 ... |
2019-07-15 12:38:54 |
| 121.142.210.111 | attack | 19/7/14@17:05:40: FAIL: IoT-Telnet address from=121.142.210.111 ... |
2019-07-15 13:26:19 |
| 109.152.241.126 | attack | Jul 14 22:51:02 h2421860 postfix/postscreen[28338]: CONNECT from [109.152.241.126]:17018 to [85.214.119.52]:25 Jul 14 22:51:02 h2421860 postfix/dnsblog[28341]: addr 109.152.241.126 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Jul 14 22:51:02 h2421860 postfix/dnsblog[28342]: addr 109.152.241.126 listed by domain zen.spamhaus.org as 127.0.0.11 Jul 14 22:51:02 h2421860 postfix/dnsblog[28345]: addr 109.152.241.126 listed by domain Unknown.trblspam.com as 185.53.179.7 Jul 14 22:51:02 h2421860 postfix/dnsblog[28344]: addr 109.152.241.126 listed by domain dnsbl.sorbs.net as 127.0.0.10 Jul 14 22:51:02 h2421860 postfix/dnsblog[28343]: addr 109.152.241.126 listed by domain b.barracudacentral.org as 127.0.0.2 Jul 14 22:51:08 h2421860 postfix/postscreen[28338]: DNSBL rank 8 for [109.152.241.126]:17018 Jul x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=109.152.241.126 |
2019-07-15 12:56:44 |
| 185.58.205.10 | attackbots | Jul 14 07:11:29 PiServer sshd[26108]: Invalid user logcheck-82.25.201.216 from 185.58.205.10 Jul 14 07:11:31 PiServer sshd[26108]: Failed password for invalid user logcheck-82.25.201.216 from 185.58.205.10 port 59166 ssh2 Jul 14 18:28:52 PiServer sshd[13596]: Invalid user 123 from 185.58.205.10 Jul 14 18:28:54 PiServer sshd[13596]: Failed password for invalid user 123 from 185.58.205.10 port 33686 ssh2 Jul 14 18:28:59 PiServer sshd[13602]: Invalid user Admin from 185.58.205.10 Jul 14 18:29:02 PiServer sshd[13602]: Failed password for invalid user Admin from 185.58.205.10 port 34596 ssh2 Jul 14 18:29:06 PiServer sshd[13608]: Invalid user RPM from 185.58.205.10 Jul 14 18:29:10 PiServer sshd[13608]: Failed password for invalid user RPM from 185.58.205.10 port 35060 ssh2 Jul 14 19:04:55 PiServer sshd[14540]: Invalid user alex from 185.58.205.10 Jul 14 19:04:57 PiServer sshd[14540]: Failed password for invalid user alex from 185.58.205.10 port 32976 ssh2 Jul 14 19:05:01 PiSer........ ------------------------------ |
2019-07-15 12:49:28 |
| 190.109.43.157 | attack | Jul 14 22:50:48 rigel postfix/smtpd[10048]: connect from unknown[190.109.43.157] Jul 14 22:50:51 rigel postfix/smtpd[10048]: warning: unknown[190.109.43.157]: SASL CRAM-MD5 authentication failed: authentication failure Jul 14 22:50:51 rigel postfix/smtpd[10048]: warning: unknown[190.109.43.157]: SASL PLAIN authentication failed: authentication failure Jul 14 22:50:53 rigel postfix/smtpd[10048]: warning: unknown[190.109.43.157]: SASL LOGIN authentication failed: authentication failure ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=190.109.43.157 |
2019-07-15 12:52:44 |