城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 30.196.82.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15961
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;30.196.82.139. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025010602 1800 900 604800 86400
;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 07 11:58:00 CST 2025
;; MSG SIZE rcvd: 106Host 139.82.196.30.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 139.82.196.30.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 212.119.194.155 | attackspambots | Splunk® : port scan detected: Jul 19 21:22:55 testbed kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:64:c3:d6:0b:ef:f0:08:00 SRC=212.119.194.155 DST=104.248.11.191 LEN=44 TOS=0x00 PREC=0x00 TTL=55 ID=10519 PROTO=TCP SPT=45068 DPT=60001 WINDOW=41500 RES=0x00 SYN URGP=0 |
2019-07-20 17:44:46 |
| 5.16.70.207 | attackspambots | Jul 20 03:19:17 mxgate1 postfix/postscreen[22477]: CONNECT from [5.16.70.207]:55103 to [176.31.12.44]:25 Jul 20 03:19:17 mxgate1 postfix/dnsblog[22496]: addr 5.16.70.207 listed by domain cbl.abuseat.org as 127.0.0.2 Jul 20 03:19:18 mxgate1 postfix/postscreen[22477]: PREGREET 18 after 0.6 from [5.16.70.207]:55103: HELO xiixaku.com Jul 20 03:19:18 mxgate1 postfix/dnsblog[22492]: addr 5.16.70.207 listed by domain zen.spamhaus.org as 127.0.0.3 Jul 20 03:19:18 mxgate1 postfix/dnsblog[22492]: addr 5.16.70.207 listed by domain zen.spamhaus.org as 127.0.0.4 Jul 20 03:19:18 mxgate1 postfix/postscreen[22477]: DNSBL rank 3 for [5.16.70.207]:55103 Jul x@x Jul 20 03:19:20 mxgate1 postfix/postscreen[22477]: HANGUP after 1.6 from [5.16.70.207]:55103 in tests after SMTP handshake Jul 20 03:19:20 mxgate1 postfix/postscreen[22477]: DISCONNECT [5.16.70.207]:55103 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=5.16.70.207 |
2019-07-20 17:19:16 |
| 189.50.1.226 | attack | Jul 20 11:40:37 legacy sshd[12957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.50.1.226 Jul 20 11:40:39 legacy sshd[12957]: Failed password for invalid user silvia from 189.50.1.226 port 8794 ssh2 Jul 20 11:46:22 legacy sshd[13115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.50.1.226 ... |
2019-07-20 17:52:42 |
| 37.39.67.232 | attackspam | "SMTPD" 2392 16543 "2019-07-20 x@x "SMTPD" 2392 16543 "2019-07-20 03:19:00.061" "37.39.67.232" "SENT: 550 Delivery is not allowed to this address." IP Address: 37.39.67.232 Email x@x No MX record resolves to this server for domain: opvakantievanafeelde.nl ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=37.39.67.232 |
2019-07-20 17:10:12 |
| 218.92.1.130 | attackbotsspam | Jul 20 04:55:14 TORMINT sshd\[7075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.130 user=root Jul 20 04:55:16 TORMINT sshd\[7075\]: Failed password for root from 218.92.1.130 port 22721 ssh2 Jul 20 04:58:53 TORMINT sshd\[7200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.130 user=root ... |
2019-07-20 17:02:11 |
| 218.92.0.137 | attackspambots | Jul 20 09:28:51 debian64 sshd\[29854\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.137 user=root Jul 20 09:28:53 debian64 sshd\[29854\]: Failed password for root from 218.92.0.137 port 43739 ssh2 Jul 20 09:28:56 debian64 sshd\[29854\]: Failed password for root from 218.92.0.137 port 43739 ssh2 ... |
2019-07-20 17:49:44 |
| 218.92.0.193 | attack | Jul 20 11:40:28 SilenceServices sshd[17221]: Failed password for root from 218.92.0.193 port 37264 ssh2 Jul 20 11:40:44 SilenceServices sshd[17221]: error: maximum authentication attempts exceeded for root from 218.92.0.193 port 37264 ssh2 [preauth] Jul 20 11:40:53 SilenceServices sshd[17501]: Failed password for root from 218.92.0.193 port 58829 ssh2 |
2019-07-20 17:46:11 |
| 211.23.160.131 | attackspam | Scanning random ports - tries to find possible vulnerable services |
2019-07-20 17:13:05 |
| 200.172.91.170 | attackbots | Jul 20 11:07:20 icinga sshd[30524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.172.91.170 Jul 20 11:07:22 icinga sshd[30524]: Failed password for invalid user ams from 200.172.91.170 port 53483 ssh2 ... |
2019-07-20 17:58:05 |
| 186.84.88.94 | attack | "SMTPD" 4488 16550 "2019-07-20 x@x "SMTPD" 4488 16550 "2019-07-20 03:19:04.273" "186.84.88.94" "SENT: 550 Delivery is not allowed to this address." IP Address: 186.84.88.94 Email x@x No MX record resolves to this server for domain: opvakantievanafmaastricht.nl ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=186.84.88.94 |
2019-07-20 17:14:14 |
| 223.221.206.177 | attackspam | Jul 20 03:22:19 localhost postfix/smtpd\[31599\]: warning: unknown\[223.221.206.177\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 20 03:23:05 localhost postfix/smtpd\[31587\]: warning: unknown\[223.221.206.177\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 20 03:23:30 localhost postfix/smtpd\[31599\]: warning: unknown\[223.221.206.177\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 20 03:24:01 localhost postfix/smtpd\[31587\]: warning: unknown\[223.221.206.177\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 20 03:24:18 localhost postfix/smtpd\[31599\]: warning: unknown\[223.221.206.177\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-07-20 17:07:43 |
| 94.23.254.125 | attackbotsspam | Automatic report - Banned IP Access |
2019-07-20 17:28:51 |
| 88.214.26.171 | attack | Jul 20 10:59:36 mail sshd\[23844\]: Invalid user admin from 88.214.26.171 Jul 20 10:59:36 mail sshd\[23844\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.214.26.171 Jul 20 10:59:38 mail sshd\[23844\]: Failed password for invalid user admin from 88.214.26.171 port 54407 ssh2 ... |
2019-07-20 17:53:08 |
| 189.89.217.124 | attack | $f2bV_matches |
2019-07-20 17:06:01 |
| 54.39.138.246 | attack | Jul 16 15:13:30 itv-usvr-01 sshd[8641]: Invalid user factorio from 54.39.138.246 Jul 16 15:13:30 itv-usvr-01 sshd[8641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.138.246 Jul 16 15:13:30 itv-usvr-01 sshd[8641]: Invalid user factorio from 54.39.138.246 Jul 16 15:13:32 itv-usvr-01 sshd[8641]: Failed password for invalid user factorio from 54.39.138.246 port 45126 ssh2 |
2019-07-20 17:04:55 |