城市(city): unknown
省份(region): unknown
国家(country): Korea Republic of
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.13.29.90
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9144
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.13.29.90. IN A
;; AUTHORITY SECTION:
. 226 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020042501 1800 900 604800 86400
;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 26 03:08:30 CST 2020
;; MSG SIZE rcvd: 115Host 90.29.13.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 90.29.13.42.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 81.22.45.65 | attackspambots | Nov 11 01:10:52 h2177944 kernel: \[6306616.182039\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=40073 PROTO=TCP SPT=45579 DPT=62461 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 11 01:14:45 h2177944 kernel: \[6306849.093964\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=49162 PROTO=TCP SPT=45579 DPT=62053 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 11 01:17:25 h2177944 kernel: \[6307009.549212\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=6468 PROTO=TCP SPT=45579 DPT=61785 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 11 01:20:24 h2177944 kernel: \[6307188.655240\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.65 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=2488 PROTO=TCP SPT=45579 DPT=62470 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 11 01:20:25 h2177944 kernel: \[6307189.424999\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.65 DST=85.214.117.9 LEN=40 |
2019-11-11 08:28:31 |
| 185.216.40.160 | attackbots | Unauthorized connection attempt from IP address 185.216.40.160 on Port 445(SMB) |
2019-11-11 08:16:15 |
| 201.163.114.170 | attackspam | Unauthorized connection attempt from IP address 201.163.114.170 on Port 445(SMB) |
2019-11-11 08:38:06 |
| 117.6.130.56 | attackspam | Unauthorized connection attempt from IP address 117.6.130.56 on Port 445(SMB) |
2019-11-11 08:31:56 |
| 159.89.139.41 | attack | SSH brute-force: detected 12 distinct usernames within a 24-hour window. |
2019-11-11 08:27:08 |
| 42.201.253.162 | attackbotsspam | Nov 11 00:13:07 mxgate1 postfix/postscreen[12757]: CONNECT from [42.201.253.162]:30700 to [176.31.12.44]:25 Nov 11 00:13:07 mxgate1 postfix/dnsblog[12762]: addr 42.201.253.162 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 11 00:13:07 mxgate1 postfix/dnsblog[12758]: addr 42.201.253.162 listed by domain zen.spamhaus.org as 127.0.0.11 Nov 11 00:13:07 mxgate1 postfix/dnsblog[12758]: addr 42.201.253.162 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 11 00:13:07 mxgate1 postfix/dnsblog[12758]: addr 42.201.253.162 listed by domain zen.spamhaus.org as 127.0.0.3 Nov 11 00:13:07 mxgate1 postfix/dnsblog[12759]: addr 42.201.253.162 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Nov 11 00:13:07 mxgate1 postfix/dnsblog[12761]: addr 42.201.253.162 listed by domain bl.spamcop.net as 127.0.0.2 Nov 11 00:13:07 mxgate1 postfix/dnsblog[12760]: addr 42.201.253.162 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 11 00:13:13 mxgate1 postfix/postscreen[12757]: DNSBL rank 6 ........ ------------------------------- |
2019-11-11 08:34:16 |
| 177.207.249.96 | attackbots | ylmf-pc |
2019-11-11 08:39:30 |
| 222.73.236.95 | attackbotsspam | scan r |
2019-11-11 08:31:39 |
| 103.113.3.178 | attackspam | Unauthorized connection attempt from IP address 103.113.3.178 on Port 445(SMB) |
2019-11-11 08:08:02 |
| 13.233.26.227 | attackbotsspam | 2019-11-11T00:00:45.801474abusebot-4.cloudsearch.cf sshd\[17551\]: Invalid user nithin from 13.233.26.227 port 45760 |
2019-11-11 08:24:54 |
| 183.196.106.206 | attack | firewall-block, port(s): 23/tcp |
2019-11-11 08:22:02 |
| 171.229.235.115 | attackspam | Unauthorized connection attempt from IP address 171.229.235.115 on Port 445(SMB) |
2019-11-11 08:22:33 |
| 104.236.228.46 | attackspam | Automatic report - SSH Brute-Force Attack |
2019-11-11 08:17:40 |
| 5.196.18.169 | attackspambots | Nov 10 19:07:43 TORMINT sshd\[6147\]: Invalid user spark from 5.196.18.169 Nov 10 19:07:43 TORMINT sshd\[6147\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.18.169 Nov 10 19:07:46 TORMINT sshd\[6147\]: Failed password for invalid user spark from 5.196.18.169 port 60370 ssh2 ... |
2019-11-11 08:16:59 |
| 78.128.113.121 | attackspambots | 2019-11-11T00:54:30.417479mail01 postfix/smtpd[23464]: warning: unknown[78.128.113.121]: SASL PLAIN authentication failed: 2019-11-11T00:54:37.403961mail01 postfix/smtpd[7242]: warning: unknown[78.128.113.121]: SASL PLAIN authentication failed: 2019-11-11T01:00:47.479630mail01 postfix/smtpd[4064]: warning: unknown[78.128.113.121]: SASL PLAIN authentication failed: |
2019-11-11 08:20:30 |