城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.4.253.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52225
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.4.253.138. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012301 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 03:47:50 CST 2025
;; MSG SIZE rcvd: 105Host 138.253.4.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 138.253.4.42.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 177.143.14.234 | attackspam | 2020-09-30 07:51:46.479513-0500 localhost sshd[2323]: Failed password for invalid user install from 177.143.14.234 port 50012 ssh2 |
2020-09-30 21:03:50 |
| 206.189.2.54 | attackbotsspam | WordPress login Brute force / Web App Attack on client site. |
2020-09-30 21:15:01 |
| 142.93.56.57 | attackspambots | Failed password for root from 142.93.56.57 port 48550 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57 Failed password for invalid user postgres from 142.93.56.57 port 58374 ssh2 |
2020-09-30 21:26:13 |
| 218.25.161.226 | attackspam | (smtpauth) Failed SMTP AUTH login from 218.25.161.226 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-09-30 08:11:09 dovecot_login authenticator failed for (lasgaviotasrosarito.com) [218.25.161.226]:56470: 535 Incorrect authentication data (set_id=nologin) 2020-09-30 08:11:33 dovecot_login authenticator failed for (lasgaviotasrosarito.com) [218.25.161.226]:59005: 535 Incorrect authentication data (set_id=abuse@lasgaviotasrosarito.com) 2020-09-30 08:11:57 dovecot_login authenticator failed for (lasgaviotasrosarito.com) [218.25.161.226]:33306: 535 Incorrect authentication data (set_id=abuse) 2020-09-30 08:45:44 dovecot_login authenticator failed for (rosaritoriviera.com) [218.25.161.226]:50749: 535 Incorrect authentication data (set_id=nologin) 2020-09-30 08:46:08 dovecot_login authenticator failed for (rosaritoriviera.com) [218.25.161.226]:53051: 535 Incorrect authentication data (set_id=abuse@rosaritoriviera.com) |
2020-09-30 21:01:11 |
| 222.186.42.155 | attackspambots | 2020-09-30T12:55:14.612133shield sshd\[9231\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.155 user=root 2020-09-30T12:55:16.900538shield sshd\[9231\]: Failed password for root from 222.186.42.155 port 62847 ssh2 2020-09-30T12:55:19.174368shield sshd\[9231\]: Failed password for root from 222.186.42.155 port 62847 ssh2 2020-09-30T12:55:21.392791shield sshd\[9231\]: Failed password for root from 222.186.42.155 port 62847 ssh2 2020-09-30T12:55:53.840727shield sshd\[9274\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.155 user=root |
2020-09-30 21:07:27 |
| 136.49.109.217 | attackbotsspam | 2020-09-30 12:11:25,594 fail2ban.actions: WARNING [ssh] Ban 136.49.109.217 |
2020-09-30 21:17:34 |
| 195.54.161.58 | attackbots | Sep 30 13:47:34 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=195.54.161.58 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=13992 PROTO=TCP SPT=40907 DPT=5577 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 30 14:40:12 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=195.54.161.58 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=21863 PROTO=TCP SPT=40907 DPT=4001 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 30 15:00:30 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=195.54.161.58 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=20876 PROTO=TCP SPT=40907 DPT=3396 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 30 15:08:20 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:30:e4:db:97:3e:3f:08:00 SRC=195.54.161.58 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=27277 PROTO=TCP SPT=40907 DPT=50408 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 30 ... |
2020-09-30 21:24:07 |
| 180.76.148.147 | attackspambots | Found on CINS badguys / proto=6 . srcport=49294 . dstport=2672 . (761) |
2020-09-30 20:57:19 |
| 200.73.128.148 | attack | Invalid user pdv from 200.73.128.148 port 39472 |
2020-09-30 20:53:03 |
| 121.87.237.12 | attackbotsspam | 121.87.237.12 (JP/Japan/121-87-237-12f1.osk2.eonet.ne.jp), 3 distributed sshd attacks on account [pi] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 30 07:56:39 internal2 sshd[32187]: Invalid user pi from 121.87.237.12 port 47630 Sep 30 07:52:22 internal2 sshd[30871]: Invalid user pi from 81.3.204.175 port 56616 Sep 30 07:52:22 internal2 sshd[30878]: Invalid user pi from 81.3.204.175 port 56630 IP Addresses Blocked: |
2020-09-30 21:25:19 |
| 189.7.25.246 | attackspambots | Invalid user sk from 189.7.25.246 port 43405 |
2020-09-30 21:03:34 |
| 201.46.29.184 | attackspam | Sep 30 09:04:09 ny01 sshd[30367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.46.29.184 Sep 30 09:04:12 ny01 sshd[30367]: Failed password for invalid user nagios from 201.46.29.184 port 44544 ssh2 Sep 30 09:10:38 ny01 sshd[31224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.46.29.184 |
2020-09-30 21:22:48 |
| 113.88.210.48 | attackspam | 1601411991 - 09/29/2020 22:39:51 Host: 113.88.210.48/113.88.210.48 Port: 445 TCP Blocked |
2020-09-30 21:11:41 |
| 189.86.159.74 | attackspambots | Icarus honeypot on github |
2020-09-30 20:48:18 |
| 157.230.27.30 | attack | 157.230.27.30 - - [30/Sep/2020:13:12:59 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.230.27.30 - - [30/Sep/2020:13:13:02 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.230.27.30 - - [30/Sep/2020:13:13:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-30 21:29:12 |