城市(city): unknown
省份(region): unknown
国家(country): Singapore
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 43.125.67.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62831
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;43.125.67.138. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012800 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 28 22:18:19 CST 2025
;; MSG SIZE rcvd: 106Host 138.67.125.43.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 138.67.125.43.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 185.153.199.2 | attackbotsspam | Nov 5 23:21:46 h2177944 kernel: \[5868150.060720\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.199.2 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=37196 PROTO=TCP SPT=49702 DPT=51000 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 5 23:34:38 h2177944 kernel: \[5868921.533122\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.199.2 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=35661 PROTO=TCP SPT=49702 DPT=7000 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 5 23:36:13 h2177944 kernel: \[5869016.284154\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.199.2 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=59793 PROTO=TCP SPT=49702 DPT=19999 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 00:14:28 h2177944 kernel: \[5871310.634768\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.199.2 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=10983 PROTO=TCP SPT=49702 DPT=2012 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 00:20:09 h2177944 kernel: \[5871652.239228\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.153.199.2 DST=85.214.117 |
2019-11-06 07:45:16 |
| 89.248.160.178 | attack | Excessive Port-Scanning |
2019-11-06 07:53:08 |
| 144.34.221.47 | attack | Nov 5 23:55:03 game-panel sshd[2553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.221.47 Nov 5 23:55:05 game-panel sshd[2553]: Failed password for invalid user temp1 from 144.34.221.47 port 41188 ssh2 Nov 5 23:58:54 game-panel sshd[2632]: Failed password for root from 144.34.221.47 port 51538 ssh2 |
2019-11-06 07:59:04 |
| 185.53.88.76 | attackspam | \[2019-11-05 18:36:35\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-05T18:36:35.524-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="9441603976936",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.76/52591",ACLName="no_extension_match" \[2019-11-05 18:39:29\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-05T18:39:29.645-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441603976936",SessionID="0x7fdf2c210f68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.76/55323",ACLName="no_extension_match" \[2019-11-05 18:42:14\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-05T18:42:14.714-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441603976936",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.76/49308",ACLName="no_extensi |
2019-11-06 07:48:26 |
| 177.189.73.81 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/177.189.73.81/ BR - 1H : (341) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN27699 IP : 177.189.73.81 CIDR : 177.189.0.0/16 PREFIX COUNT : 267 UNIQUE IP COUNT : 6569728 ATTACKS DETECTED ASN27699 : 1H - 7 3H - 19 6H - 30 12H - 61 24H - 145 DateTime : 2019-11-05 23:37:04 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery |
2019-11-06 07:57:28 |
| 190.5.241.138 | attack | Nov 6 00:38:26 MK-Soft-VM4 sshd[21146]: Failed password for root from 190.5.241.138 port 49370 ssh2 ... |
2019-11-06 07:51:05 |
| 62.234.66.145 | attackspambots | Nov 6 00:42:47 vps691689 sshd[24838]: Failed password for root from 62.234.66.145 port 58093 ssh2 Nov 6 00:47:14 vps691689 sshd[24884]: Failed password for root from 62.234.66.145 port 48554 ssh2 ... |
2019-11-06 07:54:23 |
| 183.203.170.242 | attackbotsspam | Nov 5 23:37:27 ns3367391 proftpd[6364]: 127.0.0.1 (183.203.170.242[183.203.170.242]) - USER yourdailypornvideos: no such user found from 183.203.170.242 [183.203.170.242] to 37.187.78.186:21 Nov 5 23:37:28 ns3367391 proftpd[6367]: 127.0.0.1 (183.203.170.242[183.203.170.242]) - USER yourdailypornvideos: no such user found from 183.203.170.242 [183.203.170.242] to 37.187.78.186:21 ... |
2019-11-06 07:47:44 |
| 80.211.95.201 | attack | 2019-11-05T23:27:29.763859hub.schaetter.us sshd\[1983\]: Invalid user betsabe from 80.211.95.201 port 59582 2019-11-05T23:27:29.774432hub.schaetter.us sshd\[1983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.95.201 2019-11-05T23:27:31.859389hub.schaetter.us sshd\[1983\]: Failed password for invalid user betsabe from 80.211.95.201 port 59582 ssh2 2019-11-05T23:31:09.934564hub.schaetter.us sshd\[2005\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.95.201 user=root 2019-11-05T23:31:11.888998hub.schaetter.us sshd\[2005\]: Failed password for root from 80.211.95.201 port 41038 ssh2 ... |
2019-11-06 07:39:43 |
| 106.13.23.105 | attackspambots | 2019-11-05T23:43:10.341024shield sshd\[23021\]: Invalid user denilson from 106.13.23.105 port 42830 2019-11-05T23:43:10.345286shield sshd\[23021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.23.105 2019-11-05T23:43:12.283802shield sshd\[23021\]: Failed password for invalid user denilson from 106.13.23.105 port 42830 ssh2 2019-11-05T23:47:53.208894shield sshd\[23827\]: Invalid user logan from 106.13.23.105 port 52034 2019-11-05T23:47:53.213269shield sshd\[23827\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.23.105 |
2019-11-06 08:04:20 |
| 222.186.175.212 | attackbotsspam | Nov 5 10:17:06 debian sshd[22446]: Unable to negotiate with 222.186.175.212 port 19702: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] Nov 5 18:31:01 debian sshd[31004]: Unable to negotiate with 222.186.175.212 port 50820: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 [preauth] ... |
2019-11-06 07:34:12 |
| 132.232.66.60 | attackspambots | Port Scans detected and blocked. |
2019-11-06 07:39:06 |
| 222.186.175.151 | attackbots | Nov 5 13:45:40 web1 sshd\[16472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root Nov 5 13:45:43 web1 sshd\[16472\]: Failed password for root from 222.186.175.151 port 54254 ssh2 Nov 5 13:46:00 web1 sshd\[16472\]: Failed password for root from 222.186.175.151 port 54254 ssh2 Nov 5 13:46:08 web1 sshd\[16510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root Nov 5 13:46:10 web1 sshd\[16510\]: Failed password for root from 222.186.175.151 port 51326 ssh2 |
2019-11-06 07:53:24 |
| 45.136.110.24 | attackbots | Nov 6 00:05:40 h2177944 kernel: \[5870782.767611\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.24 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=8035 PROTO=TCP SPT=47877 DPT=47289 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 00:18:02 h2177944 kernel: \[5871524.668095\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.24 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=50604 PROTO=TCP SPT=47877 DPT=58689 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 00:20:39 h2177944 kernel: \[5871682.443339\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.24 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=25753 PROTO=TCP SPT=47877 DPT=29689 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 00:30:37 h2177944 kernel: \[5872279.736712\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.24 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=63283 PROTO=TCP SPT=47877 DPT=35089 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 6 00:48:46 h2177944 kernel: \[5873368.569353\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.110.24 DST=85.214.11 |
2019-11-06 08:05:55 |
| 46.38.144.32 | attack | Nov 6 00:50:24 relay postfix/smtpd\[27132\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 6 00:51:08 relay postfix/smtpd\[31113\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 6 00:51:34 relay postfix/smtpd\[27132\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 6 00:52:17 relay postfix/smtpd\[22570\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 6 00:52:43 relay postfix/smtpd\[24690\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-11-06 07:54:51 |