城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 44.92.69.160
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65240
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;44.92.69.160. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012401 1800 900 604800 86400
;; Query time: 43 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 25 01:51:10 CST 2025
;; MSG SIZE rcvd: 105Host 160.69.92.44.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 160.69.92.44.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 185.176.27.170 | attack | Dec 31 10:43:06 mail kernel: [9165480.283695] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.170 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=31265 PROTO=TCP SPT=45121 DPT=27367 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 31 10:45:19 mail kernel: [9165613.936830] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.170 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54047 PROTO=TCP SPT=45121 DPT=62004 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 31 10:47:13 mail kernel: [9165728.040513] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.170 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=23334 PROTO=TCP SPT=45121 DPT=31443 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 31 10:47:31 mail kernel: [9165745.681412] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.170 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=50880 PROTO=TCP SPT=45121 DPT=46113 WINDOW=1024 RES=0 |
2019-12-31 19:06:02 |
| 185.86.181.89 | attackspam | Honeypot attack, port: 445, PTR: parsonline.dn-server.com. |
2019-12-31 19:12:16 |
| 45.79.45.69 | attackbots | Scanning random ports - tries to find possible vulnerable services |
2019-12-31 18:57:54 |
| 212.48.251.69 | attackbots | Lines containing failures of 212.48.251.69 Dec 31 07:05:02 omfg postfix/smtpd[26660]: connect from catv-212-48-251-69.catv.broadband.hu[212.48.251.69] Dec x@x Dec 31 07:05:13 omfg postfix/smtpd[26660]: lost connection after DATA from catv-212-48-251-69.catv.broadband.hu[212.48.251.69] Dec 31 07:05:13 omfg postfix/smtpd[26660]: disconnect from catv-212-48-251-69.catv.broadband.hu[212.48.251.69] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=212.48.251.69 |
2019-12-31 19:22:00 |
| 185.143.223.81 | attackbotsspam | Dec 31 10:52:27 h2177944 kernel: \[984599.686730\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=15093 PROTO=TCP SPT=42818 DPT=40711 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 31 10:52:27 h2177944 kernel: \[984599.686744\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=15093 PROTO=TCP SPT=42818 DPT=40711 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 31 10:55:54 h2177944 kernel: \[984806.562446\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=22342 PROTO=TCP SPT=42818 DPT=5331 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 31 10:55:54 h2177944 kernel: \[984806.562462\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=22342 PROTO=TCP SPT=42818 DPT=5331 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 31 10:58:58 h2177944 kernel: \[984990.653388\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.143.223.81 DST=85.214.117 |
2019-12-31 18:58:14 |
| 41.60.233.61 | attackbotsspam | Dec 30 18:13:53 our-server-hostname postfix/smtpd[29392]: connect from unknown[41.60.233.61] Dec x@x Dec 30 18:13:56 our-server-hostname postfix/smtpd[29392]: lost connection after RCPT from unknown[41.60.233.61] Dec 30 18:13:56 our-server-hostname postfix/smtpd[29392]: disconnect from unknown[41.60.233.61] Dec 30 21:56:46 our-server-hostname postfix/smtpd[3814]: connect from unknown[41.60.233.61] Dec x@x Dec x@x Dec x@x Dec x@x Dec 30 21:56:52 our-server-hostname postfix/smtpd[3814]: lost connection after RCPT from unknown[41.60.233.61] Dec 30 21:56:52 our-server-hostname postfix/smtpd[3814]: disconnect from unknown[41.60.233.61] Dec 30 23:53:28 our-server-hostname postfix/smtpd[11213]: connect from unknown[41.60.233.61] Dec x@x Dec x@x Dec x@x Dec 30 23:53:33 our-server-hostname postfix/smtpd[11213]: lost connection after RCPT from unknown[41.60.233.61] Dec 30 23:53:33 our-server-hostname postfix/smtpd[11213]: disconnect from unknown[41.60.233.61] Dec 30 23:59:13 our-........ ------------------------------- |
2019-12-31 18:45:27 |
| 182.84.125.15 | attack | Dec 30 20:33:02 kmh-wmh-003-nbg03 sshd[7205]: Invalid user pi from 182.84.125.15 port 46016 Dec 30 20:33:02 kmh-wmh-003-nbg03 sshd[7203]: Invalid user pi from 182.84.125.15 port 46014 Dec 30 20:33:02 kmh-wmh-003-nbg03 sshd[7205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.84.125.15 Dec 30 20:33:02 kmh-wmh-003-nbg03 sshd[7203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.84.125.15 Dec 30 20:33:04 kmh-wmh-003-nbg03 sshd[7205]: Failed password for invalid user pi from 182.84.125.15 port 46016 ssh2 Dec 30 20:33:05 kmh-wmh-003-nbg03 sshd[7203]: Failed password for invalid user pi from 182.84.125.15 port 46014 ssh2 Dec 30 20:33:05 kmh-wmh-003-nbg03 sshd[7205]: Connection closed by 182.84.125.15 port 46016 [preauth] Dec 30 20:33:05 kmh-wmh-003-nbg03 sshd[7203]: Connection closed by 182.84.125.15 port 46014 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=182.84 |
2019-12-31 18:50:07 |
| 45.156.195.75 | attack | Unauthorized connection attempt detected from IP address 45.156.195.75 to port 80 |
2019-12-31 19:15:16 |
| 49.77.217.31 | attack | SSH/22 MH Probe, BF, Hack - |
2019-12-31 19:08:33 |
| 185.156.73.64 | attackspambots | 12/31/2019-05:08:59.937589 185.156.73.64 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-12-31 19:09:03 |
| 148.255.200.125 | attack | firewall-block, port(s): 445/tcp |
2019-12-31 19:18:51 |
| 113.1.40.39 | attack | Scanning |
2019-12-31 19:20:41 |
| 189.210.53.176 | attackspambots | Automatic report - Port Scan Attack |
2019-12-31 18:56:14 |
| 113.22.16.120 | attack | Honeypot attack, port: 23, PTR: PTR record not found |
2019-12-31 18:53:31 |
| 58.219.101.53 | attackbotsspam | Scanning |
2019-12-31 18:58:35 |