城市(city): unknown
省份(region): unknown
国家(country): Brazil
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.70.142.32
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6748
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;45.70.142.32. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 11:52:45 CST 2025
;; MSG SIZE rcvd: 10532.142.70.45.in-addr.arpa domain name pointer 45-70-142-32-cliente.megalinkwifi.com.br.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
32.142.70.45.in-addr.arpa name = 45-70-142-32-cliente.megalinkwifi.com.br.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 37.135.117.97 | attackbots | Nov 11 04:29:05 Tower sshd[37434]: Connection from 37.135.117.97 port 60808 on 192.168.10.220 port 22 Nov 11 04:29:06 Tower sshd[37434]: Invalid user backup from 37.135.117.97 port 60808 Nov 11 04:29:06 Tower sshd[37434]: error: Could not get shadow information for NOUSER Nov 11 04:29:06 Tower sshd[37434]: Failed password for invalid user backup from 37.135.117.97 port 60808 ssh2 Nov 11 04:29:06 Tower sshd[37434]: Received disconnect from 37.135.117.97 port 60808:11: Bye Bye [preauth] Nov 11 04:29:06 Tower sshd[37434]: Disconnected from invalid user backup 37.135.117.97 port 60808 [preauth] |
2019-11-11 18:05:00 |
| 188.131.179.87 | attack | Nov 10 23:54:13 eddieflores sshd\[22777\]: Invalid user p@ssw0rD from 188.131.179.87 Nov 10 23:54:13 eddieflores sshd\[22777\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.179.87 Nov 10 23:54:15 eddieflores sshd\[22777\]: Failed password for invalid user p@ssw0rD from 188.131.179.87 port 44091 ssh2 Nov 10 23:58:34 eddieflores sshd\[23158\]: Invalid user gtmp from 188.131.179.87 Nov 10 23:58:34 eddieflores sshd\[23158\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.179.87 |
2019-11-11 18:28:06 |
| 216.66.115.243 | attackspam | PHI,WP GET /wp-login.php |
2019-11-11 17:48:48 |
| 104.37.47.7 | attackspam | *Port Scan* detected from 104.37.47.7 (US/United States/104-37-47-7-host.colocrossing.com). 4 hits in the last 216 seconds |
2019-11-11 18:19:56 |
| 46.32.208.237 | attackspambots | Automatic report - Port Scan Attack |
2019-11-11 17:53:33 |
| 107.189.10.141 | attackbotsspam | Invalid user fake from 107.189.10.141 port 55932 |
2019-11-11 17:58:11 |
| 185.227.188.167 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/185.227.188.167/ PL - 1H : (127) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : PL NAME ASN : ASN205146 IP : 185.227.188.167 CIDR : 185.227.188.0/22 PREFIX COUNT : 1 UNIQUE IP COUNT : 1024 ATTACKS DETECTED ASN205146 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-11 07:25:06 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-11 18:16:24 |
| 103.102.238.10 | attack | 2019-11-11 06:15:49 H=server5.lepthostnameoxnutrhostnameion.net [103.102.238.10]:38480 I=[10.100.18.21]:25 F= |
2019-11-11 18:05:47 |
| 142.93.83.218 | attackbotsspam | *Port Scan* detected from 142.93.83.218 (US/United States/-). 4 hits in the last 260 seconds |
2019-11-11 18:18:56 |
| 176.97.190.75 | attack | [portscan] Port scan |
2019-11-11 18:24:44 |
| 80.211.86.245 | attack | Nov 11 06:21:32 ws19vmsma01 sshd[57550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.86.245 Nov 11 06:21:34 ws19vmsma01 sshd[57550]: Failed password for invalid user shiro from 80.211.86.245 port 36352 ssh2 ... |
2019-11-11 18:10:39 |
| 206.189.52.160 | attackbots | miraniessen.de 206.189.52.160 \[11/Nov/2019:07:25:28 +0100\] "POST /wp-login.php HTTP/1.1" 200 5974 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" miraniessen.de 206.189.52.160 \[11/Nov/2019:07:25:33 +0100\] "POST /wp-login.php HTTP/1.1" 200 5975 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-11 17:59:57 |
| 91.232.196.249 | attackspambots | (sshd) Failed SSH login from 91.232.196.249 (RU/Russia/venbanise.naumen.ru): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 11 09:59:05 s1 sshd[27432]: Invalid user shiquan from 91.232.196.249 port 49238 Nov 11 09:59:07 s1 sshd[27432]: Failed password for invalid user shiquan from 91.232.196.249 port 49238 ssh2 Nov 11 10:22:06 s1 sshd[27935]: Invalid user 00 from 91.232.196.249 port 44188 Nov 11 10:22:08 s1 sshd[27935]: Failed password for invalid user 00 from 91.232.196.249 port 44188 ssh2 Nov 11 10:25:48 s1 sshd[28005]: Invalid user bbbbbbb from 91.232.196.249 port 52968 |
2019-11-11 18:01:29 |
| 54.37.8.91 | attackbots | 2019-11-11T03:01:19.861684ns547587 sshd\[3954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.ip-54-37-8.eu user=apache 2019-11-11T03:01:21.448172ns547587 sshd\[3954\]: Failed password for apache from 54.37.8.91 port 34326 ssh2 2019-11-11T03:04:34.898837ns547587 sshd\[9417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.ip-54-37-8.eu user=root 2019-11-11T03:04:37.253170ns547587 sshd\[9417\]: Failed password for root from 54.37.8.91 port 42676 ssh2 ... |
2019-11-11 17:53:52 |
| 114.99.15.132 | attackbotsspam | Nov 11 01:24:49 esmtp postfix/smtpd[28674]: lost connection after AUTH from unknown[114.99.15.132] Nov 11 01:24:51 esmtp postfix/smtpd[28674]: lost connection after AUTH from unknown[114.99.15.132] Nov 11 01:24:53 esmtp postfix/smtpd[28674]: lost connection after AUTH from unknown[114.99.15.132] Nov 11 01:24:55 esmtp postfix/smtpd[28842]: lost connection after AUTH from unknown[114.99.15.132] Nov 11 01:24:59 esmtp postfix/smtpd[28674]: lost connection after AUTH from unknown[114.99.15.132] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=114.99.15.132 |
2019-11-11 18:20:47 |