城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 55.111.121.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34607
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;55.111.121.149. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 09:28:01 CST 2025
;; MSG SIZE rcvd: 107Host 149.121.111.55.in-addr.arpa not found: 2(SERVFAIL)
server can't find 55.111.121.149.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 14.233.125.57 | attackspam | Unauthorized connection attempt from IP address 14.233.125.57 on Port 445(SMB) |
2020-02-13 19:15:38 |
| 37.49.231.163 | attack | Feb 13 11:11:56 h2177944 kernel: \[4786688.365003\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=37.49.231.163 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=12600 PROTO=TCP SPT=41597 DPT=5038 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 13 11:11:56 h2177944 kernel: \[4786688.365018\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=37.49.231.163 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=12600 PROTO=TCP SPT=41597 DPT=5038 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 13 11:39:14 h2177944 kernel: \[4788326.674143\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=37.49.231.163 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=24463 PROTO=TCP SPT=49395 DPT=50802 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 13 11:39:14 h2177944 kernel: \[4788326.674159\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=37.49.231.163 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=24463 PROTO=TCP SPT=49395 DPT=50802 WINDOW=1024 RES=0x00 SYN URGP=0 Feb 13 11:47:04 h2177944 kernel: \[4788796.741228\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=37.49.231.163 DST=85.214.117 |
2020-02-13 18:52:34 |
| 170.253.6.125 | attack | Feb 13 09:52:02 v22018076622670303 sshd\[29031\]: Invalid user weblogic@123 from 170.253.6.125 port 52150 Feb 13 09:52:02 v22018076622670303 sshd\[29031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.253.6.125 Feb 13 09:52:04 v22018076622670303 sshd\[29031\]: Failed password for invalid user weblogic@123 from 170.253.6.125 port 52150 ssh2 ... |
2020-02-13 18:45:50 |
| 49.229.48.131 | attack | Unauthorized connection attempt from IP address 49.229.48.131 on Port 445(SMB) |
2020-02-13 19:14:34 |
| 36.66.69.33 | attackbots | "SSH brute force auth login attempt." |
2020-02-13 19:15:05 |
| 218.92.0.148 | attack | IP blocked |
2020-02-13 19:09:28 |
| 193.37.253.50 | spambotsattackproxy | port scan |
2020-02-13 18:46:06 |
| 128.199.184.127 | attackspam | $f2bV_matches | Triggered by Fail2Ban at Vostok web server |
2020-02-13 19:16:30 |
| 123.206.51.192 | attackspam | Automatic report - Banned IP Access |
2020-02-13 19:02:01 |
| 61.177.172.158 | attack | 2020-02-13T10:53:12.260098shield sshd\[26496\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.158 user=root 2020-02-13T10:53:14.534321shield sshd\[26496\]: Failed password for root from 61.177.172.158 port 35268 ssh2 2020-02-13T10:53:16.995408shield sshd\[26496\]: Failed password for root from 61.177.172.158 port 35268 ssh2 2020-02-13T10:53:19.203223shield sshd\[26496\]: Failed password for root from 61.177.172.158 port 35268 ssh2 2020-02-13T10:58:54.426899shield sshd\[26992\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.158 user=root |
2020-02-13 19:17:39 |
| 99.153.45.121 | attackspambots | Feb 13 11:44:07 localhost sshd\[23387\]: Invalid user homerj from 99.153.45.121 port 44990 Feb 13 11:44:07 localhost sshd\[23387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=99.153.45.121 Feb 13 11:44:09 localhost sshd\[23387\]: Failed password for invalid user homerj from 99.153.45.121 port 44990 ssh2 |
2020-02-13 19:05:11 |
| 159.65.69.32 | attackbots | 159.65.69.32 - - \[13/Feb/2020:09:02:48 +0100\] "POST /wp-login.php HTTP/1.0" 200 3080 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 159.65.69.32 - - \[13/Feb/2020:09:02:56 +0100\] "POST /wp-login.php HTTP/1.0" 200 3039 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 159.65.69.32 - - \[13/Feb/2020:09:03:03 +0100\] "POST /wp-login.php HTTP/1.0" 200 3048 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-02-13 18:51:29 |
| 112.78.4.147 | attack | Automatically reported by fail2ban report script (mx1) |
2020-02-13 18:55:26 |
| 95.173.1.126 | attack | My-Apache-Badbots (server1) |
2020-02-13 18:56:31 |
| 112.17.190.29 | attackspam | 2020-02-13T05:37:46.389960struts4.enskede.local sshd\[19697\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.17.190.29 user=root 2020-02-13T05:37:50.665130struts4.enskede.local sshd\[19697\]: Failed password for root from 112.17.190.29 port 14006 ssh2 2020-02-13T05:42:11.191996struts4.enskede.local sshd\[19718\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.17.190.29 user=root 2020-02-13T05:42:15.037948struts4.enskede.local sshd\[19718\]: Failed password for root from 112.17.190.29 port 22811 ssh2 2020-02-13T05:46:34.670831struts4.enskede.local sshd\[19743\]: Invalid user morgan from 112.17.190.29 port 31616 ... |
2020-02-13 19:08:20 |