城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 55.188.59.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42150
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;55.188.59.145. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 22:52:21 CST 2025
;; MSG SIZE rcvd: 106Host 145.59.188.55.in-addr.arpa not found: 2(SERVFAIL)
server can't find 55.188.59.145.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 68.183.130.128 | attack | Sep 14 18:45:44 host sshd[14477]: Failed password for root from 68.183.130.128 port 41102 ssh2 Sep 14 18:45:44 host sshd[14477]: Connection closed by authenticating user root 68.183.130.128 port 41102 [preauth] Sep 14 18:45:46 host unix_chkpwd[14482]: password check failed for user (root) Sep 14 18:45:46 host sshd[14480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.130.128 user=root Sep 14 18:45:47 host sshd[14480]: Failed password for root from 68.183.130.128 port 41156 ssh2 Sep 14 18:45:49 host sshd[14480]: Connection closed by authenticating user root 68.183.130.128 port 41156 [preauth] |
2022-09-15 11:25:11 |
| 196.189.91.71 | spambotsattackproxynormal | 196.189.91.71 |
2022-09-24 02:08:57 |
| 103.76.14.23 | spambotsattackproxynormal | Woy bangsat akun kuh balik aken ora sing smula,,tek edek edek sra bangsat weruh kita gh sra kuh |
2022-10-01 18:01:39 |
| 141.95.122.215 | attack | Port Scan |
2022-09-22 12:35:18 |
| 45.93.16.76 | attack | Port scan |
2022-09-07 12:53:01 |
| 104.131.82.44 | attack | Scan port |
2022-09-07 12:57:00 |
| 2001:0002:14:5:1:2:bf35:2610 | spambotsattackproxynormal | 2001:0002:14:5:1:2:bf35:2610 |
2022-09-27 04:26:35 |
| 45.93.16.157 | attack | Scan port |
2022-09-08 12:33:36 |
| 103.76.14.23 | spamnormal | Woy bangsat akun kuh balik aken ora sing smula,,tek edek edek sra bangsat weruh kita gh sra kuh |
2022-10-01 18:00:54 |
| 104.168.243.221 | spam | Spammer using interterkgroup.org. [104.168.243.221] Blacklisted in https://multirbl.valli.org/lookup/104.168.243.221.html, https://cleantalk.org/blacklists/104.168.243.221#anc131368, https://www.liveipmap.com/104.168.243.221?lang=en_us |
2022-09-21 02:15:19 |
| 82.102.65.127 | spamattack | Someone going in my facebook with this ip code. And makeing problems |
2022-09-18 19:00:31 |
| 195.133.20.193 | attack | Router logs showing dos and port scanning [DoS attack: TCP Port Scan] from source: 195.133.20.193:65533 Sunday, September 18,2022 16:33:43 Im seeing a ton of initial hits by russian based ip.. followed up after infection by what seems to be chinese methods of digging in below the os and also building a complex networking system to remove chokepoints and provide redundancy.. its happening at scale im not a direct target just a vector potentially to get into very large corporate headquarters in the area.. have found this... well remote access trojan.. in 3 businesses all major transaction business and 2 with a ton of proprietary information and designs. This is alarming and no one seems to take it as serious as it is.. in my own home ive fiddle and tested what it can do and its jaw dropping.. the level of working knowledge across sooo many systems down to the chipset instruction codes and bootloader... even using a non-storage devices rom for other purposes and moving what was originally there to else where with a working path to retrieve it so they system and hardware continues to function as it should.. just with quirks all the while making a bios flash and entirely new drive and os media useless because the malware or rogue code goes into action long before the os does. |
2022-09-20 01:21:00 |
| 213.227.145.137 | attack | Port scan |
2022-09-13 12:30:45 |
| 165.22.88.4 | attack | Sep 23 13:27:16 host sshd[1603324]: Failed password for root from 165.22.88.4 port 46180 ssh2 Sep 23 13:27:16 host sshd[1603326]: Failed password for root from 165.22.88.4 port 46182 ssh2 Sep 23 13:27:16 host sshd[1603330]: Failed password for root from 165.22.88.4 port 46184 ssh2 Sep 23 13:27:16 host sshd[1603344]: Failed password for root from 165.22.88.4 port 46186 ssh2 |
2022-09-24 10:49:53 |
| 103.76.14.23 | spamnormal | Woy bangsat akun kuh balik aken ora sing smula,,tek edek edek sra bangsat weruh kita gh sra kuh |
2022-10-01 18:00:58 |