城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 55.91.255.150
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44414
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;55.91.255.150. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020400 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 15:11:51 CST 2025
;; MSG SIZE rcvd: 106Host 150.255.91.55.in-addr.arpa not found: 2(SERVFAIL)
server can't find 55.91.255.150.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 213.32.122.80 | attackspambots | " " |
2019-09-12 00:54:07 |
| 88.198.99.142 | attackspambots | Sep 11 17:30:26 mail sshd\[27807\]: Invalid user factorio from 88.198.99.142 port 53368 Sep 11 17:30:26 mail sshd\[27807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.198.99.142 Sep 11 17:30:29 mail sshd\[27807\]: Failed password for invalid user factorio from 88.198.99.142 port 53368 ssh2 Sep 11 17:36:20 mail sshd\[28594\]: Invalid user www-upload from 88.198.99.142 port 42616 Sep 11 17:36:20 mail sshd\[28594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.198.99.142 |
2019-09-11 23:46:15 |
| 89.248.174.219 | attackspambots | 09/11/2019-13:17:11.983699 89.248.174.219 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 100 |
2019-09-12 01:28:48 |
| 77.247.110.147 | attackbots | 5060/udp 5060/udp [2019-09-02/11]2pkt |
2019-09-12 01:32:18 |
| 159.203.199.156 | attack | Automated reporting of bulk port scanning |
2019-09-12 00:17:37 |
| 207.226.155.196 | attackspambots | Unauthorised access (Sep 11) SRC=207.226.155.196 LEN=40 TTL=243 ID=55254 TCP DPT=445 WINDOW=1024 SYN |
2019-09-12 00:54:29 |
| 92.53.65.97 | attackspam | RU - 1H : (139) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : RU NAME ASN : ASN49505 IP : 92.53.65.97 CIDR : 92.53.65.0/24 PREFIX COUNT : 347 UNIQUE IP COUNT : 124928 WYKRYTE ATAKI Z ASN49505 : 1H - 5 3H - 7 6H - 11 12H - 13 24H - 22 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-09-12 01:26:49 |
| 185.43.209.203 | attack | Sep 10 17:51:25 lenivpn01 kernel: \[363490.543736\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=185.43.209.203 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=53888 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 10 22:08:57 lenivpn01 kernel: \[378941.910288\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=185.43.209.203 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=58391 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 11 00:49:06 lenivpn01 kernel: \[388550.450612\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=185.43.209.203 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=41792 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 11 05:19:44 lenivpn01 kernel: \[404788.068085\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=185.43.209.203 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID ... |
2019-09-12 00:10:36 |
| 37.49.227.12 | attack | Honeypot attack, port: 81, PTR: PTR record not found |
2019-09-12 01:37:40 |
| 187.15.17.33 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-11 06:25:22,970 INFO [amun_request_handler] PortScan Detected on Port: 445 (187.15.17.33) |
2019-09-12 01:49:06 |
| 103.122.201.89 | attackbots | Automatic report - Port Scan Attack |
2019-09-11 23:36:27 |
| 88.255.199.45 | attackbots | Automatic report - Port Scan Attack |
2019-09-11 23:47:20 |
| 45.136.109.33 | attackspambots | Sep 11 18:24:59 mc1 kernel: \[769664.710925\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.33 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=8301 PROTO=TCP SPT=44546 DPT=2721 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 18:29:16 mc1 kernel: \[769921.516077\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.33 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=20316 PROTO=TCP SPT=44546 DPT=2289 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 18:30:56 mc1 kernel: \[770021.926485\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.33 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=53488 PROTO=TCP SPT=44546 DPT=2354 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-12 00:43:01 |
| 125.64.94.212 | attack | Sep 9 22:14:21 postfix postfix/smtpd\[8190\]: lost connection after EHLO from unknown\[125.64.94.212\] Sep 9 22:14:22 postfix postfix/smtpd\[8190\]: lost connection after UNKNOWN from unknown\[125.64.94.212\] ... |
2019-09-12 01:56:17 |
| 45.136.109.36 | attackspam | Sep 11 17:09:24 mc1 kernel: \[765130.010837\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.36 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=27833 PROTO=TCP SPT=44601 DPT=4331 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 17:11:26 mc1 kernel: \[765251.792766\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.36 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=23541 PROTO=TCP SPT=44601 DPT=4397 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 17:11:33 mc1 kernel: \[765258.258287\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.36 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=36978 PROTO=TCP SPT=44601 DPT=4472 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-12 00:41:39 |