城市(city): unknown
省份(region): unknown
国家(country): Türkiye
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 57.94.124.244
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48246
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;57.94.124.244. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021500 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 18:30:01 CST 2025
;; MSG SIZE rcvd: 106Host 244.124.94.57.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 244.124.94.57.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 141.136.84.235 | attack | Oct 13 13:46:56 mc1 kernel: \[2253597.520003\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=141.136.84.235 DST=159.69.205.51 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=50910 DF PROTO=TCP SPT=44072 DPT=5555 WINDOW=65535 RES=0x00 SYN URGP=0 Oct 13 13:46:57 mc1 kernel: \[2253598.116224\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=141.136.84.235 DST=159.69.205.51 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=50911 DF PROTO=TCP SPT=44072 DPT=5555 WINDOW=65535 RES=0x00 SYN URGP=0 Oct 13 13:46:59 mc1 kernel: \[2253600.104140\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=141.136.84.235 DST=159.69.205.51 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=50912 DF PROTO=TCP SPT=44072 DPT=5555 WINDOW=65535 RES=0x00 SYN URGP=0 ... |
2019-10-14 02:14:18 |
| 118.160.77.199 | attackbots | Unauthorised access (Oct 13) SRC=118.160.77.199 LEN=40 PREC=0x20 TTL=50 ID=61924 TCP DPT=23 WINDOW=53912 SYN |
2019-10-14 02:32:32 |
| 201.81.148.146 | attackbots | Oct 10 13:11:43 xxxxxxx8434580 sshd[14339]: reveeclipse mapping checking getaddrinfo for c9519492.virtua.com.br [201.81.148.146] failed - POSSIBLE BREAK-IN ATTEMPT! Oct 10 13:11:43 xxxxxxx8434580 sshd[14339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.81.148.146 user=r.r Oct 10 13:11:44 xxxxxxx8434580 sshd[14339]: Failed password for r.r from 201.81.148.146 port 39233 ssh2 Oct 10 13:11:44 xxxxxxx8434580 sshd[14339]: Received disconnect from 201.81.148.146: 11: Bye Bye [preauth] Oct 10 13:23:44 xxxxxxx8434580 sshd[14423]: reveeclipse mapping checking getaddrinfo for c9519492.virtua.com.br [201.81.148.146] failed - POSSIBLE BREAK-IN ATTEMPT! Oct 10 13:23:44 xxxxxxx8434580 sshd[14423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.81.148.146 user=r.r Oct 10 13:23:46 xxxxxxx8434580 sshd[14423]: Failed password for r.r from 201.81.148.146 port 12321 ssh2 Oct 10 13:23:46 xxxxxxx84........ ------------------------------- |
2019-10-14 02:32:01 |
| 137.74.115.225 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/137.74.115.225/ FR - 1H : (48) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : FR NAME ASN : ASN16276 IP : 137.74.115.225 CIDR : 137.74.0.0/16 PREFIX COUNT : 132 UNIQUE IP COUNT : 3052544 WYKRYTE ATAKI Z ASN16276 : 1H - 2 3H - 8 6H - 15 12H - 26 24H - 46 DateTime : 2019-10-13 13:47:45 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN - data recovery |
2019-10-14 01:51:29 |
| 90.206.249.69 | attackbots | SS5,WP GET /wp-login.php |
2019-10-14 02:22:31 |
| 188.254.0.112 | attackbotsspam | Triggered by Fail2Ban at Vostok web server |
2019-10-14 02:09:08 |
| 54.37.159.50 | attack | Oct 13 11:38:31 ip-172-31-62-245 sshd\[13645\]: Invalid user Roosevelt2017 from 54.37.159.50\ Oct 13 11:38:34 ip-172-31-62-245 sshd\[13645\]: Failed password for invalid user Roosevelt2017 from 54.37.159.50 port 35538 ssh2\ Oct 13 11:42:26 ip-172-31-62-245 sshd\[13743\]: Invalid user 123@Centos from 54.37.159.50\ Oct 13 11:42:28 ip-172-31-62-245 sshd\[13743\]: Failed password for invalid user 123@Centos from 54.37.159.50 port 47172 ssh2\ Oct 13 11:46:27 ip-172-31-62-245 sshd\[13772\]: Invalid user QweQweQwe from 54.37.159.50\ |
2019-10-14 02:28:59 |
| 31.17.26.190 | attack | Oct 13 13:46:38 MK-Soft-Root1 sshd[3020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.17.26.190 Oct 13 13:46:40 MK-Soft-Root1 sshd[3020]: Failed password for invalid user ubuntu from 31.17.26.190 port 35428 ssh2 ... |
2019-10-14 02:22:54 |
| 159.203.201.67 | attack | scan z |
2019-10-14 02:12:52 |
| 132.148.148.21 | attackspambots | WordPress login Brute force / Web App Attack on client site. |
2019-10-14 02:18:13 |
| 42.179.176.20 | attackbots | Unauthorised access (Oct 13) SRC=42.179.176.20 LEN=40 TTL=49 ID=55917 TCP DPT=8080 WINDOW=51525 SYN |
2019-10-14 01:54:34 |
| 191.180.80.163 | attackspam | 19/10/13@07:47:10: FAIL: IoT-Telnet address from=191.180.80.163 ... |
2019-10-14 02:07:06 |
| 157.230.188.24 | attackbotsspam | Oct 9 03:21:45 giraffe sshd[23896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.188.24 user=r.r Oct 9 03:21:46 giraffe sshd[23896]: Failed password for r.r from 157.230.188.24 port 60094 ssh2 Oct 9 03:21:46 giraffe sshd[23896]: Received disconnect from 157.230.188.24 port 60094:11: Bye Bye [preauth] Oct 9 03:21:46 giraffe sshd[23896]: Disconnected from 157.230.188.24 port 60094 [preauth] Oct 9 03:52:40 giraffe sshd[24664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.188.24 user=r.r Oct 9 03:52:43 giraffe sshd[24664]: Failed password for r.r from 157.230.188.24 port 37940 ssh2 Oct 9 03:52:43 giraffe sshd[24664]: Received disconnect from 157.230.188.24 port 37940:11: Bye Bye [preauth] Oct 9 03:52:43 giraffe sshd[24664]: Disconnected from 157.230.188.24 port 37940 [preauth] Oct 9 03:56:21 giraffe sshd[25102]: pam_unix(sshd:auth): authentication failure; lognam........ ------------------------------- |
2019-10-14 02:08:00 |
| 185.236.42.109 | attack | Oct 13 13:46:21 venus sshd\[12655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.236.42.109 user=root Oct 13 13:46:22 venus sshd\[12655\]: Failed password for root from 185.236.42.109 port 60664 ssh2 Oct 13 13:50:54 venus sshd\[12759\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.236.42.109 user=root ... |
2019-10-14 02:34:56 |
| 5.135.179.178 | attackspambots | 2019-10-13T17:58:03.333852abusebot-4.cloudsearch.cf sshd\[19202\]: Invalid user Grenoble@123 from 5.135.179.178 port 32025 |
2019-10-14 01:58:07 |