城市(city): Seodaemun-gu
省份(region): Seoul
国家(country): South Korea
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 58.140.80.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52161
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;58.140.80.72. IN A
;; AUTHORITY SECTION:
. 519 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020051701 1800 900 604800 86400
;; Query time: 147 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 18 07:26:03 CST 2020
;; MSG SIZE rcvd: 116
Host 72.80.140.58.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 72.80.140.58.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 47.88.236.216 | attack | 2019-12-21 23:21:17 GET /admin/index.php et al. |
2019-12-22 08:42:36 |
| 187.75.196.137 | attackspam | Honeypot attack, port: 23, PTR: 187-75-196-137.dsl.telesp.net.br. |
2019-12-22 08:13:26 |
| 42.117.186.212 | attackbots | Honeypot attack, port: 23, PTR: PTR record not found |
2019-12-22 08:36:13 |
| 222.180.162.8 | attackbotsspam | Tried sshing with brute force. |
2019-12-22 08:32:37 |
| 162.247.74.200 | attackbotsspam | Automatic report - XMLRPC Attack |
2019-12-22 08:19:40 |
| 211.157.189.54 | attackbotsspam | Dec 21 18:29:35 TORMINT sshd\[13826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.157.189.54 user=www-data Dec 21 18:29:37 TORMINT sshd\[13826\]: Failed password for www-data from 211.157.189.54 port 45007 ssh2 Dec 21 18:34:18 TORMINT sshd\[15181\]: Invalid user 1967 from 211.157.189.54 Dec 21 18:34:18 TORMINT sshd\[15181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.157.189.54 ... |
2019-12-22 08:07:39 |
| 62.212.88.246 | attackbots | schuetzenmusikanten.de 62.212.88.246 [21/Dec/2019:23:57:14 +0100] "POST /wp-login.php HTTP/1.1" 200 6346 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" schuetzenmusikanten.de 62.212.88.246 [21/Dec/2019:23:57:15 +0100] "POST /wp-login.php HTTP/1.1" 200 6316 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-12-22 08:34:06 |
| 117.92.16.177 | attackbots | Dec 21 23:57:33 grey postfix/smtpd\[22067\]: NOQUEUE: reject: RCPT from unknown\[117.92.16.177\]: 554 5.7.1 Service unavailable\; Client host \[117.92.16.177\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[117.92.16.177\]\; from=\ |
2019-12-22 08:09:57 |
| 89.163.209.26 | attackspambots | SSH invalid-user multiple login try |
2019-12-22 08:19:03 |
| 185.34.52.108 | attackspam | Dec 22 00:58:25 h2177944 kernel: \[171503.152394\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.34.52.108 DST=85.214.117.9 LEN=48 TOS=0x00 PREC=0x00 TTL=56 ID=14871 DF PROTO=TCP SPT=37296 DPT=110 WINDOW=29200 RES=0x00 SYN URGP=0 Dec 22 00:58:25 h2177944 kernel: \[171503.152407\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.34.52.108 DST=85.214.117.9 LEN=48 TOS=0x00 PREC=0x00 TTL=56 ID=14871 DF PROTO=TCP SPT=37296 DPT=110 WINDOW=29200 RES=0x00 SYN URGP=0 Dec 22 00:58:26 h2177944 kernel: \[171504.153743\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.34.52.108 DST=85.214.117.9 LEN=48 TOS=0x00 PREC=0x00 TTL=56 ID=14872 DF PROTO=TCP SPT=37296 DPT=110 WINDOW=29200 RES=0x00 SYN URGP=0 Dec 22 00:58:26 h2177944 kernel: \[171504.153758\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.34.52.108 DST=85.214.117.9 LEN=48 TOS=0x00 PREC=0x00 TTL=56 ID=14872 DF PROTO=TCP SPT=37296 DPT=110 WINDOW=29200 RES=0x00 SYN URGP=0 Dec 22 00:58:28 h2177944 kernel: \[171506.157523\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.34.52.108 DST=85.214.11 |
2019-12-22 08:13:46 |
| 103.129.64.149 | attackspambots | Honeypot attack, port: 23, PTR: PTR record not found |
2019-12-22 08:43:54 |
| 106.12.137.46 | attack | Dec 22 05:17:03 areeb-Workstation sshd[4977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.137.46 Dec 22 05:17:05 areeb-Workstation sshd[4977]: Failed password for invalid user 0454idc from 106.12.137.46 port 57702 ssh2 ... |
2019-12-22 08:35:52 |
| 209.105.243.145 | attackbotsspam | Invalid user admin from 209.105.243.145 port 47646 |
2019-12-22 08:43:24 |
| 46.38.144.202 | attackspambots | SASL broute force |
2019-12-22 08:12:07 |
| 51.255.174.164 | attackbots | Dec 22 01:43:26 server sshd\[30646\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.ip-51-255-174.eu user=root Dec 22 01:43:28 server sshd\[30646\]: Failed password for root from 51.255.174.164 port 52932 ssh2 Dec 22 01:52:32 server sshd\[702\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.ip-51-255-174.eu user=root Dec 22 01:52:34 server sshd\[702\]: Failed password for root from 51.255.174.164 port 48866 ssh2 Dec 22 01:57:15 server sshd\[2130\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.ip-51-255-174.eu user=root ... |
2019-12-22 08:34:36 |