城市(city): unknown
省份(region): unknown
国家(country): Taiwan (Province of China)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.104.142.255
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57073
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;59.104.142.255. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022001 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 21 05:21:23 CST 2025
;; MSG SIZE rcvd: 107255.142.104.59.in-addr.arpa domain name pointer 59-104-142-255.adsl.dynamic.seed.net.tw.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
255.142.104.59.in-addr.arpa name = 59-104-142-255.adsl.dynamic.seed.net.tw.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 164.215.102.200 | attack | Oct 30 12:42:24 mxgate1 postfix/postscreen[24367]: CONNECT from [164.215.102.200]:58362 to [176.31.12.44]:25 Oct 30 12:42:24 mxgate1 postfix/dnsblog[24369]: addr 164.215.102.200 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 30 12:42:24 mxgate1 postfix/dnsblog[24369]: addr 164.215.102.200 listed by domain zen.spamhaus.org as 127.0.0.4 Oct 30 12:42:24 mxgate1 postfix/dnsblog[24371]: addr 164.215.102.200 listed by domain cbl.abuseat.org as 127.0.0.2 Oct 30 12:42:24 mxgate1 postfix/postscreen[24367]: PREGREET 24 after 0.1 from [164.215.102.200]:58362: EHLO [164.215.102.200] Oct 30 12:42:25 mxgate1 postfix/postscreen[24367]: DNSBL rank 3 for [164.215.102.200]:58362 Oct x@x Oct 30 12:42:26 mxgate1 postfix/postscreen[24367]: HANGUP after 0.35 from [164.215.102.200]:58362 in tests after SMTP handshake Oct 30 12:42:26 mxgate1 postfix/postscreen[24367]: DISCONNECT [164.215.102.200]:58362 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=164.215.102.200 |
2019-10-31 01:37:29 |
| 157.245.145.243 | attackbotsspam | Invalid user cloudtest from 157.245.145.243 port 56034 |
2019-10-31 01:38:16 |
| 80.178.115.146 | attackbots | Oct 30 15:31:33 vmanager6029 sshd\[19066\]: Invalid user git from 80.178.115.146 port 50783 Oct 30 15:31:33 vmanager6029 sshd\[19066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.178.115.146 Oct 30 15:31:35 vmanager6029 sshd\[19066\]: Failed password for invalid user git from 80.178.115.146 port 50783 ssh2 |
2019-10-31 01:34:58 |
| 218.92.0.157 | attack | Oct 30 16:21:48 amit sshd\[4678\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.157 user=root Oct 30 16:21:50 amit sshd\[4678\]: Failed password for root from 218.92.0.157 port 29688 ssh2 Oct 30 16:22:12 amit sshd\[4680\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.157 user=root ... |
2019-10-31 00:57:33 |
| 13.93.86.6 | attack | RDP Bruteforce |
2019-10-31 01:36:24 |
| 82.196.14.222 | attackspambots | SSH invalid-user multiple login try |
2019-10-31 01:00:33 |
| 101.36.151.78 | attackbotsspam | Oct 30 08:18:41 nandi sshd[17958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.151.78 user=r.r Oct 30 08:18:43 nandi sshd[17958]: Failed password for r.r from 101.36.151.78 port 49128 ssh2 Oct 30 08:18:44 nandi sshd[17958]: Received disconnect from 101.36.151.78: 11: Bye Bye [preauth] Oct 30 08:44:52 nandi sshd[7225]: Invalid user regia from 101.36.151.78 Oct 30 08:44:52 nandi sshd[7225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.151.78 Oct 30 08:44:54 nandi sshd[7225]: Failed password for invalid user regia from 101.36.151.78 port 39442 ssh2 Oct 30 08:44:55 nandi sshd[7225]: Received disconnect from 101.36.151.78: 11: Bye Bye [preauth] Oct 30 08:51:04 nandi sshd[13952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.151.78 user=r.r Oct 30 08:51:06 nandi sshd[13952]: Failed password for r.r from 101.36.151.78 port 501........ ------------------------------- |
2019-10-31 01:15:55 |
| 103.82.235.10 | attack | "POST /FCKeditor/editor/filemanager/connectors/asp/connector.asp?Command=FileUpload&Type=File&CurrentFolder=%2F HTTP/1.1" 404 "POST /admin_aspcms/_system/AspCms_SiteSetting.asp HTTP/1.1" 404 "POST /plus/90sec.php HTTP/1.1" 404 "POST /utility/convert/index.php?a=config&source=d7.2_x2.0 HTTP/1.1" 404 "POST /utility/convert/data/config.inc.php HTTP/1.1" 404 "POST /uploads/dede/sys_verifies.php?action=down HTTP/1.1" 404 "POST /index.php/api/Uploadify/preview HTTP/1.1" 404 "POST /fdgq.php HTTP/1.1" 404 "POST /xbodk.php HTTP/1.1" 404 "POST /ysyqq.php HTTP/1.1" 404 |
2019-10-31 01:26:07 |
| 209.50.54.22 | attack | Oct 30 18:42:50 docs sshd\[45573\]: Invalid user kdk from 209.50.54.22Oct 30 18:42:52 docs sshd\[45573\]: Failed password for invalid user kdk from 209.50.54.22 port 51604 ssh2Oct 30 18:46:40 docs sshd\[45683\]: Invalid user alinus from 209.50.54.22Oct 30 18:46:42 docs sshd\[45683\]: Failed password for invalid user alinus from 209.50.54.22 port 34918 ssh2Oct 30 18:50:29 docs sshd\[45788\]: Invalid user 123456789 from 209.50.54.22Oct 30 18:50:32 docs sshd\[45788\]: Failed password for invalid user 123456789 from 209.50.54.22 port 46462 ssh2 ... |
2019-10-31 01:43:18 |
| 104.248.199.34 | attack | Here more information about 104.248.199.34 info: [Netherlands] 14061 DighostnamealOcean, LLC Connected: 49 servere(s) Reason: ssh Ports: 23 Services: telnet servere: Europe/Moscow (UTC+3) Found at blocklist: abuseat.org, abuseIPDB.com myIP:89.179.244.250 [2019-10-28 07:11:48] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:13:53] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:14:17] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:14:32] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:19:28] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:20:27] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:20:30] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:21:10] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:21:30] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:22:21] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:22:27] (tcp) myIP:23 <- 104.248.199.34:55592 [2019-10-28 07:24:08] (tcp) myIP:23 <- 104.248.199.34:555........ --------------------------------- |
2019-10-31 01:10:59 |
| 94.21.243.204 | attackbots | $f2bV_matches |
2019-10-31 01:00:08 |
| 181.177.250.9 | attack | 1433/tcp 1433/tcp 1433/tcp... [2019-10-11/30]7pkt,1pt.(tcp) |
2019-10-31 01:31:46 |
| 89.236.219.209 | attackbotsspam | namecheap spam |
2019-10-31 01:26:29 |
| 72.176.195.115 | attackbotsspam | Automatic report - Banned IP Access |
2019-10-31 01:20:31 |
| 187.16.96.35 | attackbots | Oct 30 13:56:10 game-panel sshd[3887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.16.96.35 Oct 30 13:56:11 game-panel sshd[3887]: Failed password for invalid user S#d885fk9981g from 187.16.96.35 port 57294 ssh2 Oct 30 14:01:09 game-panel sshd[4087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.16.96.35 |
2019-10-31 01:36:04 |