城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.56.244.108
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11081
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;59.56.244.108. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022301 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 24 09:37:43 CST 2025
;; MSG SIZE rcvd: 106108.244.56.59.in-addr.arpa domain name pointer 108.244.56.59.broad.qz.fj.dynamic.163data.com.cn.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
108.244.56.59.in-addr.arpa name = 108.244.56.59.broad.qz.fj.dynamic.163data.com.cn.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 203.91.114.108 | attack | 2020-08-27T04:42:45.216224l03.customhost.org.uk proftpd[14729]: 0.0.0.0 (203.91.114.108[203.91.114.108]) - USER root (Login failed): Incorrect password 2020-08-27T04:43:29.129367l03.customhost.org.uk proftpd[14936]: 0.0.0.0 (203.91.114.108[203.91.114.108]) - USER operator (Login failed): Incorrect password 2020-08-27T04:44:12.976092l03.customhost.org.uk proftpd[15179]: 0.0.0.0 (203.91.114.108[203.91.114.108]) - USER root (Login failed): Incorrect password 2020-08-27T04:44:57.740704l03.customhost.org.uk proftpd[15565]: 0.0.0.0 (203.91.114.108[203.91.114.108]) - USER design: no such user found from 203.91.114.108 [203.91.114.108] to ::ffff:176.126.240.161:2222 2020-08-27T04:45:42.084109l03.customhost.org.uk proftpd[16130]: 0.0.0.0 (203.91.114.108[203.91.114.108]) - USER oracle: no such user found from 203.91.114.108 [203.91.114.108] to ::ffff:176.126.240.161:2222 ... |
2020-08-27 17:33:43 |
| 103.139.212.8 | attack | Attempted connection to port 1433. |
2020-08-27 17:28:54 |
| 36.65.176.41 | attack | Attempted connection to port 445. |
2020-08-27 17:24:18 |
| 116.109.111.98 | attackspambots | Unauthorized connection attempt from IP address 116.109.111.98 on Port 445(SMB) |
2020-08-27 16:51:02 |
| 117.7.221.35 | attack | 20/8/27@02:32:08: FAIL: Alarm-Network address from=117.7.221.35 20/8/27@02:32:08: FAIL: Alarm-Network address from=117.7.221.35 ... |
2020-08-27 16:53:32 |
| 138.255.167.10 | attack | Unauthorized connection attempt from IP address 138.255.167.10 on Port 445(SMB) |
2020-08-27 17:34:04 |
| 5.236.16.170 | attack | Unauthorized connection attempt from IP address 5.236.16.170 on Port 445(SMB) |
2020-08-27 17:17:26 |
| 113.187.150.29 | attackbotsspam | Unauthorized connection attempt from IP address 113.187.150.29 on Port 445(SMB) |
2020-08-27 17:17:45 |
| 40.123.250.16 | attack | Lines containing failures of 40.123.250.16 Aug 23 05:23:20 penfold postfix/smtpd[11977]: connect from recty.yoga[40.123.250.16] Aug x@x Aug 23 05:23:21 penfold postfix/smtpd[11977]: disconnect from recty.yoga[40.123.250.16] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4 Aug 23 07:16:54 penfold postfix/smtpd[3029]: connect from recty.yoga[40.123.250.16] Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug 23 07:17:17 penfold postfix/smtpd[3029]: disconnect from recty.yoga[40.123.250.16] ehlo=1 mail=8 rcpt=0/8 eclipset=7 quhostname=1 commands=17/25 Aug 23 09:47:26 penfold postfix/smtpd[20755]: connect from recty.yoga[40.123.250.16] Aug x@x Aug 23 09:47:27 penfold postfix/smtpd[20755]: disconnect from recty.yoga[40.123.250.16] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4 Aug 23 10:01:10 penfold postfix/smtpd[23911]: connect from recty.yoga[40.123.250.16] Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug x@x Aug 23 10:06:39 penf........ ------------------------------ |
2020-08-27 17:06:01 |
| 13.58.143.234 | attack | mue-0 : Trying access unauthorized files=>/images/jdownloads/screenshots/update.php() |
2020-08-27 17:10:33 |
| 218.92.0.190 | attackspam | Aug 27 13:46:14 web1 sshd[4082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.190 user=root Aug 27 13:46:16 web1 sshd[4082]: Failed password for root from 218.92.0.190 port 13411 ssh2 Aug 27 13:46:15 web1 sshd[4084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.190 user=root Aug 27 13:46:17 web1 sshd[4084]: Failed password for root from 218.92.0.190 port 18273 ssh2 Aug 27 13:46:14 web1 sshd[4082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.190 user=root Aug 27 13:46:16 web1 sshd[4082]: Failed password for root from 218.92.0.190 port 13411 ssh2 Aug 27 13:46:18 web1 sshd[4082]: Failed password for root from 218.92.0.190 port 13411 ssh2 Aug 27 13:46:15 web1 sshd[4084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.190 user=root Aug 27 13:46:17 web1 sshd[4084]: Failed password for ... |
2020-08-27 16:46:53 |
| 191.33.173.138 | attackspam | Unauthorized connection attempt from IP address 191.33.173.138 on Port 445(SMB) |
2020-08-27 17:13:06 |
| 186.103.220.73 | attackbotsspam | 1598510151 - 08/27/2020 08:35:51 Host: 186.103.220.73/186.103.220.73 Port: 445 TCP Blocked |
2020-08-27 17:12:21 |
| 36.90.160.136 | attackspam | Attempted connection to port 445. |
2020-08-27 17:21:32 |
| 36.77.92.190 | attack | Unauthorized connection attempt from IP address 36.77.92.190 on Port 445(SMB) |
2020-08-27 16:46:39 |