城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 6.106.149.221
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44914
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;6.106.149.221. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021300 1800 900 604800 86400
;; Query time: 75 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 17:18:57 CST 2025
;; MSG SIZE rcvd: 106Host 221.149.106.6.in-addr.arpa not found: 2(SERVFAIL)
server can't find 6.106.149.221.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 181.143.72.66 | attackspam | Oct 24 06:57:28 icinga sshd[13774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.143.72.66 Oct 24 06:57:31 icinga sshd[13774]: Failed password for invalid user nginx from 181.143.72.66 port 10619 ssh2 ... |
2019-10-24 13:29:33 |
| 159.65.4.64 | attack | Oct 24 01:04:15 TORMINT sshd\[12438\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.4.64 user=root Oct 24 01:04:17 TORMINT sshd\[12438\]: Failed password for root from 159.65.4.64 port 44084 ssh2 Oct 24 01:08:54 TORMINT sshd\[12608\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.4.64 user=root ... |
2019-10-24 13:24:12 |
| 210.17.195.138 | attackspambots | Automatic report - Banned IP Access |
2019-10-24 13:11:26 |
| 185.220.101.3 | attack | Oct 24 05:03:56 thevastnessof sshd[4759]: Failed password for root from 185.220.101.3 port 39781 ssh2 ... |
2019-10-24 13:29:19 |
| 119.28.222.88 | attack | Oct 24 05:11:07 venus sshd\[17136\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.222.88 user=root Oct 24 05:11:09 venus sshd\[17136\]: Failed password for root from 119.28.222.88 port 35756 ssh2 Oct 24 05:15:46 venus sshd\[17195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.28.222.88 user=root ... |
2019-10-24 13:25:53 |
| 138.197.179.102 | attackspambots | fail2ban |
2019-10-24 13:47:14 |
| 198.16.43.133 | attackbotsspam | 445/tcp 1433/tcp [2019-10-20/24]2pkt |
2019-10-24 13:43:17 |
| 42.116.255.216 | attackbots | Oct 24 10:15:18 gw1 sshd[9271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.255.216 Oct 24 10:15:21 gw1 sshd[9271]: Failed password for invalid user support from 42.116.255.216 port 46434 ssh2 ... |
2019-10-24 13:18:12 |
| 197.43.249.157 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/197.43.249.157/ EG - 1H : (119) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : EG NAME ASN : ASN8452 IP : 197.43.249.157 CIDR : 197.43.192.0/18 PREFIX COUNT : 833 UNIQUE IP COUNT : 7610368 ATTACKS DETECTED ASN8452 : 1H - 6 3H - 23 6H - 40 12H - 71 24H - 113 DateTime : 2019-10-24 05:53:55 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-24 13:49:04 |
| 62.234.156.120 | attackspambots | 2019-10-24T05:03:14.678296abusebot-2.cloudsearch.cf sshd\[13291\]: Invalid user hhj from 62.234.156.120 port 37144 |
2019-10-24 13:12:27 |
| 142.93.201.168 | attackspam | Oct 23 18:55:13 hanapaa sshd\[5308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.201.168 user=root Oct 23 18:55:15 hanapaa sshd\[5308\]: Failed password for root from 142.93.201.168 port 45185 ssh2 Oct 23 18:58:59 hanapaa sshd\[5636\]: Invalid user backupadmin from 142.93.201.168 Oct 23 18:58:59 hanapaa sshd\[5636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.201.168 Oct 23 18:59:02 hanapaa sshd\[5636\]: Failed password for invalid user backupadmin from 142.93.201.168 port 36645 ssh2 |
2019-10-24 13:21:31 |
| 45.227.253.139 | attackspam | Oct 24 07:22:02 relay postfix/smtpd\[14967\]: warning: unknown\[45.227.253.139\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 24 07:22:03 relay postfix/smtpd\[16995\]: warning: unknown\[45.227.253.139\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 24 07:22:22 relay postfix/smtpd\[18772\]: warning: unknown\[45.227.253.139\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 24 07:23:31 relay postfix/smtpd\[7431\]: warning: unknown\[45.227.253.139\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 24 07:23:38 relay postfix/smtpd\[18772\]: warning: unknown\[45.227.253.139\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-10-24 13:26:14 |
| 113.194.131.233 | attackbotsspam | 'IP reached maximum auth failures for a one day block' |
2019-10-24 13:44:52 |
| 84.241.30.4 | attackspam | 5984/tcp 5984/tcp [2019-10-16/24]2pkt |
2019-10-24 13:12:12 |
| 112.140.186.170 | attackbotsspam | 1433/tcp 445/tcp... [2019-08-26/10-24]14pkt,2pt.(tcp) |
2019-10-24 13:25:16 |