城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 7.67.12.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46097
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;7.67.12.19. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020602 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 06:04:49 CST 2025
;; MSG SIZE rcvd: 103Host 19.12.67.7.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 19.12.67.7.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 81.22.45.115 | attackspam | 11/14/2019-16:41:41.031320 81.22.45.115 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-11-14 23:48:50 |
| 208.66.51.139 | attackbots | 1433 |
2019-11-15 00:22:42 |
| 134.175.26.137 | attackbots | Port scan detected on ports: 6380[TCP], 6380[TCP], 7001[TCP] |
2019-11-15 00:00:41 |
| 79.245.166.34 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/79.245.166.34/ DE - 1H : (77) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : DE NAME ASN : ASN3320 IP : 79.245.166.34 CIDR : 79.192.0.0/10 PREFIX COUNT : 481 UNIQUE IP COUNT : 29022208 ATTACKS DETECTED ASN3320 : 1H - 2 3H - 4 6H - 7 12H - 10 24H - 16 DateTime : 2019-11-14 15:40:01 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-15 00:11:20 |
| 36.37.158.95 | attackspam | firewall-block, port(s): 9000/tcp |
2019-11-15 00:15:16 |
| 107.190.131.50 | attackspambots | Automatic report - XMLRPC Attack |
2019-11-14 23:43:25 |
| 185.164.72.88 | attackbotsspam | Nov 14 14:40:33 thevastnessof sshd[25494]: Failed password for root from 185.164.72.88 port 41386 ssh2 ... |
2019-11-14 23:49:06 |
| 80.211.237.20 | attack | Nov 14 16:04:19 game-panel sshd[23778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.237.20 Nov 14 16:04:20 game-panel sshd[23778]: Failed password for invalid user meab from 80.211.237.20 port 39862 ssh2 Nov 14 16:08:05 game-panel sshd[23877]: Failed password for backup from 80.211.237.20 port 48430 ssh2 |
2019-11-15 00:16:45 |
| 178.165.56.235 | attackspam | [portscan] Port scan |
2019-11-15 00:20:14 |
| 149.56.46.220 | attack | 2019-11-14T15:37:38.402760shield sshd\[27235\]: Invalid user ddd from 149.56.46.220 port 54738 2019-11-14T15:37:38.407450shield sshd\[27235\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.ip-149-56-46.net 2019-11-14T15:37:40.974716shield sshd\[27235\]: Failed password for invalid user ddd from 149.56.46.220 port 54738 ssh2 2019-11-14T15:41:28.360030shield sshd\[27801\]: Invalid user domi2977 from 149.56.46.220 port 36690 2019-11-14T15:41:28.364920shield sshd\[27801\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.ip-149-56-46.net |
2019-11-14 23:45:44 |
| 106.13.69.54 | attackspam | Nov 11 21:01:11 sanyalnet-cloud-vps4 sshd[4068]: Connection from 106.13.69.54 port 49066 on 64.137.160.124 port 23 Nov 11 21:01:13 sanyalnet-cloud-vps4 sshd[4068]: Invalid user art1 from 106.13.69.54 Nov 11 21:01:13 sanyalnet-cloud-vps4 sshd[4068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.69.54 Nov 11 21:01:15 sanyalnet-cloud-vps4 sshd[4068]: Failed password for invalid user art1 from 106.13.69.54 port 49066 ssh2 Nov 11 21:01:16 sanyalnet-cloud-vps4 sshd[4068]: Received disconnect from 106.13.69.54: 11: Bye Bye [preauth] Nov 11 21:09:02 sanyalnet-cloud-vps4 sshd[4245]: Connection from 106.13.69.54 port 36926 on 64.137.160.124 port 23 Nov 11 21:09:04 sanyalnet-cloud-vps4 sshd[4245]: Invalid user bruzual from 106.13.69.54 Nov 11 21:09:04 sanyalnet-cloud-vps4 sshd[4245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.69.54 Nov 11 21:09:05 sanyalnet-cloud-vps4 sshd[4245]:........ ------------------------------- |
2019-11-14 23:47:47 |
| 103.95.12.132 | attack | Nov 14 16:41:23 * sshd[2011]: Failed password for root from 103.95.12.132 port 35892 ssh2 |
2019-11-14 23:53:42 |
| 92.119.160.106 | attackspambots | Nov 14 16:54:47 mc1 kernel: \[5033158.980232\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.106 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=28832 PROTO=TCP SPT=51182 DPT=64276 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 14 16:56:47 mc1 kernel: \[5033279.286173\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.106 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=50991 PROTO=TCP SPT=51182 DPT=64055 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 14 17:00:14 mc1 kernel: \[5033485.962888\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.106 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=51430 PROTO=TCP SPT=51182 DPT=64197 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-15 00:17:54 |
| 198.204.242.122 | attackspambots | Automatic report - XMLRPC Attack |
2019-11-15 00:02:08 |
| 104.247.75.218 | attackspambots | From: Digital Federal Credit Union [mailto:onlinemessage@armstong.com] DCU phishing/fraud; illicit use of entity name/credentials/copyright. Unsolicited bulk spam - zid-vpns-8-48.uibk.ac.at, University Of Innsbruck - 138.232.8.48 Spam link www.28niubi1.com = 58.64.157.132 NWT iDC Data Service – BLACKLISTED - phishing redirect: - northernexpressions.com.au = 104.247.75.218 InMotion Hosting, Inc. Appear to redirect/replicate valid DCU web site: - Spam link u6118461.ct.sendgrid.net = repeat IP 167.89.123.16, 167.89.115.54, 167.89.118.35 – SendGrid - Spam link media.whatcounts.com = 99.84.13.60, 99.84.13.158, 99.84.13.67, 99.84.13.207 – Amazon |
2019-11-14 23:44:45 |