城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 7.72.64.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5730
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;7.72.64.42. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 22:01:53 CST 2025
;; MSG SIZE rcvd: 103Host 42.64.72.7.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 42.64.72.7.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 5.196.201.7 | attackbotsspam | Nov 6 23:23:55 mail postfix/smtpd[11034]: warning: unknown[5.196.201.7]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 6 23:24:49 mail postfix/smtpd[11417]: warning: unknown[5.196.201.7]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 6 23:24:54 mail postfix/smtpd[11414]: warning: unknown[5.196.201.7]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-11-07 06:36:37 |
| 192.99.152.101 | attackbotsspam | Nov 6 19:45:55 firewall sshd[13909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.152.101 Nov 6 19:45:55 firewall sshd[13909]: Invalid user anonymous from 192.99.152.101 Nov 6 19:45:57 firewall sshd[13909]: Failed password for invalid user anonymous from 192.99.152.101 port 57540 ssh2 ... |
2019-11-07 06:57:21 |
| 77.121.152.97 | attackspambots | [portscan] Port scan |
2019-11-07 06:59:43 |
| 77.247.110.70 | attackspambots | 11/06/2019-23:45:40.874105 77.247.110.70 Protocol: 17 ET SCAN Sipvicious Scan |
2019-11-07 07:15:25 |
| 222.186.180.6 | attack | Nov 6 23:50:19 minden010 sshd[5521]: Failed password for root from 222.186.180.6 port 30062 ssh2 Nov 6 23:50:24 minden010 sshd[5521]: Failed password for root from 222.186.180.6 port 30062 ssh2 Nov 6 23:50:28 minden010 sshd[5521]: Failed password for root from 222.186.180.6 port 30062 ssh2 Nov 6 23:50:36 minden010 sshd[5521]: error: maximum authentication attempts exceeded for root from 222.186.180.6 port 30062 ssh2 [preauth] ... |
2019-11-07 07:01:51 |
| 104.248.55.99 | attackbots | Nov 6 12:41:59 auw2 sshd\[17109\]: Invalid user changeme from 104.248.55.99 Nov 6 12:41:59 auw2 sshd\[17109\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.55.99 Nov 6 12:42:00 auw2 sshd\[17109\]: Failed password for invalid user changeme from 104.248.55.99 port 48902 ssh2 Nov 6 12:45:46 auw2 sshd\[17425\]: Invalid user gonzalo from 104.248.55.99 Nov 6 12:45:46 auw2 sshd\[17425\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.55.99 |
2019-11-07 07:08:25 |
| 85.192.47.45 | attack | [portscan] Port scan |
2019-11-07 07:10:38 |
| 40.83.76.21 | attackspam | Unauthorized connection attempt from IP address 40.83.76.21 on Port 445(SMB) |
2019-11-07 06:51:45 |
| 187.75.7.142 | attackspambots | May 24 04:38:20 vbuntu sshd[14425]: warning: /etc/hosts.allow, line 11: can't verify hostname: getaddrinfo(187-75-7-142.dsl.telesp.net.br, AF_INET) failed May 24 04:38:20 vbuntu sshd[14425]: refused connect from 187.75.7.142 (187.75.7.142) May 24 04:43:07 vbuntu sshd[14579]: warning: /etc/hosts.allow, line 11: can't verify hostname: getaddrinfo(187-75-7-142.dsl.telesp.net.br, AF_INET) failed May 24 04:43:07 vbuntu sshd[14579]: refused connect from 187.75.7.142 (187.75.7.142) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=187.75.7.142 |
2019-11-07 07:09:46 |
| 118.217.9.103 | attackspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/118.217.9.103/ KR - 1H : (137) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : KR NAME ASN : ASN9318 IP : 118.217.9.103 CIDR : 118.217.0.0/20 PREFIX COUNT : 2487 UNIQUE IP COUNT : 14360064 ATTACKS DETECTED ASN9318 : 1H - 3 3H - 7 6H - 17 12H - 33 24H - 51 DateTime : 2019-11-06 23:46:13 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-07 06:56:04 |
| 117.121.214.50 | attack | Nov 6 23:41:10 legacy sshd[15158]: Failed password for root from 117.121.214.50 port 38042 ssh2 Nov 6 23:45:23 legacy sshd[15267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.121.214.50 Nov 6 23:45:25 legacy sshd[15267]: Failed password for invalid user com from 117.121.214.50 port 47828 ssh2 ... |
2019-11-07 06:54:43 |
| 221.231.26.209 | attack | Forbidden directory scan :: 2019/11/06 22:46:24 [error] 9952#9952: *30118 access forbidden by rule, client: 221.231.26.209, server: [censored_1], request: "GET /.../exchange-2010-how-to-force-address-book-updates HTTP/1.1", host: "www.[censored_1]" |
2019-11-07 07:02:26 |
| 106.13.200.50 | attackspambots | Nov 6 19:42:31 firewall sshd[13840]: Invalid user CENT0S2019 from 106.13.200.50 Nov 6 19:42:33 firewall sshd[13840]: Failed password for invalid user CENT0S2019 from 106.13.200.50 port 42104 ssh2 Nov 6 19:46:33 firewall sshd[13931]: Invalid user hansolo from 106.13.200.50 ... |
2019-11-07 06:47:20 |
| 220.142.26.45 | attackspam | Unauthorised access (Nov 7) SRC=220.142.26.45 LEN=52 TTL=107 ID=22926 DF TCP DPT=445 WINDOW=8192 SYN |
2019-11-07 07:07:23 |
| 152.136.50.26 | attackbotsspam | Nov 6 23:41:47 v22019058497090703 sshd[7626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.50.26 Nov 6 23:41:48 v22019058497090703 sshd[7626]: Failed password for invalid user jie from 152.136.50.26 port 57848 ssh2 Nov 6 23:46:06 v22019058497090703 sshd[7927]: Failed password for root from 152.136.50.26 port 39718 ssh2 ... |
2019-11-07 07:14:24 |