城市(city): unknown
省份(region): unknown
国家(country): Canada
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 70.66.31.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4224
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;70.66.31.117. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 00:24:09 CST 2025
;; MSG SIZE rcvd: 105Host 117.31.66.70.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 117.31.66.70.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 182.74.211.94 | attackspambots | Nov 1 12:32:07 mxgate1 postfix/postscreen[21104]: CONNECT from [182.74.211.94]:60695 to [176.31.12.44]:25 Nov 1 12:32:07 mxgate1 postfix/dnsblog[21241]: addr 182.74.211.94 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 1 12:32:07 mxgate1 postfix/dnsblog[21240]: addr 182.74.211.94 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 1 12:32:07 mxgate1 postfix/dnsblog[21238]: addr 182.74.211.94 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 1 12:32:07 mxgate1 postfix/postscreen[21104]: PREGREET 22 after 0.18 from [182.74.211.94]:60695: EHLO [182.74.211.94] Nov 1 12:32:07 mxgate1 postfix/postscreen[21104]: DNSBL rank 4 for [182.74.211.94]:60695 Nov x@x Nov 1 12:32:08 mxgate1 postfix/postscreen[21104]: HANGUP after 0.62 from [182.74.211.94]:60695 in tests after SMTP handshake Nov 1 12:32:08 mxgate1 postfix/postscreen[21104]: DISCONNECT [182.74.211.94]:60695 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=182.74.211.94 |
2019-11-01 23:34:30 |
| 95.52.62.3 | attackbotsspam | Nov 1 12:32:19 h2421860 sshd[22040]: Invalid user pi from 95.52.62.3 Nov 1 12:32:19 h2421860 sshd[22040]: Connection closed by 95.52.62.3 [preauth] Nov 1 12:32:19 h2421860 sshd[22042]: Invalid user pi from 95.52.62.3 Nov 1 12:32:19 h2421860 sshd[22042]: Connection closed by 95.52.62.3 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=95.52.62.3 |
2019-11-01 23:38:49 |
| 193.70.33.75 | attack | Nov 1 16:36:45 server sshd\[25402\]: Invalid user wyr from 193.70.33.75 Nov 1 16:36:45 server sshd\[25402\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3059199.ip-193-70-33.eu Nov 1 16:36:47 server sshd\[25402\]: Failed password for invalid user wyr from 193.70.33.75 port 60566 ssh2 Nov 1 16:43:36 server sshd\[26691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3059199.ip-193-70-33.eu user=root Nov 1 16:43:38 server sshd\[26691\]: Failed password for root from 193.70.33.75 port 59980 ssh2 ... |
2019-11-01 23:20:57 |
| 185.176.27.166 | attackspambots | 11/01/2019-15:05:44.499195 185.176.27.166 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-11-01 23:22:37 |
| 91.226.81.103 | attackbotsspam | Lines containing failures of 91.226.81.103 Nov 1 12:38:15 shared09 postfix/smtpd[1136]: connect from vm-6726517f.netangels.ru[91.226.81.103] Nov 1 12:38:15 shared09 policyd-spf[5822]: prepend Received-SPF: Pass (mailfrom) identhostnamey=mailfrom; client-ip=91.226.81.103; helo=hikareras.com; envelope-from=x@x Nov x@x Nov 1 12:38:15 shared09 postfix/smtpd[1136]: disconnect from vm-6726517f.netangels.ru[91.226.81.103] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=91.226.81.103 |
2019-11-01 23:51:53 |
| 139.59.5.179 | attackspambots | 11/01/2019-13:02:45.863885 139.59.5.179 Protocol: 6 ET POLICY Cleartext WordPress Login |
2019-11-01 23:40:37 |
| 113.194.136.121 | attackspam | Nov 1 12:32:53 mxgate1 postfix/postscreen[21104]: CONNECT from [113.194.136.121]:49924 to [176.31.12.44]:25 Nov 1 12:32:53 mxgate1 postfix/dnsblog[21237]: addr 113.194.136.121 listed by domain bl.spamcop.net as 127.0.0.2 Nov 1 12:32:54 mxgate1 postfix/dnsblog[21238]: addr 113.194.136.121 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 1 12:32:54 mxgate1 postfix/dnsblog[21241]: addr 113.194.136.121 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 1 12:32:54 mxgate1 postfix/dnsblog[21239]: addr 113.194.136.121 listed by domain zen.spamhaus.org as 127.0.0.3 Nov 1 12:32:54 mxgate1 postfix/dnsblog[21239]: addr 113.194.136.121 listed by domain zen.spamhaus.org as 127.0.0.11 Nov 1 12:32:54 mxgate1 postfix/dnsblog[21239]: addr 113.194.136.121 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 1 12:32:59 mxgate1 postfix/postscreen[21104]: DNSBL rank 5 for [113.194.136.121]:49924 Nov 1 12:33:01 mxgate1 postfix/tlsproxy[21360]: CONNECT from [113.194.136.121]:499........ ------------------------------- |
2019-11-01 23:48:47 |
| 143.208.137.209 | attackbotsspam | port scan and connect, tcp 1433 (ms-sql-s) |
2019-11-01 23:28:01 |
| 112.74.202.250 | attackbots | ?photoid=65%26%26SlEEp%283%29 |
2019-11-01 23:59:13 |
| 132.145.80.60 | attackspam | Port scan: Attack repeated for 24 hours |
2019-11-01 23:36:03 |
| 104.41.129.60 | attack | SMTP/25/465/587 Probe, BadAuth, SPAM, Hack - |
2019-11-01 23:54:41 |
| 200.95.175.104 | attack | Nov 1 11:40:43 sd1 sshd[29216]: Invalid user gai from 200.95.175.104 Nov 1 11:40:43 sd1 sshd[29216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.95.175.104 Nov 1 11:40:44 sd1 sshd[29216]: Failed password for invalid user gai from 200.95.175.104 port 53571 ssh2 Nov 1 12:16:44 sd1 sshd[29859]: Invalid user je from 200.95.175.104 Nov 1 12:16:44 sd1 sshd[29859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.95.175.104 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=200.95.175.104 |
2019-11-01 23:17:48 |
| 123.18.183.223 | attack | Nov 1 12:32:54 pl1server sshd[24530]: Invalid user admin from 123.18.183.223 Nov 1 12:32:54 pl1server sshd[24530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.18.183.223 Nov 1 12:32:56 pl1server sshd[24530]: Failed password for invalid user admin from 123.18.183.223 port 40626 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=123.18.183.223 |
2019-11-01 23:42:28 |
| 51.255.168.127 | attackspambots | Nov 1 13:02:02 srv01 sshd[30819]: Invalid user vrbetic from 51.255.168.127 Nov 1 13:02:02 srv01 sshd[30819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=127.ip-51-255-168.eu Nov 1 13:02:02 srv01 sshd[30819]: Invalid user vrbetic from 51.255.168.127 Nov 1 13:02:03 srv01 sshd[30819]: Failed password for invalid user vrbetic from 51.255.168.127 port 54584 ssh2 Nov 1 13:05:56 srv01 sshd[31033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=127.ip-51-255-168.eu user=root Nov 1 13:05:59 srv01 sshd[31033]: Failed password for root from 51.255.168.127 port 37286 ssh2 ... |
2019-11-01 23:31:12 |
| 58.221.60.145 | attack | Nov 1 16:26:38 vps691689 sshd[27997]: Failed password for root from 58.221.60.145 port 60400 ssh2 Nov 1 16:32:15 vps691689 sshd[28093]: Failed password for root from 58.221.60.145 port 50009 ssh2 ... |
2019-11-01 23:35:23 |