城市(city): unknown
省份(region): unknown
国家(country): Norway
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 78.26.50.132
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24177
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;78.26.50.132. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021900 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 19 23:51:36 CST 2025
;; MSG SIZE rcvd: 105132.50.26.78.in-addr.arpa domain name pointer 78-26-50-132.network.trollfjord.no.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
132.50.26.78.in-addr.arpa name = 78-26-50-132.network.trollfjord.no.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 148.63.18.12 | attack | Unauthorised access (Jun 23) SRC=148.63.18.12 LEN=40 TTL=53 ID=60717 TCP DPT=8080 WINDOW=19986 SYN |
2019-06-23 15:59:05 |
| 94.124.248.135 | attack | Unauthorized connection attempt from IP address 94.124.248.135 on Port 445(SMB) |
2019-06-23 16:18:43 |
| 36.110.211.3 | attack | firewall-block, port(s): 4899/tcp |
2019-06-23 15:42:31 |
| 213.212.60.224 | attackbots | 213.212.60.224 - - \[23/Jun/2019:09:14:12 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 213.212.60.224 - - \[23/Jun/2019:09:14:12 +0200\] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 213.212.60.224 - - \[23/Jun/2019:09:14:12 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 213.212.60.224 - - \[23/Jun/2019:09:14:13 +0200\] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 213.212.60.224 - - \[23/Jun/2019:09:14:13 +0200\] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 213.212.60.224 - - \[23/Jun/2019:09:14:14 +0200\] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:6 |
2019-06-23 16:31:39 |
| 178.128.107.164 | attackbots | Jun 23 05:53:35 srv206 sshd[13337]: Invalid user beng from 178.128.107.164 Jun 23 05:53:35 srv206 sshd[13337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.107.164 Jun 23 05:53:35 srv206 sshd[13337]: Invalid user beng from 178.128.107.164 Jun 23 05:53:37 srv206 sshd[13337]: Failed password for invalid user beng from 178.128.107.164 port 26914 ssh2 ... |
2019-06-23 15:43:25 |
| 154.119.7.3 | attackbotsspam | Jun 23 09:52:05 itv-usvr-01 sshd[20511]: Invalid user admin from 154.119.7.3 Jun 23 09:52:05 itv-usvr-01 sshd[20511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.119.7.3 Jun 23 09:52:05 itv-usvr-01 sshd[20511]: Invalid user admin from 154.119.7.3 Jun 23 09:52:07 itv-usvr-01 sshd[20511]: Failed password for invalid user admin from 154.119.7.3 port 57966 ssh2 Jun 23 09:55:31 itv-usvr-01 sshd[20629]: Invalid user wp-user from 154.119.7.3 |
2019-06-23 15:40:14 |
| 180.76.108.110 | attackbots | Jan 31 01:37:18 vtv3 sshd\[7347\]: Invalid user wildfly from 180.76.108.110 port 52660 Jan 31 01:37:18 vtv3 sshd\[7347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.108.110 Jan 31 01:37:20 vtv3 sshd\[7347\]: Failed password for invalid user wildfly from 180.76.108.110 port 52660 ssh2 Jan 31 01:42:47 vtv3 sshd\[8832\]: Invalid user owen from 180.76.108.110 port 56910 Jan 31 01:42:47 vtv3 sshd\[8832\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.108.110 Apr 14 23:51:01 vtv3 sshd\[13724\]: Invalid user deploy. from 180.76.108.110 port 58514 Apr 14 23:51:01 vtv3 sshd\[13724\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.108.110 Apr 14 23:51:03 vtv3 sshd\[13724\]: Failed password for invalid user deploy. from 180.76.108.110 port 58514 ssh2 Apr 14 23:53:14 vtv3 sshd\[14584\]: Invalid user h3lpd3sk from 180.76.108.110 port 51648 Apr 14 23:53:14 vtv3 sshd\[ |
2019-06-23 15:45:22 |
| 177.130.139.235 | attackspambots | SMTP-sasl brute force ... |
2019-06-23 15:55:04 |
| 167.99.226.50 | attack | Jun 21 04:27:20 mxgate1 postfix/postscreen[14597]: CONNECT from [167.99.226.50]:38419 to [176.31.12.44]:25 Jun 21 04:27:26 mxgate1 postfix/postscreen[14597]: PASS NEW [167.99.226.50]:38419 Jun 21 04:27:26 mxgate1 postfix/smtpd[15164]: connect from box.mckeownintenational.com[167.99.226.50] Jun x@x Jun 21 04:27:27 mxgate1 postfix/smtpd[15164]: disconnect from box.mckeownintenational.com[167.99.226.50] ehlo=2 starttls=1 mail=1 rcpt=0/1 data=0/1 eclipset=1 quhostname=1 commands=6/8 Jun 21 10:28:02 mxgate1 postfix/postscreen[26734]: CONNECT from [167.99.226.50]:36255 to [176.31.12.44]:25 Jun 21 10:28:02 mxgate1 postfix/dnsblog[26814]: addr 167.99.226.50 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Jun 21 10:28:02 mxgate1 postfix/postscreen[26734]: PASS OLD [167.99.226.50]:36255 Jun 21 10:28:03 mxgate1 postfix/smtpd[26819]: connect from box.mckeownintenational.com[167.99.226.50] Jun x@x Jun 21 10:28:04 mxgate1 postfix/smtpd[26819]: disconnect from box.mckeownintenationa........ ------------------------------- |
2019-06-23 16:26:54 |
| 187.111.54.90 | attack | Jun 22 20:08:39 web1 postfix/smtpd[23697]: warning: unknown[187.111.54.90]: SASL PLAIN authentication failed: authentication failure ... |
2019-06-23 16:40:43 |
| 182.61.33.47 | attackbotsspam | Jun 23 03:43:59 server sshd[12950]: Failed password for invalid user xbmc from 182.61.33.47 port 51060 ssh2 Jun 23 03:46:52 server sshd[13590]: Failed password for invalid user ralph from 182.61.33.47 port 49982 ssh2 Jun 23 03:48:17 server sshd[13945]: Failed password for invalid user lang from 182.61.33.47 port 35306 ssh2 |
2019-06-23 15:59:52 |
| 84.241.0.8 | attack | firewall-block, port(s): 3389/tcp |
2019-06-23 15:39:03 |
| 219.92.16.81 | attackspam | detected by Fail2Ban |
2019-06-23 16:02:22 |
| 159.89.180.214 | attackbots | [munged]::443 159.89.180.214 - - [23/Jun/2019:08:48:34 +0200] "POST /[munged]: HTTP/1.1" 200 6318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 159.89.180.214 - - [23/Jun/2019:08:48:36 +0200] "POST /[munged]: HTTP/1.1" 200 6290 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 159.89.180.214 - - [23/Jun/2019:08:48:36 +0200] "POST /[munged]: HTTP/1.1" 200 6290 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-06-23 15:51:06 |
| 171.13.14.40 | attackbotsspam | ¯\_(ツ)_/¯ |
2019-06-23 16:15:04 |