城市(city): Milan
省份(region): Lombardy
国家(country): Italy
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '79.44.128.0 - 79.44.255.255'
% Abuse contact for '79.44.128.0 - 79.44.255.255' is 'abuse@retail.telecomitalia.it'
inetnum: 79.44.128.0 - 79.44.255.255
netname: TELECOM-ADSL-POOL
descr: NAS DHCP Pool Savona
country: IT
admin-c: BS104-RIPE
tech-c: BS104-RIPE
status: ASSIGNED PA
remarks: INFRA-AW
mnt-by: TIWS-MNT
mnt-lower: TIWS-MNT
mnt-routes: TIWS-MNT
created: 2010-06-08T14:50:01Z
last-modified: 2010-06-08T14:50:01Z
source: RIPE
person: BBBEASYIP STAFF
address: Via Oriolo Romano 240
address: 00189 Roma
address: Italy
phone: +39 06 36881
nic-hdl: BS104-RIPE
mnt-by: TIWS-MNT
created: 2001-10-19T12:23:31Z
last-modified: 2019-01-15T13:58:43Z
source: RIPE # Filtered
% Information related to '79.44.0.0/15AS3269'
route: 79.44.0.0/15
descr: INTERBUSINESS
origin: AS3269
mnt-by: TIWS-MNT
mnt-routes: INTERB-MNT
created: 2008-06-13T10:25:37Z
last-modified: 2008-06-13T10:25:37Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.123 (ABERDEEN); <<>> DiG 9.10.3-P4-Ubuntu <<>> 79.44.147.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29115
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;79.44.147.66. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026081501 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 16 06:42:32 CST 2026
;; MSG SIZE rcvd: 10566.147.44.79.in-addr.arpa domain name pointer host-79-44-147-66.retail.telecomitalia.it.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
66.147.44.79.in-addr.arpa name = host-79-44-147-66.retail.telecomitalia.it.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 185.232.30.130 | attack | 09/14/2019-19:13:37.374841 185.232.30.130 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-09-15 07:33:09 |
| 207.6.1.11 | attack | Sep 14 22:27:07 SilenceServices sshd[13504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.6.1.11 Sep 14 22:27:09 SilenceServices sshd[13504]: Failed password for invalid user uz from 207.6.1.11 port 43015 ssh2 Sep 14 22:30:55 SilenceServices sshd[14924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.6.1.11 |
2019-09-15 07:29:16 |
| 222.186.180.20 | attackbotsspam | Sep 15 01:20:18 tux-35-217 sshd\[10093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.20 user=root Sep 15 01:20:20 tux-35-217 sshd\[10093\]: Failed password for root from 222.186.180.20 port 18401 ssh2 Sep 15 01:20:22 tux-35-217 sshd\[10093\]: Failed password for root from 222.186.180.20 port 18401 ssh2 Sep 15 01:20:24 tux-35-217 sshd\[10093\]: Failed password for root from 222.186.180.20 port 18401 ssh2 ... |
2019-09-15 07:21:22 |
| 151.16.224.185 | attackspam | Sep 14 20:15:44 host sshd\[32133\]: Invalid user test from 151.16.224.185 port 56424 Sep 14 20:15:44 host sshd\[32133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.16.224.185 ... |
2019-09-15 07:34:40 |
| 187.103.71.149 | attack | Sep 14 22:54:06 hb sshd\[27506\]: Invalid user raul from 187.103.71.149 Sep 14 22:54:06 hb sshd\[27506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.103.71.149 Sep 14 22:54:08 hb sshd\[27506\]: Failed password for invalid user raul from 187.103.71.149 port 34762 ssh2 Sep 14 22:58:55 hb sshd\[27879\]: Invalid user 123456 from 187.103.71.149 Sep 14 22:58:55 hb sshd\[27879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.103.71.149 |
2019-09-15 07:23:24 |
| 5.219.242.61 | attackbots | Automatic report - Port Scan Attack |
2019-09-15 07:14:40 |
| 202.43.168.86 | attackspam | [munged]::443 202.43.168.86 - - [14/Sep/2019:20:15:51 +0200] "POST /[munged]: HTTP/1.1" 200 10029 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 202.43.168.86 - - [14/Sep/2019:20:15:56 +0200] "POST /[munged]: HTTP/1.1" 200 6180 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 202.43.168.86 - - [14/Sep/2019:20:15:56 +0200] "POST /[munged]: HTTP/1.1" 200 6180 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 202.43.168.86 - - [14/Sep/2019:20:15:59 +0200] "POST /[munged]: HTTP/1.1" 200 6180 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 202.43.168.86 - - [14/Sep/2019:20:15:59 +0200] "POST /[munged]: HTTP/1.1" 200 6180 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 202.43.168.86 - - [14/Sep/2019:20:16:02 |
2019-09-15 07:14:00 |
| 158.69.121.157 | attack | Sep 15 01:37:35 SilenceServices sshd[22019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.121.157 Sep 15 01:37:37 SilenceServices sshd[22019]: Failed password for invalid user ubuntu from 158.69.121.157 port 52008 ssh2 Sep 15 01:41:10 SilenceServices sshd[23462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.121.157 |
2019-09-15 07:47:02 |
| 104.236.52.94 | attackspambots | Sep 14 23:19:20 lnxded64 sshd[16437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.52.94 |
2019-09-15 07:16:16 |
| 89.248.174.3 | attackspambots | Brute force attack stopped by firewall |
2019-09-15 07:45:00 |
| 123.206.88.24 | attack | Sep 14 22:41:14 sshgateway sshd\[5437\]: Invalid user spotlight from 123.206.88.24 Sep 14 22:41:14 sshgateway sshd\[5437\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.88.24 Sep 14 22:41:15 sshgateway sshd\[5437\]: Failed password for invalid user spotlight from 123.206.88.24 port 59694 ssh2 |
2019-09-15 07:51:34 |
| 104.248.183.0 | attackbotsspam | Sep 15 00:22:17 markkoudstaal sshd[24990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0 Sep 15 00:22:19 markkoudstaal sshd[24990]: Failed password for invalid user 123456 from 104.248.183.0 port 41750 ssh2 Sep 15 00:26:32 markkoudstaal sshd[25415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0 |
2019-09-15 07:22:51 |
| 35.231.6.102 | attackspam | Sep 14 13:09:10 php2 sshd\[27787\]: Invalid user xvf from 35.231.6.102 Sep 14 13:09:10 php2 sshd\[27787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.6.231.35.bc.googleusercontent.com Sep 14 13:09:12 php2 sshd\[27787\]: Failed password for invalid user xvf from 35.231.6.102 port 58046 ssh2 Sep 14 13:13:36 php2 sshd\[28119\]: Invalid user vnc from 35.231.6.102 Sep 14 13:13:36 php2 sshd\[28119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.6.231.35.bc.googleusercontent.com |
2019-09-15 07:30:09 |
| 207.154.192.36 | attack | Sep 14 19:22:29 ws12vmsma01 sshd[42879]: Invalid user oracle from 207.154.192.36 Sep 14 19:22:31 ws12vmsma01 sshd[42879]: Failed password for invalid user oracle from 207.154.192.36 port 53382 ssh2 Sep 14 19:26:49 ws12vmsma01 sshd[43497]: Invalid user aldo from 207.154.192.36 ... |
2019-09-15 07:28:42 |
| 122.117.114.23 | attackbotsspam | Netgear DGN Device Remote Command Execution Vulnerability, PTR: 122-117-114-23.HINET-IP.hinet.net. |
2019-09-15 07:21:07 |