城市(city): unknown
省份(region): unknown
国家(country): Austria
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 80.109.211.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61256
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;80.109.211.49. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020400 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 23:47:19 CST 2025
;; MSG SIZE rcvd: 106
49.211.109.80.in-addr.arpa domain name pointer 80-109-211-49.cable.dynamic.surfer.at.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
49.211.109.80.in-addr.arpa name = 80-109-211-49.cable.dynamic.surfer.at.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 122.154.59.66 | attack | Nov 14 17:26:55 vps666546 sshd\[26684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.59.66 user=root Nov 14 17:26:56 vps666546 sshd\[26684\]: Failed password for root from 122.154.59.66 port 4560 ssh2 Nov 14 17:31:32 vps666546 sshd\[26919\]: Invalid user 22 from 122.154.59.66 port 54614 Nov 14 17:31:32 vps666546 sshd\[26919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.59.66 Nov 14 17:31:34 vps666546 sshd\[26919\]: Failed password for invalid user 22 from 122.154.59.66 port 54614 ssh2 ... |
2019-11-15 00:40:23 |
| 209.141.44.192 | attackbotsspam | Nov 14 17:35:05 localhost sshd\[8367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.44.192 user=root Nov 14 17:35:07 localhost sshd\[8367\]: Failed password for root from 209.141.44.192 port 34190 ssh2 Nov 14 17:39:00 localhost sshd\[8748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.44.192 user=root |
2019-11-15 01:05:52 |
| 184.168.193.22 | attack | Automatic report - XMLRPC Attack |
2019-11-15 00:28:27 |
| 58.152.108.108 | attack | Automatic report - Port Scan Attack |
2019-11-15 00:42:26 |
| 148.72.23.29 | attackbots | Automatic report - XMLRPC Attack |
2019-11-15 00:58:10 |
| 157.230.105.121 | attack | 2019-11-14T16:05:57.823221scmdmz1 sshd\[10378\]: Invalid user usuario from 157.230.105.121 port 34820 2019-11-14T16:05:57.825925scmdmz1 sshd\[10378\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.105.121 2019-11-14T16:05:59.407411scmdmz1 sshd\[10378\]: Failed password for invalid user usuario from 157.230.105.121 port 34820 ssh2 ... |
2019-11-15 01:08:11 |
| 134.175.246.54 | attack | firewall-block, port(s): 80/tcp |
2019-11-15 00:57:27 |
| 5.248.156.70 | attack | " " |
2019-11-15 00:35:12 |
| 171.6.112.51 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/171.6.112.51/ TH - 1H : (43) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TH NAME ASN : ASN45758 IP : 171.6.112.51 CIDR : 171.6.0.0/16 PREFIX COUNT : 64 UNIQUE IP COUNT : 1069568 ATTACKS DETECTED ASN45758 : 1H - 1 3H - 2 6H - 4 12H - 11 24H - 21 DateTime : 2019-11-14 15:39:45 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-11-15 00:25:05 |
| 138.232.8.48 | attackspambots | From: Digital Federal Credit Union [mailto:onlinemessage@armstong.com] DCU phishing/fraud; illicit use of entity name/credentials/copyright. Unsolicited bulk spam - zid-vpns-8-48.uibk.ac.at, University Of Innsbruck - 138.232.8.48 Spam link www.28niubi1.com = 58.64.157.132 NWT iDC Data Service – BLACKLISTED - phishing redirect: - northernexpressions.com.au = 104.247.75.218 InMotion Hosting, Inc. Appear to redirect/replicate valid DCU web site: - Spam link u6118461.ct.sendgrid.net = repeat IP 167.89.123.16, 167.89.115.54, 167.89.118.35 – SendGrid - Spam link media.whatcounts.com = 99.84.13.60, 99.84.13.158, 99.84.13.67, 99.84.13.207 – Amazon |
2019-11-15 00:39:14 |
| 94.21.34.3 | attackbotsspam | php WP PHPmyadamin ABUSE blocked for 12h |
2019-11-15 00:50:34 |
| 79.137.75.5 | attack | Nov 14 17:15:01 SilenceServices sshd[20312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.75.5 Nov 14 17:15:04 SilenceServices sshd[20312]: Failed password for invalid user dbus from 79.137.75.5 port 40858 ssh2 Nov 14 17:18:16 SilenceServices sshd[22382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.75.5 |
2019-11-15 00:24:22 |
| 144.208.127.22 | attackbotsspam | 3389 |
2019-11-15 00:38:12 |
| 185.175.93.18 | attackspam | 11/14/2019-11:40:55.621490 185.175.93.18 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-11-15 00:41:59 |
| 51.68.123.192 | attack | Nov 14 06:46:11 kapalua sshd\[31031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.ip-51-68-123.eu user=nobody Nov 14 06:46:12 kapalua sshd\[31031\]: Failed password for nobody from 51.68.123.192 port 45884 ssh2 Nov 14 06:50:01 kapalua sshd\[31354\]: Invalid user ncar from 51.68.123.192 Nov 14 06:50:01 kapalua sshd\[31354\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.ip-51-68-123.eu Nov 14 06:50:03 kapalua sshd\[31354\]: Failed password for invalid user ncar from 51.68.123.192 port 55752 ssh2 |
2019-11-15 01:00:19 |