城市(city): Bergen auf Ruegen
省份(region): Mecklenburg-Vorpommern
国家(country): Germany
运营商(isp): Telekom
主机名(hostname): unknown
机构(organization): e.discom Telekommunikation GmbH
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.199.70.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16181
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;85.199.70.148. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019080801 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Aug 09 01:31:49 CST 2019
;; MSG SIZE rcvd: 117148.70.199.85.in-addr.arpa domain name pointer 148.70.199.85.ediscom.de.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
*** Can't find 148.70.199.85.in-addr.arpa.: No answer
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 183.134.199.68 | attackbotsspam | Invalid user cr from 183.134.199.68 port 41437 |
2019-09-01 15:10:23 |
| 148.70.223.115 | attack | Invalid user frida from 148.70.223.115 port 44126 |
2019-09-01 15:04:45 |
| 202.40.190.13 | attack | Caught in portsentry honeypot |
2019-09-01 15:05:55 |
| 87.196.49.193 | attackbots | Invalid user kouno from 87.196.49.193 port 49020 |
2019-09-01 14:19:14 |
| 85.209.0.124 | attackspam | Port scan |
2019-09-01 14:08:54 |
| 159.65.245.203 | attackbotsspam | $f2bV_matches |
2019-09-01 14:47:15 |
| 92.53.90.143 | attackspambots | 08/31/2019-17:42:47.131190 92.53.90.143 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-09-01 14:12:15 |
| 162.243.116.224 | attackspam | Sep 1 04:24:44 tuxlinux sshd[60491]: Invalid user lclin from 162.243.116.224 port 52718 Sep 1 04:24:44 tuxlinux sshd[60491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.116.224 Sep 1 04:24:44 tuxlinux sshd[60491]: Invalid user lclin from 162.243.116.224 port 52718 Sep 1 04:24:44 tuxlinux sshd[60491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.116.224 Sep 1 04:24:44 tuxlinux sshd[60491]: Invalid user lclin from 162.243.116.224 port 52718 Sep 1 04:24:44 tuxlinux sshd[60491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.116.224 Sep 1 04:24:45 tuxlinux sshd[60491]: Failed password for invalid user lclin from 162.243.116.224 port 52718 ssh2 ... |
2019-09-01 14:32:07 |
| 78.100.18.81 | attackbotsspam | Aug 31 18:50:27 lcprod sshd\[25025\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.100.18.81 user=root Aug 31 18:50:28 lcprod sshd\[25025\]: Failed password for root from 78.100.18.81 port 48172 ssh2 Aug 31 18:55:06 lcprod sshd\[25461\]: Invalid user mschwartz from 78.100.18.81 Aug 31 18:55:06 lcprod sshd\[25461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.100.18.81 Aug 31 18:55:09 lcprod sshd\[25461\]: Failed password for invalid user mschwartz from 78.100.18.81 port 40326 ssh2 |
2019-09-01 14:24:05 |
| 117.24.95.203 | attackspam | Invalid user admin from 117.24.95.203 port 56525 |
2019-09-01 14:45:33 |
| 85.209.0.49 | attackspambots | Blocked for port scanning. Time: Sat Aug 31. 21:32:11 2019 +0200 IP: 85.209.0.49 (RU/Russia/-) Sample of block hits: Aug 31 21:31:31 vserv kernel: [40882032.533622] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=85.209.0.49 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=44119 PROTO=TCP SPT=59887 DPT=3481 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 31 21:31:33 vserv kernel: [40882034.400273] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=85.209.0.49 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=60479 PROTO=TCP SPT=59887 DPT=3490 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 31 21:31:39 vserv kernel: [40882040.242229] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=85.209.0.49 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=896 PROTO=TCP SPT=59887 DPT=3354 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 31 21:31:39 vserv kernel: [40882040.281872] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=85.209.0.49 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=51528 PROTO=TCP SPT=59887 DPT=3392 WINDOW=1024 .... |
2019-09-01 14:34:19 |
| 152.168.227.240 | attackbots | Invalid user love from 152.168.227.240 port 54813 |
2019-09-01 15:06:42 |
| 185.159.47.243 | attack | [portscan] Port scan |
2019-09-01 14:58:17 |
| 85.209.0.127 | attackspam | *Port Scan* detected from 85.209.0.127 (RU/Russia/-). 11 hits in the last 45 seconds |
2019-09-01 14:31:28 |
| 202.83.30.37 | attack | web-1 [ssh] SSH Attack |
2019-09-01 15:07:47 |