城市(city): unknown
省份(region): unknown
国家(country): Sweden
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.230.252.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54693
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;85.230.252.12. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 95 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 00:11:01 CST 2025
;; MSG SIZE rcvd: 10612.252.230.85.in-addr.arpa domain name pointer c-85-230-252-12.bbcust.telenor.se.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
12.252.230.85.in-addr.arpa name = c-85-230-252-12.bbcust.telenor.se.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 222.186.31.127 | attackbotsspam | Jul 25 16:28:37 ip-172-31-62-245 sshd\[1958\]: Failed password for root from 222.186.31.127 port 52120 ssh2\ Jul 25 16:28:41 ip-172-31-62-245 sshd\[1958\]: Failed password for root from 222.186.31.127 port 52120 ssh2\ Jul 25 16:28:44 ip-172-31-62-245 sshd\[1958\]: Failed password for root from 222.186.31.127 port 52120 ssh2\ Jul 25 16:35:54 ip-172-31-62-245 sshd\[2030\]: Failed password for root from 222.186.31.127 port 52564 ssh2\ Jul 25 16:35:56 ip-172-31-62-245 sshd\[2030\]: Failed password for root from 222.186.31.127 port 52564 ssh2\ |
2020-07-26 00:52:27 |
| 139.59.34.226 | attack | 139.59.34.226 - - [25/Jul/2020:17:15:05 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.34.226 - - [25/Jul/2020:17:15:12 +0200] "POST /wp-login.php HTTP/1.1" 200 6561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.34.226 - - [25/Jul/2020:17:15:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-07-26 01:20:11 |
| 186.193.5.78 | attackspam | Unauthorized connection attempt from IP address 186.193.5.78 on Port 445(SMB) |
2020-07-26 00:52:46 |
| 176.74.13.170 | attackbotsspam | fail2ban |
2020-07-26 01:29:18 |
| 106.225.155.224 | attack | $f2bV_matches |
2020-07-26 00:58:19 |
| 51.91.116.150 | attackbotsspam | Jul 25 17:23:03 s1 sshd[14374]: Unable to negotiate with 51.91.116.150 port 43446: no matching host key type found. Their offer: ssh-rsa,ssh-dss [preauth] Jul 25 17:23:34 s1 sshd[14379]: Unable to negotiate with 51.91.116.150 port 47440: no matching host key type found. Their offer: ssh-rsa,ssh-dss [preauth] Jul 25 17:24:06 s1 sshd[14390]: Unable to negotiate with 51.91.116.150 port 51436: no matching host key type found. Their offer: ssh-rsa,ssh-dss [preauth] |
2020-07-26 01:27:28 |
| 103.117.36.231 | attackspambots | Unauthorized connection attempt from IP address 103.117.36.231 on Port 445(SMB) |
2020-07-26 01:11:32 |
| 128.199.69.169 | attack | 4378/tcp 14245/tcp 4531/tcp... [2020-06-22/07-25]85pkt,34pt.(tcp) |
2020-07-26 01:01:37 |
| 39.109.122.157 | attack | Lines containing failures of 39.109.122.157 Jul 24 12:13:59 neweola sshd[12485]: Invalid user apache from 39.109.122.157 port 44336 Jul 24 12:13:59 neweola sshd[12485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.109.122.157 Jul 24 12:14:00 neweola sshd[12485]: Failed password for invalid user apache from 39.109.122.157 port 44336 ssh2 Jul 24 12:14:01 neweola sshd[12485]: Received disconnect from 39.109.122.157 port 44336:11: Bye Bye [preauth] Jul 24 12:14:01 neweola sshd[12485]: Disconnected from invalid user apache 39.109.122.157 port 44336 [preauth] Jul 24 12:17:23 neweola sshd[12661]: Invalid user ofbiz from 39.109.122.157 port 36766 Jul 24 12:17:23 neweola sshd[12661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.109.122.157 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=39.109.122.157 |
2020-07-26 00:56:27 |
| 185.164.138.21 | attack | Exploited Host. |
2020-07-26 01:15:34 |
| 14.98.213.14 | attackbots | Exploited Host. |
2020-07-26 01:05:27 |
| 109.65.67.8 | attackbotsspam | Automatic report - Port Scan Attack |
2020-07-26 01:22:17 |
| 97.64.120.166 | attackspambots | Jul 25 15:53:08 rush sshd[3257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=97.64.120.166 Jul 25 15:53:10 rush sshd[3257]: Failed password for invalid user ravi from 97.64.120.166 port 35946 ssh2 Jul 25 16:00:58 rush sshd[3401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=97.64.120.166 ... |
2020-07-26 01:32:52 |
| 140.143.206.137 | attack | Exploited Host. |
2020-07-26 00:54:59 |
| 103.138.108.48 | attackbotsspam | Jul 25 18:30:27 offspring postfix/smtpd[18303]: connect from unknown[103.138.108.48] Jul 25 18:30:28 offspring postfix/smtpd[18303]: warning: unknown[103.138.108.48]: SASL LOGIN authentication failed: authentication failure Jul 25 18:30:28 offspring postfix/smtpd[18303]: lost connection after AUTH from unknown[103.138.108.48] Jul 25 18:30:28 offspring postfix/smtpd[18303]: disconnect from unknown[103.138.108.48] Jul 25 18:30:29 offspring postfix/smtpd[18303]: connect from unknown[103.138.108.48] Jul 25 18:30:30 offspring postfix/smtpd[18303]: warning: unknown[103.138.108.48]: SASL LOGIN authentication failed: authentication failure Jul 25 18:30:30 offspring postfix/smtpd[18303]: lost connection after AUTH from unknown[103.138.108.48] Jul 25 18:30:30 offspring postfix/smtpd[18303]: disconnect from unknown[103.138.108.48] Jul 25 18:30:31 offspring postfix/smtpd[18303]: connect from unknown[103.138.108.48] Jul 25 18:30:32 offspring postfix/smtpd[18303]: warning: unknown[10........ ------------------------------- |
2020-07-26 01:31:26 |