城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 9.138.31.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46982
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;9.138.31.149. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022501 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 26 03:19:37 CST 2025
;; MSG SIZE rcvd: 105Host 149.31.138.9.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 149.31.138.9.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 45.125.65.99 | attackbots | \[2019-11-10 11:07:27\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-10T11:07:27.755-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="6660801148556213011",SessionID="0x7fdf2cd1cd48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.65.99/55439",ACLName="no_extension_match" \[2019-11-10 11:08:09\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-10T11:08:09.722-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="6660901148556213011",SessionID="0x7fdf2c3e9938",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.65.99/50816",ACLName="no_extension_match" \[2019-11-10 11:08:40\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-10T11:08:40.727-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="6661001148556213011",SessionID="0x7fdf2cd1cd48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.125.65.99/51745",ACLNam |
2019-11-11 01:38:46 |
| 37.59.38.216 | attack | 2019-11-10T17:12:44.292448abusebot-5.cloudsearch.cf sshd\[27072\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns331058.ip-37-59-38.eu user=root |
2019-11-11 01:26:42 |
| 117.80.237.18 | attack | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2019-11-11 01:59:37 |
| 185.162.235.107 | attackspambots | Nov 10 01:16:54 xzibhostname postfix/smtpd[23033]: connect from unknown[185.162.235.107] Nov 10 01:16:54 xzibhostname postfix/smtpd[23033]: warning: unknown[185.162.235.107]: SASL LOGIN authentication failed: authentication failure Nov 10 01:16:54 xzibhostname postfix/smtpd[23033]: lost connection after AUTH from unknown[185.162.235.107] Nov 10 01:16:54 xzibhostname postfix/smtpd[23033]: disconnect from unknown[185.162.235.107] Nov 10 01:19:25 xzibhostname postfix/smtpd[23033]: connect from unknown[185.162.235.107] Nov 10 01:19:25 xzibhostname postfix/smtpd[25326]: connect from unknown[185.162.235.107] Nov 10 01:19:25 xzibhostname postfix/smtpd[23033]: warning: unknown[185.162.235.107]: SASL LOGIN authentication failed: authentication failure Nov 10 01:19:25 xzibhostname postfix/smtpd[25326]: warning: unknown[185.162.235.107]: SASL LOGIN authentication failed: authentication failure Nov 10 01:19:25 xzibhostname postfix/smtpd[23033]: lost connection after AUTH from unkno........ ------------------------------- |
2019-11-11 01:37:13 |
| 119.147.210.4 | attackbots | Nov 10 22:26:15 vibhu-HP-Z238-Microtower-Workstation sshd\[31085\]: Invalid user vagrant5 from 119.147.210.4 Nov 10 22:26:15 vibhu-HP-Z238-Microtower-Workstation sshd\[31085\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.147.210.4 Nov 10 22:26:18 vibhu-HP-Z238-Microtower-Workstation sshd\[31085\]: Failed password for invalid user vagrant5 from 119.147.210.4 port 26130 ssh2 Nov 10 22:31:06 vibhu-HP-Z238-Microtower-Workstation sshd\[31370\]: Invalid user schwich from 119.147.210.4 Nov 10 22:31:06 vibhu-HP-Z238-Microtower-Workstation sshd\[31370\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.147.210.4 ... |
2019-11-11 01:27:34 |
| 189.7.25.34 | attack | Nov 10 18:23:07 amit sshd\[11311\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.7.25.34 user=root Nov 10 18:23:08 amit sshd\[11311\]: Failed password for root from 189.7.25.34 port 44522 ssh2 Nov 10 18:31:04 amit sshd\[5166\]: Invalid user lisa from 189.7.25.34 Nov 10 18:31:04 amit sshd\[5166\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.7.25.34 ... |
2019-11-11 01:42:07 |
| 221.148.193.205 | attackbotsspam | ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic |
2019-11-11 01:54:27 |
| 92.118.37.74 | attackbots | ET CINS Active Threat Intelligence Poor Reputation IP group 88 - port: 3389 proto: TCP cat: Misc Attack |
2019-11-11 01:50:44 |
| 192.228.100.118 | attack | Nov 10 01:19:02 xzibhostname postfix/smtpd[25326]: connect from unknown[192.228.100.118] Nov 10 01:19:02 xzibhostname postfix/smtpd[25326]: warning: unknown[192.228.100.118]: SASL LOGIN authentication failed: authentication failure Nov 10 01:19:02 xzibhostname postfix/smtpd[25326]: lost connection after AUTH from unknown[192.228.100.118] Nov 10 01:19:02 xzibhostname postfix/smtpd[25326]: disconnect from unknown[192.228.100.118] Nov 10 01:23:00 xzibhostname postfix/smtpd[25326]: connect from unknown[192.228.100.118] Nov 10 01:23:00 xzibhostname postfix/smtpd[25326]: warning: unknown[192.228.100.118]: SASL LOGIN authentication failed: authentication failure Nov 10 01:23:01 xzibhostname postfix/smtpd[23033]: connect from unknown[192.228.100.118] Nov 10 01:23:01 xzibhostname postfix/smtpd[25326]: lost connection after AUTH from unknown[192.228.100.118] Nov 10 01:23:01 xzibhostname postfix/smtpd[25326]: disconnect from unknown[192.228.100.118] Nov 10 01:23:01 xzibhostname po........ ------------------------------- |
2019-11-11 01:41:40 |
| 159.203.201.81 | attackspam | ET DROP Dshield Block Listed Source group 1 - port: 24482 proto: TCP cat: Misc Attack |
2019-11-11 01:57:53 |
| 119.27.164.206 | attackspambots | Nov 10 17:08:43 mout sshd[28661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.27.164.206 user=root Nov 10 17:08:44 mout sshd[28661]: Failed password for root from 119.27.164.206 port 43408 ssh2 |
2019-11-11 01:36:03 |
| 51.38.126.184 | attackbots | Nov 10 18:10:48 ovpn sshd\[3657\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.126.184 user=root Nov 10 18:10:49 ovpn sshd\[3657\]: Failed password for root from 51.38.126.184 port 51366 ssh2 Nov 10 18:11:50 ovpn sshd\[3869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.126.184 user=root Nov 10 18:11:52 ovpn sshd\[3869\]: Failed password for root from 51.38.126.184 port 33652 ssh2 Nov 10 18:12:52 ovpn sshd\[4070\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.126.184 user=root |
2019-11-11 01:38:32 |
| 173.82.240.209 | attack | " " |
2019-11-11 01:21:56 |
| 45.10.88.55 | attackspam | 11/10/2019-12:41:27.203605 45.10.88.55 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-11-11 01:53:25 |
| 185.153.196.240 | attackspambots | 11/10/2019-11:42:56.309973 185.153.196.240 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-11-11 01:46:07 |