城市(city): unknown
省份(region): unknown
国家(country): Netherlands (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 93.94.200.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3113
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;93.94.200.161. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022702 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 06:18:14 CST 2025
;; MSG SIZE rcvd: 106Host 161.200.94.93.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 161.200.94.93.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 111.230.53.144 | attack | Oct 11 13:25:02 vps01 sshd[17741]: Failed password for root from 111.230.53.144 port 34934 ssh2 |
2019-10-11 19:46:48 |
| 92.118.161.53 | attackspam | 10/11/2019-05:52:14.421907 92.118.161.53 Protocol: 17 GPL POLICY PCAnywhere server response |
2019-10-11 19:43:02 |
| 104.131.8.137 | attack | Oct 11 13:34:41 vpn01 sshd[18663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.8.137 Oct 11 13:34:44 vpn01 sshd[18663]: Failed password for invalid user Georgia2017 from 104.131.8.137 port 51112 ssh2 ... |
2019-10-11 19:47:17 |
| 157.230.32.47 | attackbotsspam | www.xn--netzfundstckderwoche-yec.de 157.230.32.47 \[11/Oct/2019:08:12:58 +0200\] "POST /wp-login.php HTTP/1.1" 200 5659 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.xn--netzfundstckderwoche-yec.de 157.230.32.47 \[11/Oct/2019:08:13:02 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4093 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-11 19:30:43 |
| 169.197.108.6 | attackspam | Microsoft Windows HTTP.sys Remote Code Execution Vulnerability, PTR: survey.internet-census.org. |
2019-10-11 20:13:26 |
| 128.14.133.58 | attackbotsspam | Microsoft Windows HTTP.sys Remote Code Execution Vulnerability, PTR: survey.internet-census.org. |
2019-10-11 20:11:38 |
| 212.129.35.106 | attackbots | $f2bV_matches |
2019-10-11 19:41:00 |
| 170.238.46.6 | attack | Oct 11 13:27:44 dedicated sshd[863]: Invalid user Haslo@ABC from 170.238.46.6 port 52942 |
2019-10-11 19:53:22 |
| 190.43.38.28 | attack | Oct 11 05:37:59 mxgate1 postfix/postscreen[5890]: CONNECT from [190.43.38.28]:24750 to [176.31.12.44]:25 Oct 11 05:38:00 mxgate1 postfix/dnsblog[5901]: addr 190.43.38.28 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 11 05:38:00 mxgate1 postfix/dnsblog[5901]: addr 190.43.38.28 listed by domain zen.spamhaus.org as 127.0.0.4 Oct 11 05:38:00 mxgate1 postfix/dnsblog[5901]: addr 190.43.38.28 listed by domain zen.spamhaus.org as 127.0.0.3 Oct 11 05:38:00 mxgate1 postfix/dnsblog[5902]: addr 190.43.38.28 listed by domain cbl.abuseat.org as 127.0.0.2 Oct 11 05:38:00 mxgate1 postfix/dnsblog[5904]: addr 190.43.38.28 listed by domain bl.spamcop.net as 127.0.0.2 Oct 11 05:38:00 mxgate1 postfix/dnsblog[5903]: addr 190.43.38.28 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 11 05:38:05 mxgate1 postfix/postscreen[5890]: DNSBL rank 5 for [190.43.38.28]:24750 Oct x@x Oct 11 05:38:06 mxgate1 postfix/postscreen[5890]: HANGUP after 1.2 from [190.43.38.28]:24750 in tests after........ ------------------------------- |
2019-10-11 20:00:53 |
| 104.244.77.210 | attackbots | Port Scan: TCP/22 |
2019-10-11 19:44:27 |
| 60.30.92.74 | attackbotsspam | Oct 11 04:04:33 www_kotimaassa_fi sshd[11774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.30.92.74 Oct 11 04:04:35 www_kotimaassa_fi sshd[11774]: Failed password for invalid user coen from 60.30.92.74 port 54017 ssh2 ... |
2019-10-11 19:55:16 |
| 104.200.110.184 | attack | Oct 11 12:07:57 ovpn sshd\[30965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.110.184 user=root Oct 11 12:07:59 ovpn sshd\[30965\]: Failed password for root from 104.200.110.184 port 35332 ssh2 Oct 11 12:17:25 ovpn sshd\[558\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.110.184 user=root Oct 11 12:17:27 ovpn sshd\[558\]: Failed password for root from 104.200.110.184 port 59276 ssh2 Oct 11 12:21:23 ovpn sshd\[14007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.110.184 user=root |
2019-10-11 19:46:35 |
| 49.88.112.72 | attackbotsspam | Oct 11 14:07:39 sauna sshd[105686]: Failed password for root from 49.88.112.72 port 43006 ssh2 Oct 11 14:07:42 sauna sshd[105686]: Failed password for root from 49.88.112.72 port 43006 ssh2 ... |
2019-10-11 19:59:30 |
| 114.242.245.32 | attack | 2019-10-11T11:02:28.473470shield sshd\[13203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.242.245.32 user=root 2019-10-11T11:02:30.512040shield sshd\[13203\]: Failed password for root from 114.242.245.32 port 47122 ssh2 2019-10-11T11:06:29.556514shield sshd\[13612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.242.245.32 user=root 2019-10-11T11:06:31.344468shield sshd\[13612\]: Failed password for root from 114.242.245.32 port 62198 ssh2 2019-10-11T11:10:41.198207shield sshd\[14078\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.242.245.32 user=root |
2019-10-11 19:43:17 |
| 27.205.210.40 | attack | (Oct 11) LEN=40 TTL=49 ID=10475 TCP DPT=8080 WINDOW=44306 SYN (Oct 10) LEN=40 TTL=49 ID=32147 TCP DPT=8080 WINDOW=35122 SYN (Oct 10) LEN=40 TTL=49 ID=31229 TCP DPT=8080 WINDOW=44306 SYN (Oct 8) LEN=40 TTL=49 ID=41967 TCP DPT=8080 WINDOW=44306 SYN (Oct 8) LEN=40 TTL=49 ID=60494 TCP DPT=8080 WINDOW=35122 SYN (Oct 7) LEN=40 TTL=49 ID=25307 TCP DPT=8080 WINDOW=35122 SYN (Oct 7) LEN=40 TTL=49 ID=27850 TCP DPT=8080 WINDOW=44306 SYN (Oct 6) LEN=40 TTL=49 ID=9959 TCP DPT=8080 WINDOW=44306 SYN (Oct 6) LEN=40 TTL=49 ID=12186 TCP DPT=8080 WINDOW=35122 SYN (Oct 6) LEN=40 TTL=49 ID=46667 TCP DPT=8080 WINDOW=44306 SYN (Oct 6) LEN=40 TTL=49 ID=25154 TCP DPT=8080 WINDOW=44306 SYN (Oct 6) LEN=40 TTL=49 ID=46557 TCP DPT=8080 WINDOW=35122 SYN |
2019-10-11 19:50:12 |