城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 98.164.85.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49873
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;98.164.85.42. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012300 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 15:36:51 CST 2025
;; MSG SIZE rcvd: 10542.85.164.98.in-addr.arpa domain name pointer ip98-164-85-42.no.no.cox.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
42.85.164.98.in-addr.arpa name = ip98-164-85-42.no.no.cox.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 134.6.65.22 | attack | Telnet Honeypot -> Telnet Bruteforce / Login |
2020-08-05 07:50:49 |
| 193.27.229.16 | attackspam | 3389BruteforceStormFW22 |
2020-08-05 08:12:56 |
| 13.93.55.164 | attackbots | prod11 ... |
2020-08-05 07:59:53 |
| 121.12.151.250 | attackspam | 2020-08-04T19:53:53.436251+02:00 |
2020-08-05 07:44:12 |
| 49.232.39.21 | attackbots | Aug 4 18:53:12 mail sshd\[41834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.39.21 user=root ... |
2020-08-05 07:48:48 |
| 92.63.196.21 | attackbotsspam | 3389BruteforceStormFW22 |
2020-08-05 07:47:05 |
| 139.186.8.212 | attack | Aug 5 01:24:44 marvibiene sshd[5231]: Failed password for root from 139.186.8.212 port 60992 ssh2 |
2020-08-05 07:51:02 |
| 86.35.214.87 | attack | Port probing on unauthorized port 9530 |
2020-08-05 08:07:05 |
| 89.137.164.230 | attackspam | 89.137.164.230 - - [05/Aug/2020:00:28:49 +0100] "POST /wp-login.php HTTP/1.1" 200 6071 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 89.137.164.230 - - [05/Aug/2020:00:44:22 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 89.137.164.230 - - [05/Aug/2020:00:44:22 +0100] "POST /wp-login.php HTTP/1.1" 200 6064 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" ... |
2020-08-05 07:49:56 |
| 201.40.244.146 | attackbotsspam | Aug 5 00:31:12 Ubuntu-1404-trusty-64-minimal sshd\[17474\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.40.244.146 user=root Aug 5 00:31:13 Ubuntu-1404-trusty-64-minimal sshd\[17474\]: Failed password for root from 201.40.244.146 port 44430 ssh2 Aug 5 00:43:17 Ubuntu-1404-trusty-64-minimal sshd\[23047\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.40.244.146 user=root Aug 5 00:43:19 Ubuntu-1404-trusty-64-minimal sshd\[23047\]: Failed password for root from 201.40.244.146 port 50592 ssh2 Aug 5 00:52:42 Ubuntu-1404-trusty-64-minimal sshd\[27275\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.40.244.146 user=root |
2020-08-05 07:55:05 |
| 111.72.193.25 | attack | Aug 4 20:13:34 srv01 postfix/smtpd\[25977\]: warning: unknown\[111.72.193.25\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 4 20:17:07 srv01 postfix/smtpd\[23858\]: warning: unknown\[111.72.193.25\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 4 20:17:18 srv01 postfix/smtpd\[23858\]: warning: unknown\[111.72.193.25\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 4 20:17:34 srv01 postfix/smtpd\[23858\]: warning: unknown\[111.72.193.25\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 4 20:17:53 srv01 postfix/smtpd\[23858\]: warning: unknown\[111.72.193.25\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-08-05 08:10:55 |
| 85.209.0.76 | attackspam | Aug 4 13:54:11 mail sshd\[9256\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.0.76 user=root ... |
2020-08-05 07:36:05 |
| 45.10.88.24 | attackbotsspam | Brute forcing RDP port 3389 |
2020-08-05 07:39:03 |
| 190.156.238.155 | attackbots | Aug 2 05:20:33 sip sshd[22030]: Failed password for root from 190.156.238.155 port 48158 ssh2 Aug 2 05:31:31 sip sshd[26134]: Failed password for root from 190.156.238.155 port 44744 ssh2 |
2020-08-05 07:47:36 |
| 45.145.67.80 | attackspam | Aug 5 01:36:32 debian-2gb-nbg1-2 kernel: \[18842656.094775\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.145.67.80 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=26106 PROTO=TCP SPT=42901 DPT=54154 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-08-05 07:37:04 |