城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.85.137.75
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23026
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;106.85.137.75. IN A
;; AUTHORITY SECTION:
. 540 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022800 1800 900 604800 86400
;; Query time: 45 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 14:44:29 CST 2022
;; MSG SIZE rcvd: 106
Host 75.137.85.106.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 75.137.85.106.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 142.93.251.1 | attackspam | Nov 11 01:00:59 lnxded63 sshd[5921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.251.1 |
2019-11-11 08:11:35 |
| 180.252.22.214 | attack | Unauthorized connection attempt from IP address 180.252.22.214 on Port 445(SMB) |
2019-11-11 08:06:09 |
| 222.186.175.161 | attackbots | DATE:2019-11-11 01:00:42, IP:222.186.175.161, PORT:ssh SSH brute force auth on honeypot server (honey-neo-dc-bis) |
2019-11-11 08:07:10 |
| 5.1.55.188 | attack | Unauthorized connection attempt from IP address 5.1.55.188 on Port 445(SMB) |
2019-11-11 07:58:55 |
| 202.124.186.114 | attack | Nov 11 01:01:06 ns381471 sshd[16856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.124.186.114 Nov 11 01:01:08 ns381471 sshd[16856]: Failed password for invalid user lito from 202.124.186.114 port 46322 ssh2 |
2019-11-11 08:04:08 |
| 186.91.102.240 | attackbotsspam | Unauthorized connection attempt from IP address 186.91.102.240 on Port 445(SMB) |
2019-11-11 08:13:09 |
| 61.55.135.118 | attack | Unauthorised access (Nov 11) SRC=61.55.135.118 LEN=40 TTL=239 ID=34978 TCP DPT=445 WINDOW=1024 SYN Unauthorised access (Nov 10) SRC=61.55.135.118 LEN=40 TTL=239 ID=11414 TCP DPT=1433 WINDOW=1024 SYN |
2019-11-11 08:07:31 |
| 45.184.186.17 | attack | Honeypot attack, port: 23, PTR: PTR record not found |
2019-11-11 07:57:46 |
| 123.30.236.149 | attackbotsspam | SSH login attempts, brute-force attack. Date: Sun Nov 10. 17:33:47 2019 +0100 Source IP: 123.30.236.149 (VN/Vietnam/static.vnpt.vn) Log entries: Nov 10 17:29:30 vserv sshd[31159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.236.149 user=root Nov 10 17:29:32 vserv sshd[31159]: Failed password for root from 123.30.236.149 port 46074 ssh2 Nov 10 17:33:41 vserv sshd[31674]: Invalid user orange from 123.30.236.149 Nov 10 17:33:41 vserv sshd[31674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.236.149 Nov 10 17:33:43 vserv sshd[31674]: Failed password for invalid user orange from 123.30.236.149 port 18438 ssh2 |
2019-11-11 07:41:43 |
| 129.211.14.39 | attack | Nov 10 16:54:20 MainVPS sshd[16251]: Invalid user temp from 129.211.14.39 port 32934 Nov 10 16:54:20 MainVPS sshd[16251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.14.39 Nov 10 16:54:20 MainVPS sshd[16251]: Invalid user temp from 129.211.14.39 port 32934 Nov 10 16:54:22 MainVPS sshd[16251]: Failed password for invalid user temp from 129.211.14.39 port 32934 ssh2 Nov 10 17:01:02 MainVPS sshd[29202]: Invalid user cod4server from 129.211.14.39 port 41394 ... |
2019-11-11 07:53:11 |
| 240e:f7:4f01:c::3 | attack | 240e:00f7:4f01:000c:0000:0000:0000:0003 was recorded 14 times by 2 hosts attempting to connect to the following ports: 53,102,5443,8000,4443,3460,9001,195,84,8060,1022,264. Incident counter (4h, 24h, all-time): 14, 134, 1480 |
2019-11-11 08:13:21 |
| 163.172.190.230 | attack | port scan and connect, tcp 443 (https) |
2019-11-11 07:42:53 |
| 194.186.87.22 | attack | Unauthorized connection attempt from IP address 194.186.87.22 on Port 445(SMB) |
2019-11-11 08:14:19 |
| 5.196.18.169 | attackspambots | Nov 10 19:07:43 TORMINT sshd\[6147\]: Invalid user spark from 5.196.18.169 Nov 10 19:07:43 TORMINT sshd\[6147\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.18.169 Nov 10 19:07:46 TORMINT sshd\[6147\]: Failed password for invalid user spark from 5.196.18.169 port 60370 ssh2 ... |
2019-11-11 08:16:59 |
| 187.44.85.18 | attack | Unauthorized connection attempt from IP address 187.44.85.18 on Port 445(SMB) |
2019-11-11 07:50:15 |