城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.57.77.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36095
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;117.57.77.140. IN A
;; AUTHORITY SECTION:
. 350 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 21:33:11 CST 2022
;; MSG SIZE rcvd: 106
Host 140.77.57.117.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 140.77.57.117.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 120.28.205.54 | attack | Unauthorised access (Nov 14) SRC=120.28.205.54 LEN=44 TTL=242 ID=8904 TCP DPT=1433 WINDOW=1024 SYN Unauthorised access (Nov 13) SRC=120.28.205.54 LEN=44 TTL=242 ID=16260 TCP DPT=445 WINDOW=1024 SYN |
2019-11-14 13:44:09 |
| 171.110.11.113 | attack | 23/tcp 23/tcp [2019-11-12/14]2pkt |
2019-11-14 13:42:17 |
| 132.145.153.124 | attackspambots | Nov 14 05:56:46 cp sshd[9272]: Failed password for root from 132.145.153.124 port 38980 ssh2 Nov 14 05:56:46 cp sshd[9272]: Failed password for root from 132.145.153.124 port 38980 ssh2 |
2019-11-14 13:23:21 |
| 51.38.224.46 | attackbotsspam | Nov 14 11:53:29 webhost01 sshd[32721]: Failed password for root from 51.38.224.46 port 58000 ssh2 ... |
2019-11-14 13:24:39 |
| 150.214.168.161 | attackspambots | SSH Bruteforce attempt |
2019-11-14 13:30:24 |
| 92.119.160.40 | attack | Nov 14 05:07:22 h2177944 kernel: \[6579957.501552\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.40 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=20869 PROTO=TCP SPT=40109 DPT=4687 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 14 05:37:00 h2177944 kernel: \[6581735.617498\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.40 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=9360 PROTO=TCP SPT=40109 DPT=5387 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 14 05:38:52 h2177944 kernel: \[6581847.560056\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.40 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=20364 PROTO=TCP SPT=40109 DPT=3287 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 14 05:48:08 h2177944 kernel: \[6582402.965179\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.40 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=27249 PROTO=TCP SPT=40109 DPT=2788 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 14 05:56:47 h2177944 kernel: \[6582922.343254\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.40 DST=85.214.117.9 |
2019-11-14 13:21:31 |
| 104.131.178.223 | attack | Nov 14 07:13:07 pkdns2 sshd\[35140\]: Address 104.131.178.223 maps to mail.mconnectmedia.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Nov 14 07:13:09 pkdns2 sshd\[35140\]: Failed password for root from 104.131.178.223 port 51207 ssh2Nov 14 07:16:49 pkdns2 sshd\[35300\]: Address 104.131.178.223 maps to mail.mconnectmedia.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Nov 14 07:16:49 pkdns2 sshd\[35300\]: Invalid user eward from 104.131.178.223Nov 14 07:16:51 pkdns2 sshd\[35300\]: Failed password for invalid user eward from 104.131.178.223 port 41419 ssh2Nov 14 07:20:19 pkdns2 sshd\[35467\]: Address 104.131.178.223 maps to mail.mconnectmedia.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Nov 14 07:20:19 pkdns2 sshd\[35467\]: Invalid user philips from 104.131.178.223 ... |
2019-11-14 13:26:12 |
| 111.68.104.130 | attack | Nov 13 23:52:08 TORMINT sshd\[29547\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.68.104.130 user=root Nov 13 23:52:10 TORMINT sshd\[29547\]: Failed password for root from 111.68.104.130 port 51701 ssh2 Nov 13 23:56:49 TORMINT sshd\[29851\]: Invalid user masae from 111.68.104.130 Nov 13 23:56:49 TORMINT sshd\[29851\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.68.104.130 ... |
2019-11-14 13:19:12 |
| 157.245.241.90 | attackbots | 1900/udp 1900/udp [2019-11-12/13]2pkt |
2019-11-14 13:38:16 |
| 150.109.164.15 | attack | 12345/tcp 50050/tcp [2019-10-13/11-14]2pkt |
2019-11-14 13:15:35 |
| 125.124.143.62 | attack | Nov 14 05:56:57 DAAP sshd[4021]: Invalid user manoj from 125.124.143.62 port 37498 Nov 14 05:56:57 DAAP sshd[4021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.124.143.62 Nov 14 05:56:57 DAAP sshd[4021]: Invalid user manoj from 125.124.143.62 port 37498 Nov 14 05:56:59 DAAP sshd[4021]: Failed password for invalid user manoj from 125.124.143.62 port 37498 ssh2 ... |
2019-11-14 13:12:27 |
| 119.52.253.2 | attackbotsspam | Nov 14 05:56:09 icinga sshd[8473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.52.253.2 Nov 14 05:56:11 icinga sshd[8473]: Failed password for invalid user jboss from 119.52.253.2 port 33348 ssh2 ... |
2019-11-14 13:43:19 |
| 113.168.140.54 | attackspam | 445/tcp 445/tcp [2019-11-12]2pkt |
2019-11-14 13:47:12 |
| 129.211.108.202 | attackspambots | Invalid user named from 129.211.108.202 port 35339 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.108.202 Failed password for invalid user named from 129.211.108.202 port 35339 ssh2 Invalid user scarberry from 129.211.108.202 port 53903 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.108.202 |
2019-11-14 13:29:22 |
| 139.59.94.225 | attackspam | F2B jail: sshd. Time: 2019-11-14 06:13:28, Reported by: VKReport |
2019-11-14 13:13:37 |