城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.22.139.27
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30305
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;119.22.139.27. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021700 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 17 20:54:00 CST 2025
;; MSG SIZE rcvd: 106Host 27.139.22.119.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 27.139.22.119.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 31.220.2.134 | attack | abcdata-sys.de:80 31.220.2.134 - - [28/Apr/2020:17:36:41 +0200] "POST /xmlrpc.php HTTP/1.0" 301 497 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.92 Safari/537.36" www.goldgier.de 31.220.2.134 [28/Apr/2020:17:36:42 +0200] "POST /xmlrpc.php HTTP/1.0" 200 3899 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.92 Safari/537.36" |
2020-04-29 01:38:09 |
| 167.172.119.104 | attackbotsspam | Apr 28 09:53:14 NPSTNNYC01T sshd[4866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.119.104 Apr 28 09:53:16 NPSTNNYC01T sshd[4866]: Failed password for invalid user ayda from 167.172.119.104 port 36518 ssh2 Apr 28 09:55:17 NPSTNNYC01T sshd[5061]: Failed password for root from 167.172.119.104 port 40300 ssh2 ... |
2020-04-29 01:23:17 |
| 134.122.53.221 | attackbotsspam | webserver hammering |
2020-04-29 01:43:06 |
| 138.197.149.97 | attackspam | 2020-04-28T19:16:48.570174v22018076590370373 sshd[28069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.97 2020-04-28T19:16:48.564978v22018076590370373 sshd[28069]: Invalid user admin from 138.197.149.97 port 35558 2020-04-28T19:16:50.349941v22018076590370373 sshd[28069]: Failed password for invalid user admin from 138.197.149.97 port 35558 ssh2 2020-04-28T19:20:41.177627v22018076590370373 sshd[12832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.97 user=root 2020-04-28T19:20:42.941974v22018076590370373 sshd[12832]: Failed password for root from 138.197.149.97 port 36312 ssh2 ... |
2020-04-29 01:23:40 |
| 106.12.58.4 | attackbotsspam | 2020-04-28T10:05:45.6630321495-001 sshd[13732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.58.4 2020-04-28T10:05:45.6521621495-001 sshd[13732]: Invalid user test from 106.12.58.4 port 52662 2020-04-28T10:05:47.7709601495-001 sshd[13732]: Failed password for invalid user test from 106.12.58.4 port 52662 ssh2 2020-04-28T10:08:24.9730331495-001 sshd[13871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.58.4 user=root 2020-04-28T10:08:26.9101371495-001 sshd[13871]: Failed password for root from 106.12.58.4 port 54690 ssh2 2020-04-28T10:11:27.4392131495-001 sshd[14086]: Invalid user du from 106.12.58.4 port 56704 ... |
2020-04-29 01:09:35 |
| 185.177.104.130 | attack | 1588075830 - 04/28/2020 14:10:30 Host: 185.177.104.130/185.177.104.130 Port: 445 TCP Blocked |
2020-04-29 01:09:02 |
| 51.255.173.222 | attack | $f2bV_matches |
2020-04-29 01:08:30 |
| 124.156.107.252 | attackbots | Apr 28 14:10:28 vps647732 sshd[1992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.107.252 Apr 28 14:10:30 vps647732 sshd[1992]: Failed password for invalid user app from 124.156.107.252 port 58794 ssh2 ... |
2020-04-29 01:13:07 |
| 34.92.30.185 | attack | Apr 28 16:59:04 Ubuntu-1404-trusty-64-minimal sshd\[19842\]: Invalid user roo from 34.92.30.185 Apr 28 16:59:04 Ubuntu-1404-trusty-64-minimal sshd\[19842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.92.30.185 Apr 28 16:59:06 Ubuntu-1404-trusty-64-minimal sshd\[19842\]: Failed password for invalid user roo from 34.92.30.185 port 49718 ssh2 Apr 28 17:01:33 Ubuntu-1404-trusty-64-minimal sshd\[26010\]: Invalid user syed from 34.92.30.185 Apr 28 17:01:33 Ubuntu-1404-trusty-64-minimal sshd\[26010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.92.30.185 |
2020-04-29 01:33:43 |
| 123.21.69.102 | attack | Apr 28 14:01:37 xeon postfix/smtpd[31294]: warning: unknown[123.21.69.102]: SASL PLAIN authentication failed: authentication failure |
2020-04-29 01:48:23 |
| 103.56.149.139 | attack | Apr 28 11:03:20 Tower sshd[32904]: Connection from 103.56.149.139 port 42712 on 192.168.10.220 port 22 rdomain "" Apr 28 11:03:21 Tower sshd[32904]: Failed password for root from 103.56.149.139 port 42712 ssh2 Apr 28 11:03:22 Tower sshd[32904]: Received disconnect from 103.56.149.139 port 42712:11: Bye Bye [preauth] Apr 28 11:03:22 Tower sshd[32904]: Disconnected from authenticating user root 103.56.149.139 port 42712 [preauth] |
2020-04-29 01:28:10 |
| 120.78.40.150 | attack | Port probing on unauthorized port 46323 |
2020-04-29 01:44:48 |
| 80.82.64.127 | attackbots | [TCP- or UDP-based Port Scan] |
2020-04-29 01:19:05 |
| 185.176.27.86 | attackbotsspam | Port scan |
2020-04-29 01:31:58 |
| 2405:204:979f:390c:6c6e:c031:7370:5429 | attack | LGS,WP GET /wp-login.php |
2020-04-29 01:11:39 |