城市(city): unknown
省份(region): unknown
国家(country): Hong Kong
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 119.42.146.240
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5396
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;119.42.146.240. IN A
;; AUTHORITY SECTION:
. 446 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2021122900 1800 900 604800 86400
;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 29 23:44:41 CST 2021
;; MSG SIZE rcvd: 107Host 240.146.42.119.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 240.146.42.119.in-addr.arpa: SERVFAIL
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.54.114.208 | attackspambots | /var/log/messages:Nov 6 06:04:04 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1573020244.637:145401): pid=3195 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=3196 suid=74 rport=56792 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=106.54.114.208 terminal=? res=success' /var/log/messages:Nov 6 06:04:04 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1573020244.641:145402): pid=3195 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=3196 suid=74 rport=56792 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=106.54.114.208 terminal=? res=success' /var/log/messages:Nov 6 06:04:05 sanyalnet-cloud-vps fail2ban.filter[1538]: INFO [sshd] Found........ ------------------------------- |
2019-11-06 17:09:34 |
| 112.175.127.179 | attackspam | CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found |
2019-11-06 17:05:56 |
| 77.60.37.105 | attackspam | Nov 6 00:54:44 srv3 sshd\[12789\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.60.37.105 user=root Nov 6 00:54:46 srv3 sshd\[12789\]: Failed password for root from 77.60.37.105 port 33590 ssh2 Nov 6 00:58:14 srv3 sshd\[12843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.60.37.105 user=root Nov 6 01:09:24 srv3 sshd\[13050\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.60.37.105 user=root Nov 6 01:09:26 srv3 sshd\[13050\]: Failed password for root from 77.60.37.105 port 43620 ssh2 Nov 6 01:13:08 srv3 sshd\[13121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.60.37.105 user=root ... |
2019-11-06 17:03:16 |
| 139.219.5.139 | attackspambots | Nov 6 01:27:37 plusreed sshd[10576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.5.139 user=root Nov 6 01:27:39 plusreed sshd[10576]: Failed password for root from 139.219.5.139 port 1664 ssh2 ... |
2019-11-06 16:47:40 |
| 40.73.116.245 | attack | Nov 5 22:03:21 web1 sshd\[9149\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.116.245 user=root Nov 5 22:03:23 web1 sshd\[9149\]: Failed password for root from 40.73.116.245 port 59104 ssh2 Nov 5 22:08:25 web1 sshd\[9565\]: Invalid user ubnt from 40.73.116.245 Nov 5 22:08:25 web1 sshd\[9565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.116.245 Nov 5 22:08:27 web1 sshd\[9565\]: Failed password for invalid user ubnt from 40.73.116.245 port 39782 ssh2 |
2019-11-06 16:38:52 |
| 184.105.139.68 | attackbots | scan z |
2019-11-06 16:42:29 |
| 192.99.10.122 | attackspambots | " " |
2019-11-06 16:56:41 |
| 201.149.22.37 | attackspam | Nov 6 09:30:15 lnxmail61 sshd[501]: Failed password for root from 201.149.22.37 port 54702 ssh2 Nov 6 09:30:15 lnxmail61 sshd[501]: Failed password for root from 201.149.22.37 port 54702 ssh2 |
2019-11-06 16:43:03 |
| 14.29.238.225 | attackspam | Nov 4 06:39:52 rb06 sshd[11700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.238.225 user=r.r Nov 4 06:39:54 rb06 sshd[11700]: Failed password for r.r from 14.29.238.225 port 51011 ssh2 Nov 4 06:39:54 rb06 sshd[11700]: Received disconnect from 14.29.238.225: 11: Bye Bye [preauth] Nov 4 06:49:39 rb06 sshd[17369]: Failed password for invalid user user1 from 14.29.238.225 port 52207 ssh2 Nov 4 06:49:39 rb06 sshd[17369]: Received disconnect from 14.29.238.225: 11: Bye Bye [preauth] Nov 4 06:54:54 rb06 sshd[22677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.238.225 user=r.r Nov 4 06:54:57 rb06 sshd[22677]: Failed password for r.r from 14.29.238.225 port 42558 ssh2 Nov 4 06:54:57 rb06 sshd[22677]: Received disconnect from 14.29.238.225: 11: Bye Bye [preauth] Nov 4 07:00:08 rb06 sshd[26308]: Failed password for invalid user aruntp from 14.29.238.225 port 32908 ssh2 N........ ------------------------------- |
2019-11-06 16:59:37 |
| 194.28.112.140 | attackbotsspam | Connection by 194.28.112.140 on port: 3316 got caught by honeypot at 11/6/2019 7:21:44 AM |
2019-11-06 17:11:19 |
| 37.59.100.22 | attack | Nov 5 19:32:11 srv2 sshd\[9117\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.100.22 user=root Nov 5 19:32:13 srv2 sshd\[9117\]: Failed password for root from 37.59.100.22 port 41344 ssh2 Nov 5 19:35:47 srv2 sshd\[9194\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.100.22 user=root ... |
2019-11-06 16:40:23 |
| 106.75.148.95 | attackspambots | v+ssh-bruteforce |
2019-11-06 16:49:46 |
| 51.68.122.216 | attackspambots | 2019-11-06T09:05:23.795820abusebot-8.cloudsearch.cf sshd\[28692\]: Invalid user 11Fum4tulP0@t3Uc1d\^%\^\&\*\?122412 from 51.68.122.216 port 49960 |
2019-11-06 17:06:43 |
| 190.119.190.122 | attackspambots | Nov 6 09:34:52 MK-Soft-VM7 sshd[31327]: Failed password for root from 190.119.190.122 port 36694 ssh2 Nov 6 09:39:07 MK-Soft-VM7 sshd[31405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.119.190.122 ... |
2019-11-06 17:08:40 |
| 91.134.173.103 | attack | Nov 5 19:57:25 srv3 sshd\[7137\]: Invalid user temp from 91.134.173.103 Nov 5 19:57:25 srv3 sshd\[7137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.173.103 Nov 5 19:57:27 srv3 sshd\[7137\]: Failed password for invalid user temp from 91.134.173.103 port 38407 ssh2 Nov 5 23:12:07 srv3 sshd\[11091\]: Invalid user git from 91.134.173.103 Nov 5 23:12:07 srv3 sshd\[11091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.173.103 Nov 5 23:12:09 srv3 sshd\[11091\]: Failed password for invalid user git from 91.134.173.103 port 40680 ssh2 ... |
2019-11-06 16:56:29 |