城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 12.12.63.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52440
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;12.12.63.140. IN A
;; AUTHORITY SECTION:
. 316 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011001 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 11 04:29:09 CST 2022
;; MSG SIZE rcvd: 105b'Host 140.63.12.12.in-addr.arpa not found: 2(SERVFAIL)
';; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 140.63.12.12.in-addr.arpa: SERVFAIL
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 190.64.68.179 | attackspam | Apr 13 19:02:23 vserver sshd\[24893\]: Failed password for root from 190.64.68.179 port 61890 ssh2Apr 13 19:07:05 vserver sshd\[24932\]: Invalid user lowry from 190.64.68.179Apr 13 19:07:08 vserver sshd\[24932\]: Failed password for invalid user lowry from 190.64.68.179 port 32225 ssh2Apr 13 19:11:52 vserver sshd\[25018\]: Invalid user shade from 190.64.68.179 ... |
2020-04-14 08:18:00 |
| 150.109.104.117 | attackspambots | Apr 14 00:40:22 h2646465 sshd[28381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.104.117 user=root Apr 14 00:40:24 h2646465 sshd[28381]: Failed password for root from 150.109.104.117 port 50564 ssh2 Apr 14 00:47:57 h2646465 sshd[29106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.104.117 user=root Apr 14 00:47:58 h2646465 sshd[29106]: Failed password for root from 150.109.104.117 port 35938 ssh2 Apr 14 00:50:40 h2646465 sshd[29647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.104.117 user=root Apr 14 00:50:42 h2646465 sshd[29647]: Failed password for root from 150.109.104.117 port 51722 ssh2 Apr 14 00:53:25 h2646465 sshd[29740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.104.117 user=root Apr 14 00:53:27 h2646465 sshd[29740]: Failed password for root from 150.109.104.117 port 39258 ssh2 Apr 14 00:56 |
2020-04-14 08:44:22 |
| 45.40.194.210 | attackbotsspam | TCP scanned port list, 6379, 7001, 7002, 8088, 9200 |
2020-04-14 08:22:08 |
| 106.13.52.209 | attack | Lines containing failures of 106.13.52.209 Apr 13 00:38:36 kmh-vmh-003-fsn07 sshd[17788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.52.209 user=r.r Apr 13 00:38:38 kmh-vmh-003-fsn07 sshd[17788]: Failed password for r.r from 106.13.52.209 port 54306 ssh2 Apr 13 00:38:39 kmh-vmh-003-fsn07 sshd[17788]: Received disconnect from 106.13.52.209 port 54306:11: Bye Bye [preauth] Apr 13 00:38:39 kmh-vmh-003-fsn07 sshd[17788]: Disconnected from authenticating user r.r 106.13.52.209 port 54306 [preauth] Apr 13 00:47:00 kmh-vmh-003-fsn07 sshd[19250]: Invalid user annie from 106.13.52.209 port 33526 Apr 13 00:47:00 kmh-vmh-003-fsn07 sshd[19250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.52.209 Apr 13 00:47:02 kmh-vmh-003-fsn07 sshd[19250]: Failed password for invalid user annie from 106.13.52.209 port 33526 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=106.13 |
2020-04-14 08:11:00 |
| 122.160.76.68 | attack | Repeated brute force against a port |
2020-04-14 08:21:44 |
| 178.172.235.81 | attackspam | Apr 14 06:48:07 hosting sshd[21180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.172.235.81 user=root Apr 14 06:48:09 hosting sshd[21180]: Failed password for root from 178.172.235.81 port 58902 ssh2 Apr 14 06:53:29 hosting sshd[21918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.172.235.81 user=root Apr 14 06:53:31 hosting sshd[21918]: Failed password for root from 178.172.235.81 port 42558 ssh2 Apr 14 06:55:41 hosting sshd[22204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.172.235.81 user=root Apr 14 06:55:44 hosting sshd[22204]: Failed password for root from 178.172.235.81 port 44146 ssh2 ... |
2020-04-14 12:01:09 |
| 81.133.142.45 | attackspambots | SSH brute force |
2020-04-14 08:26:36 |
| 200.133.39.71 | attackbots | (sshd) Failed SSH login from 200.133.39.71 (BR/Brazil/200-133-39-71.compute.rnp.br): 5 in the last 3600 secs |
2020-04-14 08:19:03 |
| 178.32.79.55 | attackbots | SSH Brute-Force reported by Fail2Ban |
2020-04-14 08:19:57 |
| 49.233.198.237 | attackspambots | Port scan detected on ports: 65529[TCP], 65529[TCP], 65529[TCP] |
2020-04-14 08:38:24 |
| 14.29.163.35 | attack | Apr 13 17:10:45 v2hgb sshd[25087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.163.35 user=r.r Apr 13 17:10:47 v2hgb sshd[25087]: Failed password for r.r from 14.29.163.35 port 52023 ssh2 Apr 13 17:10:48 v2hgb sshd[25087]: Received disconnect from 14.29.163.35 port 52023:11: Bye Bye [preauth] Apr 13 17:10:48 v2hgb sshd[25087]: Disconnected from authenticating user r.r 14.29.163.35 port 52023 [preauth] Apr 13 17:19:36 v2hgb sshd[26110]: Invalid user operator from 14.29.163.35 port 53131 Apr 13 17:19:36 v2hgb sshd[26110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.163.35 Apr 13 17:19:38 v2hgb sshd[26110]: Failed password for invalid user operator from 14.29.163.35 port 53131 ssh2 Apr 13 17:19:38 v2hgb sshd[26110]: Received disconnect from 14.29.163.35 port 53131:11: Bye Bye [preauth] Apr 13 17:19:38 v2hgb sshd[26110]: Disconnected from invalid user operator 14.29.163.35 ........ ------------------------------- |
2020-04-14 08:08:09 |
| 106.13.34.173 | attack | Automatic report BANNED IP |
2020-04-14 08:16:18 |
| 164.132.225.229 | attackbots | Apr 14 06:48:30 ift sshd\[9682\]: Failed password for root from 164.132.225.229 port 60358 ssh2Apr 14 06:52:04 ift sshd\[10190\]: Invalid user lmondon from 164.132.225.229Apr 14 06:52:07 ift sshd\[10190\]: Failed password for invalid user lmondon from 164.132.225.229 port 40766 ssh2Apr 14 06:55:43 ift sshd\[11154\]: Invalid user hung from 164.132.225.229Apr 14 06:55:44 ift sshd\[11154\]: Failed password for invalid user hung from 164.132.225.229 port 49420 ssh2 ... |
2020-04-14 12:01:30 |
| 140.213.141.231 | attackspambots | DATE:2020-04-13 19:11:34, IP:140.213.141.231, PORT:1433 MSSQL brute force auth on honeypot server (epe-honey1-hq) |
2020-04-14 08:27:44 |
| 222.186.173.201 | attackbots | Apr 14 02:28:13 pve sshd[18878]: Failed password for root from 222.186.173.201 port 64098 ssh2 Apr 14 02:28:18 pve sshd[18878]: Failed password for root from 222.186.173.201 port 64098 ssh2 Apr 14 02:28:23 pve sshd[18878]: Failed password for root from 222.186.173.201 port 64098 ssh2 Apr 14 02:28:28 pve sshd[18878]: Failed password for root from 222.186.173.201 port 64098 ssh2 |
2020-04-14 08:45:37 |