城市(city): unknown
省份(region): unknown
国家(country): Korea (the Republic of)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.137.189.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40730
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;121.137.189.140. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025011301 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 14 13:22:37 CST 2025
;; MSG SIZE rcvd: 108Host 140.189.137.121.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 140.189.137.121.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 125.227.0.210 | attack | SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: 125-227-0-210.HINET-IP.hinet.net. |
2020-10-04 14:39:22 |
| 144.91.123.140 | attackbots | 1433/tcp 445/tcp... [2020-08-08/10-03]5pkt,2pt.(tcp) |
2020-10-04 14:40:53 |
| 109.123.117.241 | attack | 3000/tcp 3128/tcp 4567/tcp... [2020-08-09/10-03]6pkt,5pt.(tcp),1pt.(udp) |
2020-10-04 15:09:13 |
| 45.153.203.104 | attackbotsspam | Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-10-04T05:11:33Z and 2020-10-04T05:22:29Z |
2020-10-04 15:02:07 |
| 71.6.233.130 | attack | 9060/tcp 465/tcp 4001/tcp [2020-08-22/10-03]3pkt |
2020-10-04 14:48:48 |
| 110.78.152.2 | attackbotsspam | 23/tcp 8080/tcp [2020-10-01/02]2pkt |
2020-10-04 15:04:31 |
| 41.242.138.30 | attackspambots | (sshd) Failed SSH login from 41.242.138.30 (GH/Ghana/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 3 16:39:44 server sshd[5790]: Did not receive identification string from 41.242.138.30 port 56756 Oct 3 16:39:44 server sshd[5789]: Did not receive identification string from 41.242.138.30 port 56748 Oct 3 16:39:44 server sshd[5791]: Did not receive identification string from 41.242.138.30 port 56717 Oct 3 16:39:44 server sshd[5792]: Did not receive identification string from 41.242.138.30 port 56736 Oct 3 16:39:44 server sshd[5793]: Did not receive identification string from 41.242.138.30 port 56830 |
2020-10-04 14:56:59 |
| 45.55.59.197 | attack | 2020-10-03T22:44:27+0000 Failed SSH Authentication/Brute Force Attack. (Server 6) |
2020-10-04 14:50:38 |
| 36.81.81.40 | attackbotsspam | 139/tcp 445/tcp [2020-10-01]2pkt |
2020-10-04 15:08:08 |
| 139.162.170.48 | attackspambots | 11211/tcp 3388/tcp 631/tcp... [2020-08-08/10-03]9pkt,9pt.(tcp) |
2020-10-04 14:53:28 |
| 218.92.0.176 | attack | Failed password for root from 218.92.0.176 port 36420 ssh2 Failed password for root from 218.92.0.176 port 36420 ssh2 Failed password for root from 218.92.0.176 port 36420 ssh2 Failed password for root from 218.92.0.176 port 36420 ssh2 |
2020-10-04 14:37:12 |
| 175.196.61.1 | attackbots | fail2ban/Oct 4 08:26:12 h1962932 sshd[27736]: Invalid user pi from 175.196.61.1 port 37638 Oct 4 08:26:12 h1962932 sshd[27738]: Invalid user pi from 175.196.61.1 port 37644 Oct 4 08:26:12 h1962932 sshd[27736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.196.61.1 Oct 4 08:26:12 h1962932 sshd[27736]: Invalid user pi from 175.196.61.1 port 37638 Oct 4 08:26:14 h1962932 sshd[27736]: Failed password for invalid user pi from 175.196.61.1 port 37638 ssh2 |
2020-10-04 14:36:04 |
| 190.111.151.198 | attackbots | pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.111.151.198 Failed password for invalid user arif from 190.111.151.198 port 38383 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.111.151.198 |
2020-10-04 15:13:30 |
| 147.0.22.179 | attackbotsspam | " " |
2020-10-04 14:45:36 |
| 139.99.8.3 | attackbotsspam | 139.99.8.3 - - [04/Oct/2020:08:06:51 +0100] "POST /wp-login.php HTTP/1.1" 200 2478 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.99.8.3 - - [04/Oct/2020:08:06:53 +0100] "POST /wp-login.php HTTP/1.1" 200 2455 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.99.8.3 - - [04/Oct/2020:08:06:54 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-10-04 15:16:52 |