城市(city): Gangseo-gu
省份(region): Seoul Special City
国家(country): South Korea
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.171.104.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39672
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;121.171.104.138. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021902 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 09:57:56 CST 2025
;; MSG SIZE rcvd: 108Host 138.104.171.121.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 138.104.171.121.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 165.22.44.217 | attack | 2019-07-03T07:36:45.048275stt-1.[munged] kernel: [6185428.413867] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=165.22.44.217 DST=[mungedIP1] LEN=40 TOS=0x00 PREC=0x00 TTL=59 ID=56234 PROTO=TCP SPT=20680 DPT=23 WINDOW=29928 RES=0x00 SYN URGP=0 2019-07-03T08:16:40.977930stt-1.[munged] kernel: [6187824.335605] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=165.22.44.217 DST=[mungedIP1] LEN=40 TOS=0x00 PREC=0x00 TTL=59 ID=56234 PROTO=TCP SPT=20680 DPT=23 WINDOW=29928 RES=0x00 SYN URGP=0 2019-07-03T09:15:11.501037stt-1.[munged] kernel: [6191334.847832] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:97:36:58:84:78:ac:57:aa:c1:08:00 SRC=165.22.44.217 DST=[mungedIP1] LEN=40 TOS=0x00 PREC=0x00 TTL=59 ID=56234 PROTO=TCP SPT=20680 DPT=23 WINDOW=29928 RES=0x00 SYN URGP=0 |
2019-07-04 04:20:11 |
| 152.32.70.67 | attackspambots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 12:36:46,294 INFO [amun_request_handler] PortScan Detected on Port: 445 (152.32.70.67) |
2019-07-04 04:28:09 |
| 142.93.18.15 | attack | Jul 3 06:14:32 cac1d2 sshd\[3209\]: Invalid user presta from 142.93.18.15 port 49582 Jul 3 06:14:32 cac1d2 sshd\[3209\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.18.15 Jul 3 06:14:34 cac1d2 sshd\[3209\]: Failed password for invalid user presta from 142.93.18.15 port 49582 ssh2 ... |
2019-07-04 04:38:58 |
| 83.249.214.251 | attackspambots | 5555/tcp 23/tcp... [2019-06-21/07-03]5pkt,2pt.(tcp) |
2019-07-04 04:40:09 |
| 199.249.230.84 | attackbotsspam | 2019-07-03T09:15:25.702120WS-Zach sshd[11475]: User root from 199.249.230.84 not allowed because none of user's groups are listed in AllowGroups 2019-07-03T09:15:25.714039WS-Zach sshd[11475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.249.230.84 user=root 2019-07-03T09:15:25.702120WS-Zach sshd[11475]: User root from 199.249.230.84 not allowed because none of user's groups are listed in AllowGroups 2019-07-03T09:15:27.670832WS-Zach sshd[11475]: Failed password for invalid user root from 199.249.230.84 port 48978 ssh2 2019-07-03T09:15:25.714039WS-Zach sshd[11475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.249.230.84 user=root 2019-07-03T09:15:25.702120WS-Zach sshd[11475]: User root from 199.249.230.84 not allowed because none of user's groups are listed in AllowGroups 2019-07-03T09:15:27.670832WS-Zach sshd[11475]: Failed password for invalid user root from 199.249.230.84 port 48978 ssh2 2019-07-03T09:15:31.46107 |
2019-07-04 04:06:15 |
| 178.46.209.244 | attackbotsspam | Brute force SMTP login attempts. |
2019-07-04 04:34:38 |
| 213.32.83.233 | attack | LGS,DEF GET /wp-login.php |
2019-07-04 04:40:29 |
| 58.56.187.52 | attackbots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 12:36:47,225 INFO [amun_request_handler] PortScan Detected on Port: 445 (58.56.187.52) |
2019-07-04 04:27:04 |
| 213.150.200.149 | attackbotsspam | Unauthorised access (Jul 3) SRC=213.150.200.149 LEN=44 TTL=44 ID=4001 TCP DPT=8080 WINDOW=42015 SYN |
2019-07-04 04:20:40 |
| 78.220.13.56 | attack | 23/tcp 60001/tcp [2019-06-28/07-03]2pkt |
2019-07-04 04:45:10 |
| 82.207.72.94 | attackbots | 445/tcp 445/tcp 445/tcp... [2019-05-14/07-03]6pkt,1pt.(tcp) |
2019-07-04 04:03:49 |
| 176.175.111.67 | attackspam | Jul 3 20:32:22 Ubuntu-1404-trusty-64-minimal sshd\[32622\]: Invalid user starbound from 176.175.111.67 Jul 3 20:32:22 Ubuntu-1404-trusty-64-minimal sshd\[32622\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.175.111.67 Jul 3 20:32:23 Ubuntu-1404-trusty-64-minimal sshd\[32622\]: Failed password for invalid user starbound from 176.175.111.67 port 49432 ssh2 Jul 3 21:03:27 Ubuntu-1404-trusty-64-minimal sshd\[23872\]: Invalid user fuser from 176.175.111.67 Jul 3 21:03:27 Ubuntu-1404-trusty-64-minimal sshd\[23872\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.175.111.67 |
2019-07-04 04:17:20 |
| 153.141.134.15 | attack | 9527/tcp 5555/tcp 5555/tcp [2019-06-29/07-03]3pkt |
2019-07-04 04:35:12 |
| 61.1.35.204 | attackspambots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 12:36:34,230 INFO [amun_request_handler] PortScan Detected on Port: 445 (61.1.35.204) |
2019-07-04 04:33:28 |
| 193.56.29.96 | attackbots | Unauthorised access (Jul 3) SRC=193.56.29.96 LEN=40 TTL=245 ID=57780 TCP DPT=445 WINDOW=1024 SYN |
2019-07-04 04:46:01 |