城市(city): Yuseong-gu
省份(region): Daejeon Metropolitan City
国家(country): South Korea
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.138.95.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13659
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;125.138.95.42. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021202 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 09:34:01 CST 2025
;; MSG SIZE rcvd: 106Host 42.95.138.125.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 42.95.138.125.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 159.65.218.75 | attackbotsspam | 10/26/2019-23:49:13.032557 159.65.218.75 Protocol: 17 ET SCAN Sipvicious Scan |
2019-10-27 17:25:49 |
| 114.102.13.238 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/114.102.13.238/ CN - 1H : (293) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4134 IP : 114.102.13.238 CIDR : 114.96.0.0/13 PREFIX COUNT : 5430 UNIQUE IP COUNT : 106919680 ATTACKS DETECTED ASN4134 : 1H - 45 3H - 90 6H - 90 12H - 93 24H - 93 DateTime : 2019-10-27 04:49:00 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery |
2019-10-27 17:32:28 |
| 166.62.103.159 | attackspam | (imapd) Failed IMAP login from 166.62.103.159 (US/United States/ip-166-62-103-159.ip.secureserver.net): 1 in the last 3600 secs |
2019-10-27 17:40:32 |
| 186.178.59.92 | attackbotsspam | Oct 27 04:42:42 xb0 sshd[4436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.178.59.92 user=r.r Oct 27 04:42:44 xb0 sshd[4436]: Failed password for r.r from 186.178.59.92 port 36444 ssh2 Oct 27 04:42:46 xb0 sshd[4436]: Failed password for r.r from 186.178.59.92 port 36444 ssh2 Oct 27 04:42:48 xb0 sshd[4436]: Failed password for r.r from 186.178.59.92 port 36444 ssh2 Oct 27 04:42:48 xb0 sshd[4436]: Disconnecting: Too many authentication failures for r.r from 186.178.59.92 port 36444 ssh2 [preauth] Oct 27 04:42:48 xb0 sshd[4436]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.178.59.92 user=r.r Oct 27 04:42:57 xb0 sshd[4750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.178.59.92 user=r.r Oct 27 04:42:59 xb0 sshd[4750]: Failed password for r.r from 186.178.59.92 port 36452 ssh2 Oct 27 04:43:02 xb0 sshd[4750]: Failed password for r.r from 186........ ------------------------------- |
2019-10-27 17:40:03 |
| 87.138.232.52 | attackbotsspam | leo_www |
2019-10-27 17:04:00 |
| 203.212.25.245 | attackbotsspam | Fail2Ban Ban Triggered |
2019-10-27 17:25:05 |
| 134.175.152.157 | attackbotsspam | Oct 26 19:51:05 hanapaa sshd\[20674\]: Invalid user kcs from 134.175.152.157 Oct 26 19:51:05 hanapaa sshd\[20674\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.152.157 Oct 26 19:51:07 hanapaa sshd\[20674\]: Failed password for invalid user kcs from 134.175.152.157 port 60644 ssh2 Oct 26 19:57:11 hanapaa sshd\[21172\]: Invalid user npmaseko from 134.175.152.157 Oct 26 19:57:11 hanapaa sshd\[21172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.152.157 |
2019-10-27 17:23:27 |
| 14.63.167.192 | attack | $f2bV_matches |
2019-10-27 17:42:10 |
| 139.59.108.237 | attack | <6 unauthorized SSH connections |
2019-10-27 17:35:21 |
| 91.121.102.44 | attack | SSH Bruteforce |
2019-10-27 17:31:39 |
| 200.207.220.128 | attackspam | Oct 27 05:18:14 *** sshd[3816]: User root from 200.207.220.128 not allowed because not listed in AllowUsers |
2019-10-27 17:18:52 |
| 94.42.178.137 | attackbotsspam | Oct 27 04:49:28 ns41 sshd[27018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.42.178.137 Oct 27 04:49:28 ns41 sshd[27018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.42.178.137 |
2019-10-27 17:17:40 |
| 138.197.213.233 | attack | Oct 27 09:57:28 dedicated sshd[9055]: Invalid user testing from 138.197.213.233 port 47676 |
2019-10-27 17:07:49 |
| 60.249.21.131 | attackbotsspam | Oct 26 17:40:45 hanapaa sshd\[9007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.shinymark.com user=root Oct 26 17:40:47 hanapaa sshd\[9007\]: Failed password for root from 60.249.21.131 port 57108 ssh2 Oct 26 17:45:11 hanapaa sshd\[9365\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.shinymark.com user=root Oct 26 17:45:13 hanapaa sshd\[9365\]: Failed password for root from 60.249.21.131 port 38902 ssh2 Oct 26 17:49:39 hanapaa sshd\[9739\]: Invalid user rpc from 60.249.21.131 |
2019-10-27 17:10:06 |
| 49.88.112.71 | attackbotsspam | 2019-10-27T04:21:01.181859abusebot-6.cloudsearch.cf sshd\[19181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.71 user=root |
2019-10-27 17:27:52 |