城市(city): unknown
省份(region): unknown
国家(country): Japan
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 125.3.239.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14174
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;125.3.239.112. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012100 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 21 16:10:15 CST 2025
;; MSG SIZE rcvd: 106112.239.3.125.in-addr.arpa domain name pointer ntfkui036112.fkui.nt.ngn.ppp.infoweb.ne.jp.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
112.239.3.125.in-addr.arpa name = ntfkui036112.fkui.nt.ngn.ppp.infoweb.ne.jp.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 43.240.8.87 | attack | Honeypot attack, port: 23, PTR: dns13.parkpage.foundationapi.com. |
2019-12-07 06:37:27 |
| 201.7.210.50 | attackspam | WordPress wp-login brute force :: 201.7.210.50 0.164 - [06/Dec/2019:16:35:12 0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 1805 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1" |
2019-12-07 06:35:10 |
| 78.90.100.55 | attack | WordPress XMLRPC scan :: 78.90.100.55 0.132 BYPASS [06/Dec/2019:14:44:24 0000] www.[censored_4] "GET /xmlrpc.php HTTP/1.1" 405 53 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" |
2019-12-07 06:46:33 |
| 88.99.148.36 | attack | '' |
2019-12-07 06:57:56 |
| 80.211.179.154 | attackbotsspam | 2019-12-06 20:35:50,861 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 80.211.179.154 2019-12-06 21:10:56,072 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 80.211.179.154 2019-12-06 21:51:21,902 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 80.211.179.154 2019-12-06 22:25:56,998 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 80.211.179.154 2019-12-06 23:00:39,054 fail2ban.actions \[14488\]: NOTICE \[sshd\] Ban 80.211.179.154 ... |
2019-12-07 06:42:06 |
| 79.73.63.65 | attackbotsspam | Dec 6 15:22:57 saengerschafter sshd[11132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79-73-63-65.dynamic.dsl.as9105.com user=r.r Dec 6 15:23:00 saengerschafter sshd[11132]: Failed password for r.r from 79.73.63.65 port 34411 ssh2 Dec 6 15:23:04 saengerschafter sshd[11132]: message repeated 2 serveres: [ Failed password for r.r from 79.73.63.65 port 34411 ssh2] Dec 6 15:23:05 saengerschafter sshd[11132]: Failed password for r.r from 79.73.63.65 port 34411 ssh2 Dec 6 15:23:09 saengerschafter sshd[11132]: message repeated 2 serveres: [ Failed password for r.r from 79.73.63.65 port 34411 ssh2] Dec 6 15:23:09 saengerschafter sshd[11132]: error: maximum authentication attempts exceeded for r.r from 79.73.63.65 port 34411 ssh2 [preauth] Dec 6 15:23:09 saengerschafter sshd[11132]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=79-73-63-65.dynamic.dsl.as9105.com user=r.r Dec 6 15:23:11 saeng........ ------------------------------- |
2019-12-07 06:52:14 |
| 189.59.125.42 | attack | Lines containing failures of 189.59.125.42 Dec 6 14:32:08 dns01 sshd[1187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.59.125.42 user=uucp Dec 6 14:32:10 dns01 sshd[1187]: Failed password for uucp from 189.59.125.42 port 53236 ssh2 Dec 6 14:32:10 dns01 sshd[1187]: Received disconnect from 189.59.125.42 port 53236:11: Bye Bye [preauth] Dec 6 14:32:10 dns01 sshd[1187]: Disconnected from authenticating user uucp 189.59.125.42 port 53236 [preauth] Dec 6 14:42:36 dns01 sshd[3510]: Invalid user www from 189.59.125.42 port 58796 Dec 6 14:42:36 dns01 sshd[3510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.59.125.42 Dec 6 14:42:38 dns01 sshd[3510]: Failed password for invalid user www from 189.59.125.42 port 58796 ssh2 Dec 6 14:42:38 dns01 sshd[3510]: Received disconnect from 189.59.125.42 port 58796:11: Bye Bye [preauth] Dec 6 14:42:38 dns01 sshd[3510]: Disconnected from in........ ------------------------------ |
2019-12-07 06:40:49 |
| 187.75.158.1 | attack | Dec 6 16:02:52 mail sshd[13664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.75.158.1 Dec 6 16:02:54 mail sshd[13664]: Failed password for invalid user kan from 187.75.158.1 port 57478 ssh2 Dec 6 16:12:36 mail sshd[18424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.75.158.1 |
2019-12-07 06:21:37 |
| 27.128.234.170 | attackbotsspam | Dec 6 18:32:48 meumeu sshd[1799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.128.234.170 Dec 6 18:32:50 meumeu sshd[1799]: Failed password for invalid user student from 27.128.234.170 port 45027 ssh2 Dec 6 18:38:43 meumeu sshd[2838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.128.234.170 ... |
2019-12-07 06:36:35 |
| 45.131.186.142 | attackbotsspam | Dec 6 17:29:58 mail sshd[8630]: Invalid user hf from 45.131.186.142 Dec 6 17:29:58 mail sshd[8630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.131.186.142 Dec 6 17:30:00 mail sshd[8630]: Failed password for invalid user hf from 45.131.186.142 port 40084 ssh2 Dec 6 17:41:46 mail sshd[8891]: Invalid user kashuba from 45.131.186.142 Dec 6 17:41:46 mail sshd[8891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.131.186.142 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.131.186.142 |
2019-12-07 06:40:31 |
| 167.114.47.68 | attack | 2019-12-06T21:21:38.113622hub.schaetter.us sshd\[10920\]: Invalid user tokuoka from 167.114.47.68 port 57982 2019-12-06T21:21:38.121872hub.schaetter.us sshd\[10920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns68.cloudnuvem.com.br 2019-12-06T21:21:40.624239hub.schaetter.us sshd\[10920\]: Failed password for invalid user tokuoka from 167.114.47.68 port 57982 ssh2 2019-12-06T21:27:32.631632hub.schaetter.us sshd\[11043\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns68.cloudnuvem.com.br user=root 2019-12-06T21:27:34.752658hub.schaetter.us sshd\[11043\]: Failed password for root from 167.114.47.68 port 34704 ssh2 ... |
2019-12-07 06:41:43 |
| 5.227.39.107 | attackbotsspam | Unauthorised access (Dec 6) SRC=5.227.39.107 LEN=52 TTL=110 ID=31942 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Dec 6) SRC=5.227.39.107 LEN=52 TTL=110 ID=18230 DF TCP DPT=445 WINDOW=8192 SYN |
2019-12-07 06:32:21 |
| 217.23.79.102 | attackbots | Unauthorised access (Dec 6) SRC=217.23.79.102 LEN=52 TTL=119 ID=11642 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Dec 5) SRC=217.23.79.102 LEN=52 TTL=119 ID=30814 DF TCP DPT=445 WINDOW=8192 SYN |
2019-12-07 06:38:22 |
| 31.211.211.76 | attackbots | 3389BruteforceFW21 |
2019-12-07 06:45:06 |
| 168.194.208.128 | attack | port 23 |
2019-12-07 06:50:06 |