城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 129.204.160.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61295
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;129.204.160.54. IN A
;; AUTHORITY SECTION:
. 305 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030802 1800 900 604800 86400
;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 04:45:07 CST 2022
;; MSG SIZE rcvd: 107Host 54.160.204.129.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 54.160.204.129.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 85.208.253.40 | attack | Unauthorized connection attempt from IP address 85.208.253.40 on Port 445(SMB) |
2019-11-26 23:46:33 |
| 120.132.114.103 | attack | Nov 25 12:46:46 indra sshd[253936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.132.114.103 user=mysql Nov 25 12:46:48 indra sshd[253936]: Failed password for mysql from 120.132.114.103 port 53716 ssh2 Nov 25 12:46:49 indra sshd[253936]: Received disconnect from 120.132.114.103: 11: Bye Bye [preauth] Nov 25 12:52:04 indra sshd[255166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.132.114.103 user=r.r Nov 25 12:52:06 indra sshd[255166]: Failed password for r.r from 120.132.114.103 port 33534 ssh2 Nov 25 12:52:06 indra sshd[255166]: Received disconnect from 120.132.114.103: 11: Bye Bye [preauth] Nov 25 12:56:56 indra sshd[256105]: Invalid user roark from 120.132.114.103 Nov 25 12:56:56 indra sshd[256105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.132.114.103 Nov 25 12:56:59 indra sshd[256105]: Failed password for invalid user ........ ------------------------------- |
2019-11-26 23:27:50 |
| 185.209.0.32 | attack | 11/26/2019-16:02:22.597619 185.209.0.32 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-11-26 23:22:35 |
| 219.142.140.2 | attackspambots | Nov 26 20:29:59 vibhu-HP-Z238-Microtower-Workstation sshd\[4485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.142.140.2 user=root Nov 26 20:30:01 vibhu-HP-Z238-Microtower-Workstation sshd\[4485\]: Failed password for root from 219.142.140.2 port 35843 ssh2 Nov 26 20:34:36 vibhu-HP-Z238-Microtower-Workstation sshd\[4664\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.142.140.2 user=root Nov 26 20:34:39 vibhu-HP-Z238-Microtower-Workstation sshd\[4664\]: Failed password for root from 219.142.140.2 port 62157 ssh2 Nov 26 20:39:10 vibhu-HP-Z238-Microtower-Workstation sshd\[5014\]: Invalid user server from 219.142.140.2 Nov 26 20:39:10 vibhu-HP-Z238-Microtower-Workstation sshd\[5014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.142.140.2 ... |
2019-11-26 23:19:08 |
| 203.112.130.102 | attackspambots | Unauthorized connection attempt from IP address 203.112.130.102 on Port 445(SMB) |
2019-11-26 23:16:07 |
| 138.219.192.98 | attackbotsspam | Nov 26 17:01:15 server sshd\[6595\]: Invalid user winegar from 138.219.192.98 Nov 26 17:01:15 server sshd\[6595\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.219.192.98 Nov 26 17:01:16 server sshd\[6595\]: Failed password for invalid user winegar from 138.219.192.98 port 44073 ssh2 Nov 26 17:46:49 server sshd\[17737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.219.192.98 user=dbus Nov 26 17:46:51 server sshd\[17737\]: Failed password for dbus from 138.219.192.98 port 50464 ssh2 ... |
2019-11-26 23:18:28 |
| 187.189.109.138 | attack | Nov 26 05:39:20 hanapaa sshd\[21920\]: Invalid user exim from 187.189.109.138 Nov 26 05:39:20 hanapaa sshd\[21920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=fixed-187-189-109-138.totalplay.net Nov 26 05:39:21 hanapaa sshd\[21920\]: Failed password for invalid user exim from 187.189.109.138 port 48686 ssh2 Nov 26 05:46:01 hanapaa sshd\[22466\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=fixed-187-189-109-138.totalplay.net user=root Nov 26 05:46:04 hanapaa sshd\[22466\]: Failed password for root from 187.189.109.138 port 55992 ssh2 |
2019-11-26 23:50:12 |
| 185.10.60.68 | attackbots | Unauthorized connection attempt from IP address 185.10.60.68 on Port 445(SMB) |
2019-11-26 23:28:56 |
| 109.75.36.60 | attackbotsspam | Unauthorized connection attempt from IP address 109.75.36.60 on Port 445(SMB) |
2019-11-26 23:09:01 |
| 83.245.226.226 | attack | TCP Port Scanning |
2019-11-26 23:10:28 |
| 117.205.7.202 | attackspam | Unauthorized connection attempt from IP address 117.205.7.202 on Port 445(SMB) |
2019-11-26 23:49:53 |
| 111.75.178.96 | attackspam | Nov 26 20:29:30 vibhu-HP-Z238-Microtower-Workstation sshd\[4462\]: Invalid user Cougar from 111.75.178.96 Nov 26 20:29:30 vibhu-HP-Z238-Microtower-Workstation sshd\[4462\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.75.178.96 Nov 26 20:29:32 vibhu-HP-Z238-Microtower-Workstation sshd\[4462\]: Failed password for invalid user Cougar from 111.75.178.96 port 35132 ssh2 Nov 26 20:35:52 vibhu-HP-Z238-Microtower-Workstation sshd\[4722\]: Invalid user patrizia from 111.75.178.96 Nov 26 20:35:52 vibhu-HP-Z238-Microtower-Workstation sshd\[4722\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.75.178.96 ... |
2019-11-26 23:08:35 |
| 60.190.248.12 | attackbotsspam | TCP Port Scanning |
2019-11-26 23:24:35 |
| 39.107.94.113 | attackbots | scan z |
2019-11-26 23:33:22 |
| 94.176.152.204 | attackbotsspam | (Nov 26) LEN=40 TTL=241 ID=26935 DF TCP DPT=23 WINDOW=14600 SYN (Nov 26) LEN=40 TTL=241 ID=47774 DF TCP DPT=23 WINDOW=14600 SYN (Nov 26) LEN=40 TTL=241 ID=31998 DF TCP DPT=23 WINDOW=14600 SYN (Nov 26) LEN=40 TTL=241 ID=50133 DF TCP DPT=23 WINDOW=14600 SYN (Nov 26) LEN=40 TTL=241 ID=18405 DF TCP DPT=23 WINDOW=14600 SYN (Nov 26) LEN=40 TTL=241 ID=21155 DF TCP DPT=23 WINDOW=14600 SYN (Nov 26) LEN=40 TTL=241 ID=46233 DF TCP DPT=23 WINDOW=14600 SYN (Nov 26) LEN=40 TTL=241 ID=6843 DF TCP DPT=23 WINDOW=14600 SYN (Nov 26) LEN=40 TTL=241 ID=43227 DF TCP DPT=23 WINDOW=14600 SYN (Nov 26) LEN=40 TTL=241 ID=31828 DF TCP DPT=23 WINDOW=14600 SYN (Nov 26) LEN=40 TTL=241 ID=54644 DF TCP DPT=23 WINDOW=14600 SYN (Nov 25) LEN=40 TTL=241 ID=32966 DF TCP DPT=23 WINDOW=14600 SYN (Nov 25) LEN=40 TTL=241 ID=34787 DF TCP DPT=23 WINDOW=14600 SYN (Nov 25) LEN=40 TTL=241 ID=26428 DF TCP DPT=23 WINDOW=14600 SYN (Nov 25) LEN=40 TTL=241 ID=35593 DF TCP DPT=23 WINDOW=14600 S... |
2019-11-26 23:40:25 |