城市(city): Umeå
省份(region): Västerbotten
国家(country): Sweden
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): Umea University
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 130.239.21.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3851
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;130.239.21.8. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019080300 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 04 01:10:14 CST 2019
;; MSG SIZE rcvd: 1168.21.239.130.in-addr.arpa domain name pointer cerum-srv3.ad.umu.se.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
8.21.239.130.in-addr.arpa name = cerum-srv3.ad.umu.se.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 89.144.12.17 | attackbotsspam | Illegal actions on webapp |
2020-04-29 22:09:53 |
| 167.71.209.43 | attackbots | Apr 29 14:32:26 markkoudstaal sshd[14383]: Failed password for root from 167.71.209.43 port 46462 ssh2 Apr 29 14:36:49 markkoudstaal sshd[15261]: Failed password for root from 167.71.209.43 port 48910 ssh2 |
2020-04-29 22:34:47 |
| 134.122.73.4 | attackspambots | Lines containing failures of 134.122.73.4 Apr 29 07:40:38 box sshd[12990]: Did not receive identification string from 134.122.73.4 port 44256 Apr 29 07:41:56 box sshd[12991]: Did not receive identification string from 134.122.73.4 port 46478 Apr 29 07:42:42 box sshd[12994]: Invalid user ftpuser from 134.122.73.4 port 33056 Apr 29 07:42:42 box sshd[12994]: Received disconnect from 134.122.73.4 port 33056:11: Normal Shutdown, Thank you for playing [preauth] Apr 29 07:42:42 box sshd[12994]: Disconnected from invalid user ftpuser 134.122.73.4 port 33056 [preauth] Apr 29 07:43:25 box sshd[13007]: Invalid user ghostname from 134.122.73.4 port 47626 Apr 29 07:43:25 box sshd[13007]: Received disconnect from 134.122.73.4 port 47626:11: Normal Shutdown, Thank you for playing [preauth] Apr 29 07:43:25 box sshd[13007]: Disconnected from invalid user ghostname 134.122.73.4 port 47626 [preauth] Apr 29 07:44:09 box sshd[13010]: Invalid user oracle from 134.122.73.4 port 33966 Apr 29 07........ ------------------------------ |
2020-04-29 22:00:38 |
| 101.78.149.142 | attackbotsspam | k+ssh-bruteforce |
2020-04-29 22:15:20 |
| 203.135.188.9 | attackbots | Unauthorized connection attempt from IP address 203.135.188.9 on Port 445(SMB) |
2020-04-29 22:03:19 |
| 186.119.116.226 | attack | $f2bV_matches |
2020-04-29 22:43:58 |
| 51.83.70.157 | attack | [Aegis] @ 2019-07-25 20:31:58 0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack |
2020-04-29 22:18:26 |
| 202.91.71.18 | attackbotsspam | Unauthorized connection attempt from IP address 202.91.71.18 on Port 445(SMB) |
2020-04-29 22:45:27 |
| 45.14.150.86 | attackbots | 5x Failed Password |
2020-04-29 22:33:53 |
| 200.108.247.110 | attackspambots | Port probing on unauthorized port 23 |
2020-04-29 22:34:13 |
| 14.175.15.6 | attack | Unauthorized connection attempt from IP address 14.175.15.6 on Port 445(SMB) |
2020-04-29 22:19:30 |
| 222.186.15.158 | attack | Apr 29 11:29:19 firewall sshd[17820]: Failed password for root from 222.186.15.158 port 64770 ssh2 Apr 29 11:29:22 firewall sshd[17820]: Failed password for root from 222.186.15.158 port 64770 ssh2 Apr 29 11:29:24 firewall sshd[17820]: Failed password for root from 222.186.15.158 port 64770 ssh2 ... |
2020-04-29 22:30:40 |
| 5.233.121.100 | attackbots | Lines containing failures of 5.233.121.100 Apr 29 13:58:12 shared11 sshd[30125]: Invalid user ubnt from 5.233.121.100 port 26481 Apr 29 13:58:13 shared11 sshd[30125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.233.121.100 Apr 29 13:58:14 shared11 sshd[30125]: Failed password for invalid user ubnt from 5.233.121.100 port 26481 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=5.233.121.100 |
2020-04-29 22:42:55 |
| 187.60.146.18 | attackspam | Unauthorized connection attempt from IP address 187.60.146.18 on Port 445(SMB) |
2020-04-29 22:43:25 |
| 47.97.96.252 | attack | Apr 29 13:18:37 www6-3 sshd[16106]: Invalid user md from 47.97.96.252 port 44488 Apr 29 13:18:37 www6-3 sshd[16106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.96.252 Apr 29 13:18:38 www6-3 sshd[16106]: Failed password for invalid user md from 47.97.96.252 port 44488 ssh2 Apr 29 13:18:38 www6-3 sshd[16106]: Received disconnect from 47.97.96.252 port 44488:11: Bye Bye [preauth] Apr 29 13:18:38 www6-3 sshd[16106]: Disconnected from 47.97.96.252 port 44488 [preauth] Apr 29 13:47:22 www6-3 sshd[18533]: Connection closed by 47.97.96.252 port 51898 [preauth] Apr 29 13:48:49 www6-3 sshd[18597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.97.96.252 user=r.r Apr 29 13:48:50 www6-3 sshd[18597]: Failed password for r.r from 47.97.96.252 port 38944 ssh2 Apr 29 13:48:51 www6-3 sshd[18597]: Received disconnect from 47.97.96.252 port 38944:11: Bye Bye [preauth] Apr 29 13:48:51 www6-3 ssh........ ------------------------------- |
2020-04-29 22:16:11 |