城市(city): Vanier
省份(region): Ontario
国家(country): Canada
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.139.234.228
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10961
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;131.139.234.228. IN A
;; AUTHORITY SECTION:
. 148 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020040100 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 02 01:19:24 CST 2020
;; MSG SIZE rcvd: 119Host 228.234.139.131.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 100.100.2.138, trying next server
;; Got SERVFAIL reply from 100.100.2.138, trying next server
Server: 100.100.2.136
Address: 100.100.2.136#53
** server can't find 228.234.139.131.in-addr.arpa: SERVFAIL
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 51.158.111.168 | attackbotsspam | Jun 14 11:06:36 *** sshd[32300]: User root from 51.158.111.168 not allowed because not listed in AllowUsers |
2020-06-14 19:25:27 |
| 45.232.73.83 | attack | (sshd) Failed SSH login from 45.232.73.83 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 14 13:32:37 s1 sshd[11155]: Invalid user uym from 45.232.73.83 port 51834 Jun 14 13:32:38 s1 sshd[11155]: Failed password for invalid user uym from 45.232.73.83 port 51834 ssh2 Jun 14 13:34:58 s1 sshd[11240]: Invalid user taz from 45.232.73.83 port 51322 Jun 14 13:35:01 s1 sshd[11240]: Failed password for invalid user taz from 45.232.73.83 port 51322 ssh2 Jun 14 13:36:14 s1 sshd[11286]: Invalid user samuel from 45.232.73.83 port 40130 |
2020-06-14 19:31:02 |
| 2.187.26.66 | attack | 1592106415 - 06/14/2020 05:46:55 Host: 2.187.26.66/2.187.26.66 Port: 445 TCP Blocked |
2020-06-14 18:58:30 |
| 106.13.48.122 | attackbots | Jun 14 13:16:34 debian-2gb-nbg1-2 kernel: \[14392106.448999\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=106.13.48.122 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=44233 PROTO=TCP SPT=59760 DPT=15235 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-14 19:24:13 |
| 203.176.69.116 | attackspam | 20/6/13@23:46:39: FAIL: Alarm-Network address from=203.176.69.116 ... |
2020-06-14 19:06:05 |
| 183.15.177.62 | attackspam | Jun 12 21:33:56 km20725 sshd[16018]: Invalid user daxia from 183.15.177.62 port 38774 Jun 12 21:33:56 km20725 sshd[16018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.15.177.62 Jun 12 21:33:58 km20725 sshd[16018]: Failed password for invalid user daxia from 183.15.177.62 port 38774 ssh2 Jun 12 21:33:59 km20725 sshd[16018]: Received disconnect from 183.15.177.62 port 38774:11: Bye Bye [preauth] Jun 12 21:33:59 km20725 sshd[16018]: Disconnected from invalid user daxia 183.15.177.62 port 38774 [preauth] Jun 12 21:43:49 km20725 sshd[16803]: Invalid user moa from 183.15.177.62 port 36913 Jun 12 21:43:49 km20725 sshd[16803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.15.177.62 Jun 12 21:43:51 km20725 sshd[16803]: Failed password for invalid user moa from 183.15.177.62 port 36913 ssh2 Jun 12 21:43:52 km20725 sshd[16803]: Received disconnect from 183.15.177.62 port 36913:11: Bye B........ ------------------------------- |
2020-06-14 19:34:04 |
| 123.19.198.234 | attackbots | 1592107010 - 06/14/2020 05:56:50 Host: 123.19.198.234/123.19.198.234 Port: 445 TCP Blocked |
2020-06-14 19:36:57 |
| 171.231.214.191 | attackbotsspam | Unauthorized connection attempt from IP address 171.231.214.191 on Port 445(SMB) |
2020-06-14 19:37:46 |
| 184.168.193.59 | attack | Trolling for resource vulnerabilities |
2020-06-14 19:02:42 |
| 106.12.123.239 | attackspam | Tried sshing with brute force. |
2020-06-14 18:56:09 |
| 116.12.52.141 | attack | Jun 14 04:44:47 onepixel sshd[903372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.12.52.141 user=root Jun 14 04:44:49 onepixel sshd[903372]: Failed password for root from 116.12.52.141 port 48645 ssh2 Jun 14 04:48:10 onepixel sshd[903827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.12.52.141 user=root Jun 14 04:48:12 onepixel sshd[903827]: Failed password for root from 116.12.52.141 port 45185 ssh2 Jun 14 04:51:31 onepixel sshd[904303]: Invalid user deploy from 116.12.52.141 port 41728 |
2020-06-14 19:09:25 |
| 123.195.99.9 | attackbotsspam | $f2bV_matches |
2020-06-14 19:21:42 |
| 89.187.177.131 | attackspam | (From jennifer.graff@gmail.com) Hi, “According to Gartner’s recent research, data decays on an average of 7 to 9% every month because of various reasons.” Do you have a large database of contacts/companies in-house? If yes, is it up-to-date? We can cleanse, validate and enrich your in-house database with relevant fields that can get you connected with the most premium target profiles of your choice. Please let me know of a convenient time for a quick call to discuss this further. Also, feel free to seek any specific clarifications or assistance that we can help you with. Thank you for your time, wishing you a great day ahead. Best Regards, Diana Baker Marketing Data Specialist Just Validate- https://bit.ly/www-justvalidate-com Email: diana.baker@justvalidate.com |
2020-06-14 19:16:24 |
| 93.61.134.60 | attack | Jun 13 19:53:03 kapalua sshd\[534\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93-61-134-60.ip146.fastwebnet.it user=root Jun 13 19:53:05 kapalua sshd\[534\]: Failed password for root from 93.61.134.60 port 60744 ssh2 Jun 13 19:55:22 kapalua sshd\[804\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93-61-134-60.ip146.fastwebnet.it user=root Jun 13 19:55:24 kapalua sshd\[804\]: Failed password for root from 93.61.134.60 port 36814 ssh2 Jun 13 19:57:53 kapalua sshd\[1071\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93-61-134-60.ip146.fastwebnet.it user=root |
2020-06-14 19:09:42 |
| 222.186.42.136 | attack | Jun 14 06:38:10 plusreed sshd[11970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.136 user=root Jun 14 06:38:12 plusreed sshd[11970]: Failed password for root from 222.186.42.136 port 36549 ssh2 ... |
2020-06-14 18:53:18 |