城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 131.62.105.193
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15290
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;131.62.105.193. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021800 1800 900 604800 86400
;; Query time: 41 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 18 15:29:33 CST 2025
;; MSG SIZE rcvd: 107b'Host 193.105.62.131.in-addr.arpa not found: 2(SERVFAIL)
'Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 193.105.62.131.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 92.118.37.74 | attack | Sep 4 07:39:35 h2177944 kernel: \[452202.482448\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=42401 PROTO=TCP SPT=46525 DPT=20764 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 4 07:41:31 h2177944 kernel: \[452317.976700\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=2374 PROTO=TCP SPT=46525 DPT=32996 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 4 07:41:47 h2177944 kernel: \[452333.745117\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=16994 PROTO=TCP SPT=46525 DPT=46001 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 4 07:42:04 h2177944 kernel: \[452350.651007\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=23104 PROTO=TCP SPT=46525 DPT=24307 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 4 07:42:42 h2177944 kernel: \[452388.679025\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 LEN=40 |
2019-09-04 13:46:26 |
| 138.68.106.62 | attackspam | [Aegis] @ 2019-09-04 05:49:33 0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack |
2019-09-04 14:01:29 |
| 198.14.228.4 | attack | Automatic report - Port Scan Attack |
2019-09-04 14:25:30 |
| 51.75.169.236 | attack | Sep 4 07:50:47 SilenceServices sshd[28919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.169.236 Sep 4 07:50:49 SilenceServices sshd[28919]: Failed password for invalid user minecraftserver from 51.75.169.236 port 44646 ssh2 Sep 4 07:55:07 SilenceServices sshd[30547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.169.236 |
2019-09-04 14:06:37 |
| 81.22.45.219 | attack | firewall-block, port(s): 5502/tcp, 9835/tcp |
2019-09-04 14:14:40 |
| 159.65.92.3 | attackbots | Sep 4 07:59:44 meumeu sshd[25234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.92.3 Sep 4 07:59:46 meumeu sshd[25234]: Failed password for invalid user dalia from 159.65.92.3 port 46754 ssh2 Sep 4 08:03:51 meumeu sshd[26121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.92.3 ... |
2019-09-04 14:16:37 |
| 116.228.53.173 | attackspambots | Sep 4 05:27:22 lnxded63 sshd[21796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.228.53.173 |
2019-09-04 14:15:49 |
| 218.98.40.142 | attack | Sep 4 08:29:40 tux-35-217 sshd\[19794\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.40.142 user=root Sep 4 08:29:42 tux-35-217 sshd\[19794\]: Failed password for root from 218.98.40.142 port 52433 ssh2 Sep 4 08:29:44 tux-35-217 sshd\[19794\]: Failed password for root from 218.98.40.142 port 52433 ssh2 Sep 4 08:29:47 tux-35-217 sshd\[19794\]: Failed password for root from 218.98.40.142 port 52433 ssh2 ... |
2019-09-04 14:30:58 |
| 192.42.116.28 | attack | Sep 4 01:47:41 debian sshd\[22552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.42.116.28 user=root Sep 4 01:47:43 debian sshd\[22552\]: Failed password for root from 192.42.116.28 port 58148 ssh2 Sep 4 01:47:46 debian sshd\[22552\]: Failed password for root from 192.42.116.28 port 58148 ssh2 ... |
2019-09-04 13:58:58 |
| 79.137.72.171 | attackbotsspam | Sep 3 19:51:20 hanapaa sshd\[22231\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.ip-79-137-72.eu user=root Sep 3 19:51:22 hanapaa sshd\[22231\]: Failed password for root from 79.137.72.171 port 44402 ssh2 Sep 3 19:56:02 hanapaa sshd\[22606\]: Invalid user probe from 79.137.72.171 Sep 3 19:56:02 hanapaa sshd\[22606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.ip-79-137-72.eu Sep 3 19:56:04 hanapaa sshd\[22606\]: Failed password for invalid user probe from 79.137.72.171 port 38395 ssh2 |
2019-09-04 13:57:58 |
| 149.202.45.205 | attack | Sep 4 07:17:33 localhost sshd\[24958\]: Invalid user tb from 149.202.45.205 port 56672 Sep 4 07:17:33 localhost sshd\[24958\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.45.205 Sep 4 07:17:34 localhost sshd\[24958\]: Failed password for invalid user tb from 149.202.45.205 port 56672 ssh2 |
2019-09-04 13:46:03 |
| 185.211.245.198 | attackbotsspam | Sep 4 07:09:30 mail postfix/smtpd\[32739\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 4 07:09:40 mail postfix/smtpd\[2201\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 4 07:25:10 mail postfix/smtpd\[4065\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 4 08:01:04 mail postfix/smtpd\[6246\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2019-09-04 14:07:35 |
| 159.89.165.127 | attack | Sep 4 08:01:31 lnxded64 sshd[16470]: Failed password for root from 159.89.165.127 port 33310 ssh2 Sep 4 08:09:14 lnxded64 sshd[18343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.165.127 Sep 4 08:09:16 lnxded64 sshd[18343]: Failed password for invalid user admin from 159.89.165.127 port 48614 ssh2 |
2019-09-04 14:12:42 |
| 178.128.106.181 | attack | Sep 3 23:44:57 liveconfig01 sshd[28091]: Invalid user radiusd from 178.128.106.181 Sep 3 23:44:57 liveconfig01 sshd[28091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.106.181 Sep 3 23:44:59 liveconfig01 sshd[28091]: Failed password for invalid user radiusd from 178.128.106.181 port 46274 ssh2 Sep 3 23:44:59 liveconfig01 sshd[28091]: Received disconnect from 178.128.106.181 port 46274:11: Bye Bye [preauth] Sep 3 23:44:59 liveconfig01 sshd[28091]: Disconnected from 178.128.106.181 port 46274 [preauth] Sep 4 00:22:03 liveconfig01 sshd[30243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.106.181 user=r.r Sep 4 00:22:05 liveconfig01 sshd[30243]: Failed password for r.r from 178.128.106.181 port 38788 ssh2 Sep 4 00:22:06 liveconfig01 sshd[30243]: Received disconnect from 178.128.106.181 port 38788:11: Bye Bye [preauth] Sep 4 00:22:06 liveconfig01 sshd[30243]: Disc........ ------------------------------- |
2019-09-04 14:09:23 |
| 222.201.144.169 | attackspam | Sep 3 19:26:50 wbs sshd\[27485\]: Invalid user taurai from 222.201.144.169 Sep 3 19:26:50 wbs sshd\[27485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.201.144.169 Sep 3 19:26:53 wbs sshd\[27485\]: Failed password for invalid user taurai from 222.201.144.169 port 59492 ssh2 Sep 3 19:31:56 wbs sshd\[27940\]: Invalid user teamspeak from 222.201.144.169 Sep 3 19:31:56 wbs sshd\[27940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.201.144.169 |
2019-09-04 13:56:42 |