城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.168.194.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42087
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.168.194.64. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021401 1800 900 604800 86400
;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 13:24:37 CST 2025
;; MSG SIZE rcvd: 107Host 64.194.168.134.in-addr.arpa not found: 2(SERVFAIL)
server can't find 134.168.194.64.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 104.236.228.46 | attackspambots | Nov 24 00:55:31 TORMINT sshd\[17007\]: Invalid user oracle from 104.236.228.46 Nov 24 00:55:31 TORMINT sshd\[17007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.228.46 Nov 24 00:55:33 TORMINT sshd\[17007\]: Failed password for invalid user oracle from 104.236.228.46 port 58192 ssh2 ... |
2019-11-24 14:20:23 |
| 118.25.78.202 | attack | Nov 23 19:54:27 web9 sshd\[19337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.78.202 user=root Nov 23 19:54:29 web9 sshd\[19337\]: Failed password for root from 118.25.78.202 port 46948 ssh2 Nov 23 20:03:37 web9 sshd\[20472\]: Invalid user www from 118.25.78.202 Nov 23 20:03:37 web9 sshd\[20472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.78.202 Nov 23 20:03:39 web9 sshd\[20472\]: Failed password for invalid user www from 118.25.78.202 port 52140 ssh2 |
2019-11-24 14:18:03 |
| 181.48.225.126 | attack | Nov 24 11:45:19 itv-usvr-01 sshd[29459]: Invalid user glanz from 181.48.225.126 Nov 24 11:45:19 itv-usvr-01 sshd[29459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.225.126 Nov 24 11:45:19 itv-usvr-01 sshd[29459]: Invalid user glanz from 181.48.225.126 Nov 24 11:45:21 itv-usvr-01 sshd[29459]: Failed password for invalid user glanz from 181.48.225.126 port 53858 ssh2 Nov 24 11:54:16 itv-usvr-01 sshd[29769]: Invalid user squid from 181.48.225.126 |
2019-11-24 13:52:25 |
| 202.169.56.98 | attackspambots | Invalid user cron from 202.169.56.98 port 44619 |
2019-11-24 14:19:37 |
| 185.175.93.14 | attackbotsspam | 11/24/2019-00:24:25.994142 185.175.93.14 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-11-24 14:05:16 |
| 218.92.0.198 | attackspambots | Nov 24 07:13:16 dcd-gentoo sshd[10806]: User root from 218.92.0.198 not allowed because none of user's groups are listed in AllowGroups Nov 24 07:13:21 dcd-gentoo sshd[10806]: error: PAM: Authentication failure for illegal user root from 218.92.0.198 Nov 24 07:13:16 dcd-gentoo sshd[10806]: User root from 218.92.0.198 not allowed because none of user's groups are listed in AllowGroups Nov 24 07:13:21 dcd-gentoo sshd[10806]: error: PAM: Authentication failure for illegal user root from 218.92.0.198 Nov 24 07:13:16 dcd-gentoo sshd[10806]: User root from 218.92.0.198 not allowed because none of user's groups are listed in AllowGroups Nov 24 07:13:21 dcd-gentoo sshd[10806]: error: PAM: Authentication failure for illegal user root from 218.92.0.198 Nov 24 07:13:21 dcd-gentoo sshd[10806]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.198 port 34664 ssh2 ... |
2019-11-24 14:23:28 |
| 34.216.254.89 | attackbots | Bad user agent |
2019-11-24 14:16:44 |
| 176.214.60.193 | attack | (Nov 24) LEN=52 TOS=0x10 PREC=0x60 TTL=116 ID=29735 DF TCP DPT=445 WINDOW=8192 SYN (Nov 24) LEN=52 TOS=0x10 PREC=0x60 TTL=116 ID=16578 DF TCP DPT=445 WINDOW=8192 SYN (Nov 23) LEN=52 TOS=0x10 PREC=0x60 TTL=116 ID=2730 DF TCP DPT=445 WINDOW=8192 SYN (Nov 23) LEN=52 TOS=0x10 PREC=0x60 TTL=116 ID=32065 DF TCP DPT=445 WINDOW=8192 SYN (Nov 23) LEN=52 TOS=0x10 PREC=0x60 TTL=116 ID=25517 DF TCP DPT=445 WINDOW=8192 SYN (Nov 23) LEN=52 TOS=0x10 PREC=0x60 TTL=116 ID=32126 DF TCP DPT=445 WINDOW=8192 SYN (Nov 23) LEN=52 TOS=0x10 PREC=0x60 TTL=116 ID=19319 DF TCP DPT=445 WINDOW=8192 SYN (Nov 23) LEN=52 TOS=0x10 PREC=0x60 TTL=116 ID=15198 DF TCP DPT=445 WINDOW=8192 SYN (Nov 23) LEN=52 TOS=0x10 PREC=0x60 TTL=116 ID=24721 DF TCP DPT=445 WINDOW=8192 SYN (Nov 23) LEN=52 TOS=0x10 PREC=0x60 TTL=116 ID=547 DF TCP DPT=445 WINDOW=8192 SYN (Nov 23) LEN=52 TOS=0x10 PREC=0x60 TTL=116 ID=6996 DF TCP DPT=445 WINDOW=8192 SYN (Nov 23) LEN=52 TOS=0x10 PREC=0x60 TTL=116 ID=24437 DF T... |
2019-11-24 13:46:49 |
| 13.76.223.220 | attackspam | Brute forcing RDP port 3389 |
2019-11-24 14:22:53 |
| 103.101.52.48 | attackspambots | Brute-force attempt banned |
2019-11-24 13:46:33 |
| 54.176.188.51 | attack | /wp-login.php /wordpress/wp-login.php /blog/wp-login.php |
2019-11-24 13:57:28 |
| 185.143.221.186 | attack | 11/24/2019-01:05:31.786592 185.143.221.186 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-11-24 14:11:25 |
| 132.232.31.25 | attackbots | Nov 23 19:57:46 web1 sshd\[12063\]: Invalid user hathorn from 132.232.31.25 Nov 23 19:57:46 web1 sshd\[12063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.31.25 Nov 23 19:57:47 web1 sshd\[12063\]: Failed password for invalid user hathorn from 132.232.31.25 port 34736 ssh2 Nov 23 20:06:01 web1 sshd\[12976\]: Invalid user jjjjjjj from 132.232.31.25 Nov 23 20:06:01 web1 sshd\[12976\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.31.25 |
2019-11-24 14:16:08 |
| 185.165.168.229 | attackbots | $f2bV_matches |
2019-11-24 13:54:42 |
| 175.140.23.240 | attack | Nov 24 01:54:19 vps46666688 sshd[27170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.140.23.240 Nov 24 01:54:20 vps46666688 sshd[27170]: Failed password for invalid user Qaz123! from 175.140.23.240 port 39525 ssh2 ... |
2019-11-24 13:48:31 |