城市(city): unknown
省份(region): unknown
国家(country): Belgium
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.54.57.69
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9755
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.54.57.69. IN A
;; AUTHORITY SECTION:
. 478 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022052000 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 20 13:35:48 CST 2022
;; MSG SIZE rcvd: 105Host 69.57.54.134.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 69.57.54.134.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 5.188.158.147 | attackspam | (Sep 9) LEN=40 TTL=249 ID=32490 TCP DPT=3389 WINDOW=1024 SYN (Sep 9) LEN=40 TTL=248 ID=16658 TCP DPT=3389 WINDOW=1024 SYN (Sep 9) LEN=40 TTL=249 ID=11148 TCP DPT=3389 WINDOW=1024 SYN (Sep 8) LEN=40 TTL=248 ID=37536 TCP DPT=3389 WINDOW=1024 SYN (Sep 8) LEN=40 TTL=249 ID=25247 TCP DPT=3389 WINDOW=1024 SYN (Sep 8) LEN=40 TTL=249 ID=45601 TCP DPT=3389 WINDOW=1024 SYN (Sep 8) LEN=40 TTL=249 ID=37009 TCP DPT=3389 WINDOW=1024 SYN (Sep 7) LEN=40 TTL=249 ID=17591 TCP DPT=3389 WINDOW=1024 SYN (Sep 7) LEN=40 TTL=249 ID=25835 TCP DPT=3389 WINDOW=1024 SYN (Sep 7) LEN=40 TTL=248 ID=33462 TCP DPT=3389 WINDOW=1024 SYN (Sep 7) LEN=40 TTL=249 ID=37317 TCP DPT=3389 WINDOW=1024 SYN (Sep 7) LEN=40 TTL=249 ID=56103 TCP DPT=3389 WINDOW=1024 SYN |
2020-09-09 14:54:19 |
| 212.58.121.105 | attackspam | 1599584062 - 09/08/2020 18:54:22 Host: 212.58.121.105/212.58.121.105 Port: 445 TCP Blocked |
2020-09-09 14:46:19 |
| 202.69.45.66 | attack | 20/9/8@12:54:08: FAIL: Alarm-Intrusion address from=202.69.45.66 ... |
2020-09-09 14:55:36 |
| 138.68.52.53 | attackspam | Automatic report - XMLRPC Attack |
2020-09-09 14:52:40 |
| 222.186.30.76 | attack | Sep 9 08:39:42 markkoudstaal sshd[1419]: Failed password for root from 222.186.30.76 port 48089 ssh2 Sep 9 08:39:45 markkoudstaal sshd[1419]: Failed password for root from 222.186.30.76 port 48089 ssh2 Sep 9 08:39:47 markkoudstaal sshd[1419]: Failed password for root from 222.186.30.76 port 48089 ssh2 ... |
2020-09-09 14:49:09 |
| 106.51.73.204 | attackbotsspam | Sep 9 05:11:25 server sshd[3924]: Failed password for invalid user ftpuser from 106.51.73.204 port 55776 ssh2 Sep 9 05:14:49 server sshd[8252]: Failed password for invalid user zanni from 106.51.73.204 port 12054 ssh2 Sep 9 05:18:13 server sshd[12486]: Failed password for invalid user saned from 106.51.73.204 port 28880 ssh2 |
2020-09-09 15:05:38 |
| 217.14.211.216 | attackbots | SSH brute-force attempt |
2020-09-09 14:53:56 |
| 84.38.184.79 | attack | $f2bV_matches |
2020-09-09 15:11:48 |
| 104.244.79.241 | attackspambots | Sep 9 07:58:04 theomazars sshd[24902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.79.241 user=root Sep 9 07:58:06 theomazars sshd[24902]: Failed password for root from 104.244.79.241 port 41236 ssh2 |
2020-09-09 14:40:19 |
| 140.143.30.191 | attackspam | 2020-09-08T23:53:08.357291vps1033 sshd[7421]: Failed password for root from 140.143.30.191 port 58866 ssh2 2020-09-08T23:57:56.209930vps1033 sshd[18040]: Invalid user cisco from 140.143.30.191 port 57802 2020-09-08T23:57:56.215130vps1033 sshd[18040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.30.191 2020-09-08T23:57:56.209930vps1033 sshd[18040]: Invalid user cisco from 140.143.30.191 port 57802 2020-09-08T23:57:57.396132vps1033 sshd[18040]: Failed password for invalid user cisco from 140.143.30.191 port 57802 ssh2 ... |
2020-09-09 14:55:04 |
| 119.9.86.172 | attack | Sep 9 01:25:02 gw1 sshd[32396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.9.86.172 Sep 9 01:25:03 gw1 sshd[32396]: Failed password for invalid user debian from 119.9.86.172 port 59769 ssh2 ... |
2020-09-09 15:18:51 |
| 106.13.203.62 | attackspam | Sep 8 20:50:00 sso sshd[8195]: Failed password for root from 106.13.203.62 port 48382 ssh2 ... |
2020-09-09 15:11:20 |
| 176.31.226.188 | attackspam | 5060/udp 5060/udp 5060/udp... [2020-08-16/09-08]26pkt,1pt.(udp) |
2020-09-09 14:45:13 |
| 51.83.132.89 | attackbotsspam | Sep 7 05:10:13 myhostname sshd[6636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.132.89 user=r.r Sep 7 05:10:16 myhostname sshd[6636]: Failed password for r.r from 51.83.132.89 port 51007 ssh2 Sep 7 05:10:16 myhostname sshd[6636]: Received disconnect from 51.83.132.89 port 51007:11: Bye Bye [preauth] Sep 7 05:10:16 myhostname sshd[6636]: Disconnected from 51.83.132.89 port 51007 [preauth] Sep 7 05:23:51 myhostname sshd[16095]: Invalid user server from 51.83.132.89 Sep 7 05:23:51 myhostname sshd[16095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.132.89 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=51.83.132.89 |
2020-09-09 14:57:08 |
| 51.83.104.120 | attackbots | 51.83.104.120 (FR/France/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 9 01:10:55 server2 sshd[30273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.104.120 user=root Sep 9 01:10:57 server2 sshd[30273]: Failed password for root from 51.83.104.120 port 43302 ssh2 Sep 9 01:11:02 server2 sshd[30306]: Failed password for root from 118.27.5.46 port 40934 ssh2 Sep 9 01:09:22 server2 sshd[28633]: Failed password for root from 144.217.42.212 port 45196 ssh2 Sep 9 01:09:55 server2 sshd[29245]: Failed password for root from 90.176.150.123 port 56286 ssh2 IP Addresses Blocked: |
2020-09-09 15:09:04 |