城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): DoD Network Information Center
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 137.5.114.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20622
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;137.5.114.139. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019073101 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 01 01:34:28 CST 2019
;; MSG SIZE rcvd: 117
Host 139.114.5.137.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 139.114.5.137.in-addr.arpa: NXDOMAIN
IP | 类型 | 评论内容 | 时间 |
---|---|---|---|
125.16.182.132 | attackspam | Unauthorized connection attempt from IP address 125.16.182.132 on Port 445(SMB) |
2020-02-26 08:32:01 |
190.187.34.17 | attack | Unauthorized connection attempt from IP address 190.187.34.17 on Port 445(SMB) |
2020-02-26 08:41:44 |
103.81.156.56 | attackbots | Feb 26 01:47:20 vpn01 sshd[11075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.81.156.56 Feb 26 01:47:23 vpn01 sshd[11075]: Failed password for invalid user qichen from 103.81.156.56 port 3016 ssh2 ... |
2020-02-26 08:56:19 |
125.129.26.238 | attackbotsspam | Feb 26 01:47:06 lnxded63 sshd[24211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.129.26.238 Feb 26 01:47:06 lnxded63 sshd[24211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.129.26.238 |
2020-02-26 09:06:30 |
114.235.249.58 | attackspambots | Email rejected due to spam filtering |
2020-02-26 08:36:35 |
201.64.22.66 | attackspam | Unauthorized connection attempt from IP address 201.64.22.66 on Port 445(SMB) |
2020-02-26 08:46:51 |
95.105.233.209 | attack | Repeated brute force against a port |
2020-02-26 09:04:21 |
125.160.11.66 | attack | Feb 26 01:41:45 xxxx sshd[30524]: reveeclipse mapping checking getaddrinfo for 66.subnet125-160-11.speedy.telkom.net.id [125.160.11.66] failed - POSSIBLE BREAK-IN ATTEMPT! Feb 26 01:41:45 xxxx sshd[30524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.160.11.66 user=r.r Feb 26 01:41:46 xxxx sshd[30524]: Failed password for r.r from 125.160.11.66 port 18407 ssh2 Feb 26 01:41:48 xxxx sshd[30526]: reveeclipse mapping checking getaddrinfo for 66.subnet125-160-11.speedy.telkom.net.id [125.160.11.66] failed - POSSIBLE BREAK-IN ATTEMPT! Feb 26 01:41:48 xxxx sshd[30526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.160.11.66 user=r.r Feb 26 01:41:50 xxxx sshd[30526]: Failed password for r.r from 125.160.11.66 port 18687 ssh2 Feb 26 01:41:52 xxxx sshd[30528]: reveeclipse mapping checking getaddrinfo for 66.subnet125-160-11.speedy.telkom.net.id [125.160.11.66] failed - POSSIBLE BREAK-IN........ ------------------------------- |
2020-02-26 08:49:45 |
93.174.93.195 | attack | 93.174.93.195 was recorded 26 times by 13 hosts attempting to connect to the following ports: 49192,49190,49193. Incident counter (4h, 24h, all-time): 26, 158, 6529 |
2020-02-26 08:32:26 |
47.28.93.202 | attack | Fail2Ban Ban Triggered |
2020-02-26 08:53:38 |
49.88.112.114 | attackspambots | Feb 25 14:55:47 php1 sshd\[23421\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Feb 25 14:55:48 php1 sshd\[23421\]: Failed password for root from 49.88.112.114 port 54832 ssh2 Feb 25 15:00:25 php1 sshd\[23882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Feb 25 15:00:27 php1 sshd\[23882\]: Failed password for root from 49.88.112.114 port 59268 ssh2 Feb 25 15:01:30 php1 sshd\[23964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root |
2020-02-26 09:11:12 |
113.162.210.72 | attackspam | suspicious action Tue, 25 Feb 2020 13:31:04 -0300 |
2020-02-26 08:39:34 |
201.20.42.129 | attack | Trying to (more than 3 packets) bruteforce (not open) Samba/Microsoft-DS port 445 |
2020-02-26 08:35:23 |
54.165.231.250 | attack | Feb 26 01:32:08 [host] kernel: [5875903.885873] [U Feb 26 01:32:09 [host] kernel: [5875904.488425] [U Feb 26 01:32:15 [host] kernel: [5875909.993940] [U Feb 26 01:32:15 [host] kernel: [5875910.180176] [U Feb 26 01:32:23 [host] kernel: [5875918.388165] [U Feb 26 01:47:27 [host] kernel: [5876822.591566] [U |
2020-02-26 08:50:17 |
86.35.37.186 | attack | Total attacks: 2 |
2020-02-26 08:54:21 |