城市(city): unknown
省份(region): unknown
国家(country): United Kingdom of Great Britain and Northern Ireland (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.104.168.38
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16336
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.104.168.38. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012400 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 24 23:59:45 CST 2025
;; MSG SIZE rcvd: 107Host 38.168.104.138.in-addr.arpa not found: 2(SERVFAIL)
server can't find 138.104.168.38.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 194.61.24.94 | attack | Oct 4 05:52:49 h2177944 kernel: \[3037325.730176\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.61.24.94 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=122 ID=18981 DF PROTO=TCP SPT=49477 DPT=80 WINDOW=254 RES=0x00 ACK FIN URGP=0 Oct 4 05:52:49 h2177944 kernel: \[3037325.730212\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.61.24.94 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=121 ID=18982 DF PROTO=TCP SPT=49514 DPT=80 WINDOW=254 RES=0x00 ACK FIN URGP=0 Oct 4 05:52:53 h2177944 kernel: \[3037330.529319\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.61.24.94 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=122 ID=18993 DF PROTO=TCP SPT=49477 DPT=80 WINDOW=254 RES=0x00 ACK FIN URGP=0 Oct 4 05:52:53 h2177944 kernel: \[3037330.529369\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.61.24.94 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=121 ID=18992 DF PROTO=TCP SPT=49514 DPT=80 WINDOW=254 RES=0x00 ACK FIN URGP=0 Oct 4 05:53:03 h2177944 kernel: \[3037340.128599\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.61.24.94 DST=8 |
2019-10-04 16:43:38 |
| 123.207.7.130 | attackspam | Oct 4 10:42:44 OPSO sshd\[5612\]: Invalid user 123qwertyuiop from 123.207.7.130 port 52476 Oct 4 10:42:44 OPSO sshd\[5612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.7.130 Oct 4 10:42:46 OPSO sshd\[5612\]: Failed password for invalid user 123qwertyuiop from 123.207.7.130 port 52476 ssh2 Oct 4 10:47:38 OPSO sshd\[6399\]: Invalid user CENTOS@1234 from 123.207.7.130 port 33050 Oct 4 10:47:38 OPSO sshd\[6399\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.7.130 |
2019-10-04 16:54:13 |
| 139.59.59.194 | attackbots | Oct 4 10:04:37 dedicated sshd[8477]: Invalid user Reality@123 from 139.59.59.194 port 53526 |
2019-10-04 16:12:42 |
| 37.204.118.194 | attackspam | Oct 1 09:56:09 toyboy sshd[20953]: reveeclipse mapping checking getaddrinfo for broadband-37.204-118-194.ip.moscow.rt.ru [37.204.118.194] failed - POSSIBLE BREAK-IN ATTEMPT! Oct 1 09:56:09 toyboy sshd[20953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.204.118.194 user=r.r Oct 1 09:56:12 toyboy sshd[20953]: Failed password for r.r from 37.204.118.194 port 50909 ssh2 Oct 1 09:56:14 toyboy sshd[20953]: Failed password for r.r from 37.204.118.194 port 50909 ssh2 Oct 1 09:56:16 toyboy sshd[20953]: Failed password for r.r from 37.204.118.194 port 50909 ssh2 Oct 1 09:56:18 toyboy sshd[20953]: Failed password for r.r from 37.204.118.194 port 50909 ssh2 Oct 1 09:56:21 toyboy sshd[20953]: Failed password for r.r from 37.204.118.194 port 50909 ssh2 Oct 1 09:56:23 toyboy sshd[20953]: Failed password for r.r from 37.204.118.194 port 50909 ssh2 Oct 1 09:56:23 toyboy sshd[20953]: Disconnecting: Too many authentication failures ........ ------------------------------- |
2019-10-04 16:17:53 |
| 222.186.190.92 | attack | 2019-10-04T08:40:34.631048abusebot.cloudsearch.cf sshd\[24346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.92 user=root |
2019-10-04 16:53:36 |
| 177.139.153.186 | attack | Oct 4 08:21:27 ns37 sshd[8814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.139.153.186 |
2019-10-04 16:56:53 |
| 106.0.6.33 | attackbots | Unauthorized connection attempt from IP address 106.0.6.33 on Port 445(SMB) |
2019-10-04 16:42:24 |
| 45.231.29.46 | attack | Sep 30 08:17:17 our-server-hostname postfix/smtpd[28333]: connect from unknown[45.231.29.46] Sep x@x Sep x@x Sep x@x Sep x@x Sep x@x Sep x@x Sep x@x Sep x@x Sep x@x Sep x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=45.231.29.46 |
2019-10-04 16:42:40 |
| 162.144.48.229 | attack | Automatic report - Banned IP Access |
2019-10-04 16:46:03 |
| 213.32.67.160 | attackbotsspam | 2019-10-04T07:37:24.308678tmaserv sshd\[19156\]: Invalid user Kapital from 213.32.67.160 port 52874 2019-10-04T07:37:24.311456tmaserv sshd\[19156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.ip-213-32-67.eu 2019-10-04T07:37:26.112794tmaserv sshd\[19156\]: Failed password for invalid user Kapital from 213.32.67.160 port 52874 ssh2 2019-10-04T07:41:35.271035tmaserv sshd\[19403\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.ip-213-32-67.eu user=root 2019-10-04T07:41:37.193737tmaserv sshd\[19403\]: Failed password for root from 213.32.67.160 port 45008 ssh2 2019-10-04T07:45:44.822397tmaserv sshd\[19450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.ip-213-32-67.eu user=root ... |
2019-10-04 16:55:51 |
| 171.221.217.145 | attackbots | Oct 4 06:48:31 www2 sshd\[34457\]: Invalid user p455w0rd2020 from 171.221.217.145Oct 4 06:48:33 www2 sshd\[34457\]: Failed password for invalid user p455w0rd2020 from 171.221.217.145 port 60421 ssh2Oct 4 06:53:30 www2 sshd\[35093\]: Invalid user d3bian2016 from 171.221.217.145 ... |
2019-10-04 16:33:10 |
| 68.183.2.210 | attack | \[2019-10-04 04:25:45\] SECURITY\[2006\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-04T04:25:45.064-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011970599704264",SessionID="0x7f1e1c771778",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/68.183.2.210/65344",ACLName="no_extension_match" \[2019-10-04 04:27:54\] SECURITY\[2006\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-04T04:27:54.975-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9970599704264",SessionID="0x7f1e1cf2aed8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/68.183.2.210/59164",ACLName="no_extension_match" \[2019-10-04 04:30:09\] SECURITY\[2006\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-04T04:30:09.059-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011970599704264",SessionID="0x7f1e1c02d9c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/68.183.2.210/55257",ACLName="no_extensi |
2019-10-04 16:49:14 |
| 138.99.103.229 | attackbots | Lines containing failures of 138.99.103.229 Oct 2 04:31:38 omfg postfix/smtpd[14767]: connect from 229-103-99-138.schmhostnamezinformatica.com.py[138.99.103.229] Oct x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=138.99.103.229 |
2019-10-04 16:24:44 |
| 120.52.152.17 | attackbots | firewall-block, port(s): 162/udp, 2123/udp, 2424/udp, 30313/udp |
2019-10-04 16:21:12 |
| 178.140.96.145 | attack | Oct 1 21:51:36 xb3 sshd[28018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=broadband-178-140-96-145.ip.moscow.rt.ru user=r.r Oct 1 21:51:37 xb3 sshd[28018]: Failed password for r.r from 178.140.96.145 port 42896 ssh2 Oct 1 21:51:40 xb3 sshd[28018]: Failed password for r.r from 178.140.96.145 port 42896 ssh2 Oct 1 21:51:42 xb3 sshd[28018]: Failed password for r.r from 178.140.96.145 port 42896 ssh2 Oct 1 21:51:42 xb3 sshd[28018]: Disconnecting: Too many authentication failures for r.r from 178.140.96.145 port 42896 ssh2 [preauth] Oct 1 21:51:42 xb3 sshd[28018]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=broadband-178-140-96-145.ip.moscow.rt.ru user=r.r Oct 1 21:51:48 xb3 sshd[28229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=broadband-178-140-96-145.ip.moscow.rt.ru user=r.r Oct 1 21:51:50 xb3 sshd[28229]: Failed password for r.r from 1........ ------------------------------- |
2019-10-04 16:35:19 |