城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.129.150.89
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25338
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.129.150.89. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021500 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 16:27:28 CST 2025
;; MSG SIZE rcvd: 107Host 89.150.129.138.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 89.150.129.138.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 193.228.91.123 | attack | Failed password for invalid user from 193.228.91.123 port 50288 ssh2 |
2020-09-16 05:06:16 |
| 81.68.128.31 | attack | prod6 ... |
2020-09-16 05:15:57 |
| 51.75.19.175 | attackspambots | SSH Bruteforce Attempt on Honeypot |
2020-09-16 04:57:47 |
| 150.109.57.43 | attack | Sep 15 19:49:12 vlre-nyc-1 sshd\[26211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.57.43 user=root Sep 15 19:49:14 vlre-nyc-1 sshd\[26211\]: Failed password for root from 150.109.57.43 port 52454 ssh2 Sep 15 19:55:27 vlre-nyc-1 sshd\[26336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.57.43 user=root Sep 15 19:55:29 vlre-nyc-1 sshd\[26336\]: Failed password for root from 150.109.57.43 port 46724 ssh2 Sep 15 19:57:40 vlre-nyc-1 sshd\[26376\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.57.43 user=root ... |
2020-09-16 04:54:26 |
| 212.64.95.187 | attack | Sep 15 20:29:29 main sshd[3250]: Failed password for invalid user vic from 212.64.95.187 port 52560 ssh2 Sep 15 20:31:20 main sshd[3292]: Failed password for invalid user sshvpn from 212.64.95.187 port 42690 ssh2 Sep 15 20:45:09 main sshd[3694]: Failed password for invalid user calvin1 from 212.64.95.187 port 48284 ssh2 Sep 15 20:56:25 main sshd[4000]: Failed password for invalid user war from 212.64.95.187 port 35510 ssh2 Sep 15 20:59:37 main sshd[4076]: Failed password for invalid user admin from 212.64.95.187 port 43960 ssh2 |
2020-09-16 04:51:51 |
| 34.66.251.252 | attackbotsspam | Lines containing failures of 34.66.251.252 Sep 15 08:33:56 mailserver sshd[25345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.66.251.252 user=r.r Sep 15 08:33:59 mailserver sshd[25345]: Failed password for r.r from 34.66.251.252 port 43110 ssh2 Sep 15 08:33:59 mailserver sshd[25345]: Received disconnect from 34.66.251.252 port 43110:11: Bye Bye [preauth] Sep 15 08:33:59 mailserver sshd[25345]: Disconnected from authenticating user r.r 34.66.251.252 port 43110 [preauth] Sep 15 08:48:09 mailserver sshd[27078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.66.251.252 user=r.r Sep 15 08:48:11 mailserver sshd[27078]: Failed password for r.r from 34.66.251.252 port 55748 ssh2 Sep 15 08:48:11 mailserver sshd[27078]: Received disconnect from 34.66.251.252 port 55748:11: Bye Bye [preauth] Sep 15 08:48:11 mailserver sshd[27078]: Disconnected from authenticating user r.r 34.66.251.252 por........ ------------------------------ |
2020-09-16 05:16:16 |
| 178.207.242.216 | attack | Unauthorized connection attempt from IP address 178.207.242.216 on Port 445(SMB) |
2020-09-16 05:02:25 |
| 191.13.114.90 | attackspam | Sep 15 09:02:55 roki-contabo sshd\[16335\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.13.114.90 user=root Sep 15 09:02:57 roki-contabo sshd\[16335\]: Failed password for root from 191.13.114.90 port 42415 ssh2 Sep 15 19:01:04 roki-contabo sshd\[21893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.13.114.90 user=root Sep 15 19:01:05 roki-contabo sshd\[21900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.13.114.90 user=root Sep 15 19:01:06 roki-contabo sshd\[21893\]: Failed password for root from 191.13.114.90 port 37745 ssh2 ... |
2020-09-16 05:01:26 |
| 165.22.69.147 | attackbotsspam | Sep 15 23:23:50 ns381471 sshd[5421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.69.147 Sep 15 23:23:53 ns381471 sshd[5421]: Failed password for invalid user ubnt from 165.22.69.147 port 37650 ssh2 |
2020-09-16 05:24:48 |
| 51.79.54.234 | attack | Sep 15 16:23:34 Tower sshd[38004]: Connection from 51.79.54.234 port 52978 on 192.168.10.220 port 22 rdomain "" Sep 15 16:23:37 Tower sshd[38004]: Failed password for root from 51.79.54.234 port 52978 ssh2 Sep 15 16:23:37 Tower sshd[38004]: Received disconnect from 51.79.54.234 port 52978:11: Bye Bye [preauth] Sep 15 16:23:37 Tower sshd[38004]: Disconnected from authenticating user root 51.79.54.234 port 52978 [preauth] |
2020-09-16 05:07:17 |
| 39.104.138.246 | attackspam | 39.104.138.246 - - [15/Sep/2020:21:54:05 +0100] "POST /wp-login.php HTTP/1.1" 200 2121 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 39.104.138.246 - - [15/Sep/2020:21:54:08 +0100] "POST /wp-login.php HTTP/1.1" 200 2091 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 39.104.138.246 - - [15/Sep/2020:21:54:11 +0100] "POST /wp-login.php HTTP/1.1" 200 2092 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-16 05:23:58 |
| 223.214.227.15 | attackbotsspam | Sep 15 06:19:47 Tower sshd[8162]: refused connect from 222.186.175.151 (222.186.175.151) Sep 15 10:13:01 Tower sshd[8162]: refused connect from 112.85.42.187 (112.85.42.187) Sep 15 13:09:34 Tower sshd[8162]: Connection from 223.214.227.15 port 33494 on 192.168.10.220 port 22 rdomain "" Sep 15 13:09:43 Tower sshd[8162]: Failed password for root from 223.214.227.15 port 33494 ssh2 Sep 15 13:09:44 Tower sshd[8162]: Received disconnect from 223.214.227.15 port 33494:11: Bye Bye [preauth] Sep 15 13:09:44 Tower sshd[8162]: Disconnected from authenticating user root 223.214.227.15 port 33494 [preauth] |
2020-09-16 05:16:45 |
| 47.21.12.22 | attack | Automatic report - Port Scan Attack |
2020-09-16 05:17:23 |
| 138.68.82.194 | attackspambots | 2020-09-15T23:16:41.136042paragon sshd[75316]: Failed password for invalid user brummund from 138.68.82.194 port 53564 ssh2 2020-09-15T23:20:40.296506paragon sshd[75388]: Invalid user admin from 138.68.82.194 port 37522 2020-09-15T23:20:40.299872paragon sshd[75388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194 2020-09-15T23:20:40.296506paragon sshd[75388]: Invalid user admin from 138.68.82.194 port 37522 2020-09-15T23:20:42.158239paragon sshd[75388]: Failed password for invalid user admin from 138.68.82.194 port 37522 ssh2 ... |
2020-09-16 04:50:32 |
| 187.189.11.49 | attackbotsspam | detected by Fail2Ban |
2020-09-16 05:18:35 |