城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.196.21.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41847
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.196.21.149. IN A
;; AUTHORITY SECTION:
. 222 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019102100 1800 900 604800 86400
;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 21 20:16:53 CST 2019
;; MSG SIZE rcvd: 118Host 149.21.196.138.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 149.21.196.138.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 165.227.26.69 | attackbots | Dec 15 09:14:49 mail1 sshd\[31977\]: Invalid user mathildasu from 165.227.26.69 port 44910 Dec 15 09:14:49 mail1 sshd\[31977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.26.69 Dec 15 09:14:51 mail1 sshd\[31977\]: Failed password for invalid user mathildasu from 165.227.26.69 port 44910 ssh2 Dec 15 09:25:59 mail1 sshd\[5231\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.26.69 user=dovenull Dec 15 09:26:01 mail1 sshd\[5231\]: Failed password for dovenull from 165.227.26.69 port 53616 ssh2 ... |
2019-12-15 19:44:07 |
| 114.242.245.32 | attack | Dec 15 07:25:45 lnxmail61 sshd[20058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.242.245.32 |
2019-12-15 19:45:10 |
| 49.88.112.113 | attackspambots | Dec 15 06:29:29 plusreed sshd[16901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.113 user=root Dec 15 06:29:31 plusreed sshd[16901]: Failed password for root from 49.88.112.113 port 45545 ssh2 ... |
2019-12-15 19:31:08 |
| 134.209.16.36 | attackspam | Dec 15 11:25:21 gw1 sshd[4398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.16.36 Dec 15 11:25:23 gw1 sshd[4398]: Failed password for invalid user cl from 134.209.16.36 port 50734 ssh2 ... |
2019-12-15 20:07:30 |
| 5.39.82.176 | attack | Dec 15 16:37:17 vibhu-HP-Z238-Microtower-Workstation sshd\[14757\]: Invalid user robynn from 5.39.82.176 Dec 15 16:37:17 vibhu-HP-Z238-Microtower-Workstation sshd\[14757\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.82.176 Dec 15 16:37:19 vibhu-HP-Z238-Microtower-Workstation sshd\[14757\]: Failed password for invalid user robynn from 5.39.82.176 port 26973 ssh2 Dec 15 16:43:39 vibhu-HP-Z238-Microtower-Workstation sshd\[15134\]: Invalid user art from 5.39.82.176 Dec 15 16:43:39 vibhu-HP-Z238-Microtower-Workstation sshd\[15134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.82.176 ... |
2019-12-15 19:31:31 |
| 193.112.9.189 | attackspam | Brute-force attempt banned |
2019-12-15 19:33:55 |
| 185.41.187.164 | attackbotsspam | Portscan or hack attempt detected by psad/fwsnort |
2019-12-15 19:42:43 |
| 175.5.139.5 | attack | Scanning |
2019-12-15 20:11:26 |
| 45.77.183.32 | attackspam | Dec 14 22:09:57 ns4 sshd[23837]: warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(45.77.183.32.vultr.com, AF_INET) failed Dec 14 22:10:00 ns4 sshd[23837]: reveeclipse mapping checking getaddrinfo for 45.77.183.32.vultr.com [45.77.183.32] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 22:10:00 ns4 sshd[23837]: Invalid user shingler from 45.77.183.32 Dec 14 22:10:00 ns4 sshd[23837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.77.183.32 Dec 14 22:10:02 ns4 sshd[23837]: Failed password for invalid user shingler from 45.77.183.32 port 43182 ssh2 Dec 14 22:19:33 ns4 sshd[25422]: warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(45.77.183.32.vultr.com, AF_INET) failed Dec 14 22:19:37 ns4 sshd[25422]: reveeclipse mapping checking getaddrinfo for 45.77.183.32.vultr.com [45.77.183.32] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 22:19:37 ns4 sshd[25422]: Invalid user newburgh from 45.77.183.32 De........ ------------------------------- |
2019-12-15 20:10:08 |
| 91.143.201.190 | attackspam | Honeypot attack, port: 445, PTR: PTR record not found |
2019-12-15 19:45:35 |
| 54.254.111.195 | attackspam | serveres are UTC Lines containing failures of 54.254.111.195 Dec 13 19:50:36 tux2 sshd[21770]: Failed password for r.r from 54.254.111.195 port 57418 ssh2 Dec 13 19:50:37 tux2 sshd[21770]: Received disconnect from 54.254.111.195 port 57418:11: Bye Bye [preauth] Dec 13 19:50:37 tux2 sshd[21770]: Disconnected from authenticating user r.r 54.254.111.195 port 57418 [preauth] Dec 13 20:01:15 tux2 sshd[22367]: Invalid user info from 54.254.111.195 port 43538 Dec 13 20:01:15 tux2 sshd[22367]: Failed password for invalid user info from 54.254.111.195 port 43538 ssh2 Dec 13 20:01:15 tux2 sshd[22367]: Received disconnect from 54.254.111.195 port 43538:11: Bye Bye [preauth] Dec 13 20:01:15 tux2 sshd[22367]: Disconnected from invalid user info 54.254.111.195 port 43538 [preauth] Dec 13 20:06:59 tux2 sshd[22693]: Invalid user otemoyan from 54.254.111.195 port 43920 Dec 13 20:06:59 tux2 sshd[22693]: Failed password for invalid user otemoyan from 54.254.111.195 port 43920 ssh2 Dec 13 ........ ------------------------------ |
2019-12-15 19:44:27 |
| 202.83.17.223 | attackspam | 2019-12-15T08:28:50.325668vps751288.ovh.net sshd\[9056\]: Invalid user viktor from 202.83.17.223 port 53345 2019-12-15T08:28:50.333008vps751288.ovh.net sshd\[9056\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.83.17.223 2019-12-15T08:28:52.668795vps751288.ovh.net sshd\[9056\]: Failed password for invalid user viktor from 202.83.17.223 port 53345 ssh2 2019-12-15T08:35:16.661196vps751288.ovh.net sshd\[9107\]: Invalid user canz from 202.83.17.223 port 56684 2019-12-15T08:35:16.674508vps751288.ovh.net sshd\[9107\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.83.17.223 |
2019-12-15 19:33:32 |
| 218.56.138.164 | attackbots | Dec 15 09:53:13 zeus sshd[30231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.56.138.164 Dec 15 09:53:15 zeus sshd[30231]: Failed password for invalid user alexx from 218.56.138.164 port 34488 ssh2 Dec 15 09:57:03 zeus sshd[30318]: Failed password for nobody from 218.56.138.164 port 40790 ssh2 Dec 15 10:00:46 zeus sshd[30403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.56.138.164 |
2019-12-15 19:32:03 |
| 51.158.68.68 | attackspambots | Automatic report - XMLRPC Attack |
2019-12-15 19:48:04 |
| 191.240.103.211 | attack | Honeypot attack, port: 81, PTR: 191-240-103-211.mcl-fb.mastercabo.com.br. |
2019-12-15 19:48:41 |