城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.220.160.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20195
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.220.160.104. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013101 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 01 04:24:21 CST 2025
;; MSG SIZE rcvd: 108Host 104.160.220.138.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 104.160.220.138.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 139.59.74.23 | attack | 3389BruteforceFW23 |
2019-12-28 01:02:25 |
| 121.52.233.209 | attackbots | SIP/5060 Probe, BF, Hack - |
2019-12-28 01:03:30 |
| 45.136.108.122 | attack | Dec 27 17:22:58 h2177944 kernel: \[662488.338498\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.122 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=43752 PROTO=TCP SPT=40344 DPT=4397 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 27 17:22:58 h2177944 kernel: \[662488.338510\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.122 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=43752 PROTO=TCP SPT=40344 DPT=4397 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 27 17:33:59 h2177944 kernel: \[663149.374321\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.122 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=62702 PROTO=TCP SPT=40344 DPT=5349 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 27 17:33:59 h2177944 kernel: \[663149.374334\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.122 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=62702 PROTO=TCP SPT=40344 DPT=5349 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 27 17:53:22 h2177944 kernel: \[664311.409716\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=45.136.108.122 DST=85.214.117.9 |
2019-12-28 00:58:41 |
| 122.115.57.166 | attackspam | SIP/5060 Probe, BF, Hack - |
2019-12-28 00:54:50 |
| 129.211.98.240 | attackbots | Dec 27 17:21:25 MK-Soft-VM4 sshd[14947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.98.240 Dec 27 17:21:27 MK-Soft-VM4 sshd[14947]: Failed password for invalid user dspace from 129.211.98.240 port 35100 ssh2 ... |
2019-12-28 00:54:19 |
| 163.172.204.185 | attack | Dec 27 06:26:21 web9 sshd\[9952\]: Invalid user herrington from 163.172.204.185 Dec 27 06:26:21 web9 sshd\[9952\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.204.185 Dec 27 06:26:23 web9 sshd\[9952\]: Failed password for invalid user herrington from 163.172.204.185 port 59061 ssh2 Dec 27 06:28:27 web9 sshd\[10223\]: Invalid user named from 163.172.204.185 Dec 27 06:28:27 web9 sshd\[10223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.204.185 |
2019-12-28 00:36:30 |
| 35.160.48.160 | attackbotsspam | 12/27/2019-17:46:02.634606 35.160.48.160 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-12-28 00:52:05 |
| 185.202.215.165 | attack | Honeypot hit: [2019-12-27 17:55:02 +0300] Connected from 185.202.215.165 to (HoneypotIP):21 |
2019-12-28 01:01:15 |
| 27.114.172.104 | attack | Automatic report - Port Scan Attack |
2019-12-28 01:09:42 |
| 162.214.21.81 | attackbots | Automatic report - XMLRPC Attack |
2019-12-28 00:50:22 |
| 139.59.66.213 | attackspam | Dec 27 11:39:03 hostnameis sshd[17936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.66.213 user=r.r Dec 27 11:39:04 hostnameis sshd[17936]: Failed password for r.r from 139.59.66.213 port 38963 ssh2 Dec 27 11:39:05 hostnameis sshd[17936]: Received disconnect from 139.59.66.213: 11: Bye Bye [preauth] Dec 27 11:40:37 hostnameis sshd[17966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.66.213 user=r.r Dec 27 11:40:39 hostnameis sshd[17966]: Failed password for r.r from 139.59.66.213 port 46569 ssh2 Dec 27 11:40:39 hostnameis sshd[17966]: Received disconnect from 139.59.66.213: 11: Bye Bye [preauth] Dec 27 11:41:07 hostnameis sshd[17968]: Invalid user siaperas from 139.59.66.213 Dec 27 11:41:07 hostnameis sshd[17968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.66.213 ........ ----------------------------------------------- https://www.blocklist.de/en/view.htm |
2019-12-28 00:41:04 |
| 93.39.116.254 | attackbotsspam | Dec 27 12:42:31 ws12vmsma01 sshd[12356]: Failed password for invalid user fairless from 93.39.116.254 port 47413 ssh2 Dec 27 12:50:49 ws12vmsma01 sshd[13601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93-39-116-254.ip75.fastwebnet.it user=uucp Dec 27 12:50:51 ws12vmsma01 sshd[13601]: Failed password for uucp from 93.39.116.254 port 45378 ssh2 ... |
2019-12-28 00:53:34 |
| 152.136.225.47 | attackbots | Repeated failed SSH attempt |
2019-12-28 00:37:13 |
| 121.9.212.36 | attackspam | SIP/5060 Probe, BF, Hack - |
2019-12-28 01:00:42 |
| 118.70.72.103 | attackspambots | Dec 27 16:49:59 ncomp sshd[26037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.72.103 user=root Dec 27 16:50:01 ncomp sshd[26037]: Failed password for root from 118.70.72.103 port 40276 ssh2 Dec 27 16:51:24 ncomp sshd[26084]: Invalid user elev from 118.70.72.103 |
2019-12-28 00:29:44 |