城市(city): unknown
省份(region): unknown
国家(country): Finland
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.249.64.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24222
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.249.64.52. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022000 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 18:46:27 CST 2025
;; MSG SIZE rcvd: 106
Host 52.64.249.138.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 52.64.249.138.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 174.44.140.83 | attackspam | Automatic report - Port Scan Attack |
2019-09-08 14:49:24 |
| 115.192.254.207 | attackspambots | Unauthorized SSH login attempts |
2019-09-08 15:23:18 |
| 113.255.43.26 | attackspam | Unauthorised access (Sep 8) SRC=113.255.43.26 LEN=40 TTL=54 ID=35050 TCP DPT=23 WINDOW=37760 SYN |
2019-09-08 14:48:26 |
| 140.207.114.222 | attackspam | Sep 8 05:40:04 plex sshd[7339]: Invalid user qwe@123 from 140.207.114.222 port 28519 |
2019-09-08 14:44:04 |
| 157.230.204.252 | attackspambots | Sep 8 07:10:35 dedicated sshd[18318]: Invalid user 123321 from 157.230.204.252 port 38690 |
2019-09-08 15:08:44 |
| 31.163.141.43 | attackspambots | port scan and connect, tcp 23 (telnet) |
2019-09-08 14:51:59 |
| 206.189.30.229 | attackbotsspam | Automatic report - Banned IP Access |
2019-09-08 15:20:32 |
| 165.227.60.103 | attackspam | Sep 8 08:15:00 host sshd\[47764\]: Invalid user mc3 from 165.227.60.103 port 47808 Sep 8 08:15:00 host sshd\[47764\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.60.103 ... |
2019-09-08 14:32:12 |
| 139.199.164.21 | attackspam | Sep 7 12:57:21 hcbb sshd\[9710\]: Invalid user vserver from 139.199.164.21 Sep 7 12:57:21 hcbb sshd\[9710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.164.21 Sep 7 12:57:23 hcbb sshd\[9710\]: Failed password for invalid user vserver from 139.199.164.21 port 34354 ssh2 Sep 7 12:58:58 hcbb sshd\[9818\]: Invalid user P@ssw0rd123 from 139.199.164.21 Sep 7 12:58:58 hcbb sshd\[9818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.164.21 |
2019-09-08 14:36:58 |
| 110.138.114.177 | attack | Sep 7 23:20:35 server2101 sshd[14016]: reveeclipse mapping checking getaddrinfo for 177.subnet110-138-114.speedy.telkom.net.id [110.138.114.177] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 7 23:20:35 server2101 sshd[14016]: Invalid user test1 from 110.138.114.177 Sep 7 23:20:35 server2101 sshd[14016]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.138.114.177 Sep 7 23:20:37 server2101 sshd[14016]: Failed password for invalid user test1 from 110.138.114.177 port 60408 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=110.138.114.177 |
2019-09-08 14:37:29 |
| 125.42.33.53 | attack | DATE:2019-09-07 23:33:04, IP:125.42.33.53, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc-bis) |
2019-09-08 15:26:17 |
| 31.211.65.202 | attackbotsspam | " " |
2019-09-08 14:56:37 |
| 106.12.206.70 | attackspambots | Sep 8 08:54:20 s64-1 sshd[8690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.206.70 Sep 8 08:54:22 s64-1 sshd[8690]: Failed password for invalid user advagrant from 106.12.206.70 port 36914 ssh2 Sep 8 09:00:53 s64-1 sshd[8766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.206.70 ... |
2019-09-08 15:05:08 |
| 70.54.203.67 | attackbots | Sep 8 06:46:46 taivassalofi sshd[48902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.54.203.67 Sep 8 06:46:48 taivassalofi sshd[48902]: Failed password for invalid user 1234 from 70.54.203.67 port 54427 ssh2 ... |
2019-09-08 15:03:20 |
| 159.203.198.34 | attack | Sep 8 08:18:35 areeb-Workstation sshd[24113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.198.34 Sep 8 08:18:38 areeb-Workstation sshd[24113]: Failed password for invalid user deployer from 159.203.198.34 port 57551 ssh2 ... |
2019-09-08 15:18:27 |