城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.42.146.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50293
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.42.146.213. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400
;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 12:51:06 CST 2025
;; MSG SIZE rcvd: 107
Host 213.146.42.138.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 213.146.42.138.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 217.182.192.118 | attack | B: /wp-login.php attack |
2019-11-17 00:34:57 |
| 159.89.154.19 | attackbots | Nov 16 16:18:26 localhost sshd\[88553\]: Invalid user mceachern from 159.89.154.19 port 38808 Nov 16 16:18:26 localhost sshd\[88553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.154.19 Nov 16 16:18:28 localhost sshd\[88553\]: Failed password for invalid user mceachern from 159.89.154.19 port 38808 ssh2 Nov 16 16:22:18 localhost sshd\[88650\]: Invalid user wisconsin123 from 159.89.154.19 port 46820 Nov 16 16:22:18 localhost sshd\[88650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.154.19 ... |
2019-11-17 00:38:29 |
| 178.159.249.66 | attack | $f2bV_matches |
2019-11-17 00:11:37 |
| 95.85.80.38 | attackspambots | B: Magento admin pass test (wrong country) |
2019-11-17 00:37:15 |
| 80.211.137.52 | attackspam | Nov 16 11:24:39 TORMINT sshd\[9165\]: Invalid user golfnjoy from 80.211.137.52 Nov 16 11:24:39 TORMINT sshd\[9165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.137.52 Nov 16 11:24:42 TORMINT sshd\[9165\]: Failed password for invalid user golfnjoy from 80.211.137.52 port 36920 ssh2 ... |
2019-11-17 00:29:02 |
| 63.80.184.118 | attackspambots | Nov 16 15:51:05 |
2019-11-17 00:54:04 |
| 46.38.144.57 | attackbotsspam | Nov 16 17:34:28 relay postfix/smtpd\[27929\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 16 17:34:45 relay postfix/smtpd\[29097\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 16 17:35:04 relay postfix/smtpd\[25659\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 16 17:35:23 relay postfix/smtpd\[18927\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 16 17:35:40 relay postfix/smtpd\[20049\]: warning: unknown\[46.38.144.57\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-11-17 00:51:16 |
| 185.143.223.133 | attackspambots | 185.143.223.133 was recorded 73 times by 18 hosts attempting to connect to the following ports: 20039,51974,41038,37475,59,43433,922,55755,39,42912,780,830,63233,44488,805,36465,62829,40402,46469,55522,53333,818,53031,20116,25254,883,1201,39394,5014,1103,42834,24245,37543,9349,54434,3459,89,41362,40385,64354,58549,53532,51511,19198,42429,47172,3893,22922,41819,63883,59216,2901,9449,5881,992,3213,766,320,57578,46701,20207,55916,41213,85,27177,1333,39091,50502,34518,42428,69,36061. Incident counter (4h, 24h, all-time): 73, 379, 1172 |
2019-11-17 00:30:18 |
| 91.193.102.106 | attack | Nov 16 17:36:54 sd-53420 sshd\[7075\]: User backup from 91.193.102.106 not allowed because none of user's groups are listed in AllowGroups Nov 16 17:36:54 sd-53420 sshd\[7075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.193.102.106 user=backup Nov 16 17:36:56 sd-53420 sshd\[7075\]: Failed password for invalid user backup from 91.193.102.106 port 48193 ssh2 Nov 16 17:40:54 sd-53420 sshd\[8284\]: Invalid user vbox from 91.193.102.106 Nov 16 17:40:54 sd-53420 sshd\[8284\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.193.102.106 ... |
2019-11-17 00:48:09 |
| 103.105.179.189 | attackbots | 23/tcp [2019-11-16]1pkt |
2019-11-17 00:39:38 |
| 212.107.248.56 | attackbotsspam | 1433/tcp [2019-11-16]1pkt |
2019-11-17 00:49:49 |
| 160.238.236.33 | attack | 26/tcp [2019-11-16]1pkt |
2019-11-17 00:17:01 |
| 45.248.133.51 | attack | 61393/tcp [2019-11-16]1pkt |
2019-11-17 00:16:11 |
| 111.93.242.226 | attackbots | 2019-11-16T15:13:05.092420shield sshd\[17409\]: Invalid user ubuntu from 111.93.242.226 port 14833 2019-11-16T15:13:05.098258shield sshd\[17409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.242.226 2019-11-16T15:13:07.536398shield sshd\[17409\]: Failed password for invalid user ubuntu from 111.93.242.226 port 14833 ssh2 2019-11-16T15:13:15.259193shield sshd\[17450\]: Invalid user ubuntu from 111.93.242.226 port 7641 2019-11-16T15:13:15.264880shield sshd\[17450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.242.226 |
2019-11-17 00:24:14 |
| 106.255.84.110 | attackspam | Triggered by Fail2Ban at Vostok web server |
2019-11-17 00:36:49 |