城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.42.49.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48106
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.42.49.102. IN A
;; AUTHORITY SECTION:
. 598 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022031700 1800 900 604800 86400
;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 17 15:30:40 CST 2022
;; MSG SIZE rcvd: 106Host 102.49.42.138.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 102.49.42.138.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 85.209.0.135 | attack | port scan and connect, tcp 3128 (squid-http) |
2020-09-20 14:26:31 |
| 124.244.82.52 | attackbots | Sep 20 01:03:45 ssh2 sshd[42285]: User root from 124244082052.ctinets.com not allowed because not listed in AllowUsers Sep 20 01:03:45 ssh2 sshd[42285]: Failed password for invalid user root from 124.244.82.52 port 32860 ssh2 Sep 20 01:03:45 ssh2 sshd[42285]: Connection closed by invalid user root 124.244.82.52 port 32860 [preauth] ... |
2020-09-20 15:00:47 |
| 92.154.95.236 | attackbotsspam | Port scan on 85 port(s) from 92.154.95.236 detected: 7 (12:29:52) 13 (13:01:32) 42 (10:44:24) 83 (06:04:05) 106 (01:31:43) 163 (21:31:32) 443 (19:07:47) 458 (10:53:38) 464 (08:00:33) 514 (04:21:21) 720 (17:58:43) 898 (11:10:34) 990 (07:25:09) 1051 (07:10:03) 1057 (09:37:35) 1074 (02:32:36) 1091 (14:40:05) 1096 (01:43:07) 1113 (05:31:11) 1151 (22:50:30) 1247 (06:15:21) 1719 (12:58:03) 1840 (03:34:47) 1900 (21:06:45) 1999 (00:01:51) 2003 (03:26:53) 2021 (11:43:31) 2042 (17:17:43) 2144 (16:31:05) 2196 (17:22:55) 2200 (21:07:57) 2251 (09:37:30) 2638 (03:37:27) 2920 (12:06:18) 3517 (10:52:46) 3580 (10:07:51) 3766 (05:17:55) 3945 (03:43:09) 4000 (09:56:45) 4321 (22:45:48) 4506 (17:36:53) 5100 (10:45:59) 5200 (15:26:44) 5550 (07:24:22) 5555 (21:03:32) 5601 (23:16:32) 5631 (14:36:48) 5800 (02:47:58) 5815 (16:45:43) 5862 (07:09:38) 5960 (08:39:47) 5989 (19:14:43) 6002 (18:29:48) 6106 (03:26:32) 7001 (21:05:19) 7100 (13:20:26) 7496 (23:26:43) 8082 (12:28:29) 8100 (22:33:10) 9594 (15:18:51) |
2020-09-20 14:26:04 |
| 118.72.87.239 | attack | Automatic report - Port Scan Attack |
2020-09-20 14:49:39 |
| 37.115.48.74 | attackbotsspam | Brute-force attempt banned |
2020-09-20 14:47:46 |
| 113.190.82.110 | attack | 1600534899 - 09/19/2020 19:01:39 Host: 113.190.82.110/113.190.82.110 Port: 445 TCP Blocked |
2020-09-20 14:27:10 |
| 218.156.30.196 | attack | (sshd) Failed SSH login from 218.156.30.196 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 19 19:01:20 rainbow sshd[3261489]: Invalid user admin from 218.156.30.196 port 37579 Sep 19 19:01:20 rainbow sshd[3261489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.156.30.196 Sep 19 19:01:21 rainbow sshd[3261504]: Invalid user admin from 218.156.30.196 port 38062 Sep 19 19:01:21 rainbow sshd[3261504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.156.30.196 Sep 19 19:01:22 rainbow sshd[3261489]: Failed password for invalid user admin from 218.156.30.196 port 37579 ssh2 |
2020-09-20 14:48:36 |
| 201.208.1.34 | attackspam | Sep 19 03:01:48 sip sshd[19632]: Failed password for root from 201.208.1.34 port 42108 ssh2 Sep 19 19:01:07 sip sshd[17147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.208.1.34 Sep 19 19:01:09 sip sshd[17147]: Failed password for invalid user pi from 201.208.1.34 port 57775 ssh2 |
2020-09-20 14:48:58 |
| 192.42.116.17 | attack | 2020-09-20T05:46[Censored Hostname] sshd[4273]: Failed password for root from 192.42.116.17 port 52734 ssh2 2020-09-20T05:46[Censored Hostname] sshd[4273]: Failed password for root from 192.42.116.17 port 52734 ssh2 2020-09-20T05:46[Censored Hostname] sshd[4273]: Failed password for root from 192.42.116.17 port 52734 ssh2[...] |
2020-09-20 14:59:57 |
| 123.231.107.136 | attackspam | 123.231.107.136 - - \[19/Sep/2020:19:58:43 +0300\] "POST /xmlrpc.php HTTP/1.1" 200 428 "-" "Mozilla/4.0 \(compatible\; MSIE 6.0\; Windows NT 5.0\)" "-" 123.231.107.136 - - \[19/Sep/2020:20:01:20 +0300\] "POST /xmlrpc.php HTTP/1.1" 200 428 "-" "Mozilla/4.0 \(compatible\; MSIE 6.0\; Windows NT 5.0\)" "-" ... |
2020-09-20 14:51:21 |
| 89.144.47.251 | attackspambots | [HOST2] Port Scan detected |
2020-09-20 15:01:38 |
| 185.134.232.118 | attack | Unauthorized connection attempt from IP address 185.134.232.118 on Port 445(SMB) |
2020-09-20 14:30:31 |
| 159.203.188.175 | attackspambots | Sep 19 22:26:46 IngegnereFirenze sshd[30261]: User root from 159.203.188.175 not allowed because not listed in AllowUsers ... |
2020-09-20 14:29:32 |
| 191.248.197.74 | attackspam | Unauthorized connection attempt from IP address 191.248.197.74 on Port 445(SMB) |
2020-09-20 14:52:49 |
| 210.245.110.9 | attackbots | 2020-09-20T07:50:02.188402vps773228.ovh.net sshd[6170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.245.110.9 user=root 2020-09-20T07:50:04.304718vps773228.ovh.net sshd[6170]: Failed password for root from 210.245.110.9 port 57359 ssh2 2020-09-20T08:00:30.084199vps773228.ovh.net sshd[6246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.245.110.9 user=root 2020-09-20T08:00:31.412496vps773228.ovh.net sshd[6246]: Failed password for root from 210.245.110.9 port 52075 ssh2 2020-09-20T08:05:52.507511vps773228.ovh.net sshd[6314]: Invalid user guest3 from 210.245.110.9 port 63661 ... |
2020-09-20 14:43:40 |