城市(city): Bogor
省份(region): West Java
国家(country): Indonesia
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.0.16.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34657
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.0.16.42. IN A
;; AUTHORITY SECTION:
. 598 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400
;; Query time: 77 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 08:03:06 CST 2022
;; MSG SIZE rcvd: 10442.16.0.139.in-addr.arpa domain name pointer ln-static-139-0-16-42.link.net.id.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
42.16.0.139.in-addr.arpa name = ln-static-139-0-16-42.link.net.id.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 203.193.184.35 | attackspam | port scan and connect, tcp 1433 (ms-sql-s) |
2019-10-20 16:50:05 |
| 138.197.89.212 | attackspambots | $f2bV_matches |
2019-10-20 16:26:23 |
| 187.0.211.99 | attack | Oct 19 20:33:38 kapalua sshd\[24297\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.0.211.99 user=root Oct 19 20:33:40 kapalua sshd\[24297\]: Failed password for root from 187.0.211.99 port 59233 ssh2 Oct 19 20:38:37 kapalua sshd\[24684\]: Invalid user bruwier from 187.0.211.99 Oct 19 20:38:37 kapalua sshd\[24684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.0.211.99 Oct 19 20:38:39 kapalua sshd\[24684\]: Failed password for invalid user bruwier from 187.0.211.99 port 50333 ssh2 |
2019-10-20 16:50:42 |
| 180.76.58.76 | attackbots | Tried sshing with brute force. |
2019-10-20 16:28:23 |
| 94.176.77.55 | attack | (Oct 20) LEN=40 TTL=244 ID=33325 DF TCP DPT=23 WINDOW=14600 SYN (Oct 20) LEN=40 TTL=244 ID=15122 DF TCP DPT=23 WINDOW=14600 SYN (Oct 20) LEN=40 TTL=244 ID=19442 DF TCP DPT=23 WINDOW=14600 SYN (Oct 20) LEN=40 TTL=244 ID=16842 DF TCP DPT=23 WINDOW=14600 SYN (Oct 20) LEN=40 TTL=244 ID=20403 DF TCP DPT=23 WINDOW=14600 SYN (Oct 20) LEN=40 TTL=244 ID=6296 DF TCP DPT=23 WINDOW=14600 SYN (Oct 19) LEN=40 TTL=244 ID=50071 DF TCP DPT=23 WINDOW=14600 SYN (Oct 19) LEN=40 TTL=244 ID=18812 DF TCP DPT=23 WINDOW=14600 SYN (Oct 19) LEN=40 TTL=244 ID=23251 DF TCP DPT=23 WINDOW=14600 SYN (Oct 19) LEN=40 TTL=244 ID=24073 DF TCP DPT=23 WINDOW=14600 SYN (Oct 19) LEN=40 TTL=244 ID=26413 DF TCP DPT=23 WINDOW=14600 SYN (Oct 19) LEN=40 TTL=244 ID=19546 DF TCP DPT=23 WINDOW=14600 SYN (Oct 19) LEN=40 TTL=244 ID=14633 DF TCP DPT=23 WINDOW=14600 SYN (Oct 19) LEN=40 TTL=244 ID=29593 DF TCP DPT=23 WINDOW=14600 SYN (Oct 19) LEN=40 TTL=244 ID=63404 DF TCP DPT=23 WINDOW=14600 S... |
2019-10-20 16:28:51 |
| 129.144.27.16 | attackspambots | Bruteforce on SSH Honeypot |
2019-10-20 16:34:55 |
| 132.232.74.106 | attackspambots | Oct 19 22:17:07 kapalua sshd\[1310\]: Invalid user 123 from 132.232.74.106 Oct 19 22:17:07 kapalua sshd\[1310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.74.106 Oct 19 22:17:09 kapalua sshd\[1310\]: Failed password for invalid user 123 from 132.232.74.106 port 45720 ssh2 Oct 19 22:22:43 kapalua sshd\[1780\]: Invalid user gjgj from 132.232.74.106 Oct 19 22:22:43 kapalua sshd\[1780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.74.106 |
2019-10-20 16:24:33 |
| 178.128.107.117 | attack | Oct 20 09:56:08 vps01 sshd[11303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.107.117 Oct 20 09:56:10 vps01 sshd[11303]: Failed password for invalid user 123joomla from 178.128.107.117 port 55726 ssh2 |
2019-10-20 16:42:37 |
| 39.108.172.75 | attackspam | goldgier-watches-purchase.com:80 39.108.172.75 - - \[20/Oct/2019:05:50:51 +0200\] "POST /xmlrpc.php HTTP/1.1" 301 469 "-" "Windows Live Writter" goldgier-watches-purchase.com 39.108.172.75 \[20/Oct/2019:05:50:55 +0200\] "POST /xmlrpc.php HTTP/1.1" 302 4131 "-" "Windows Live Writter" |
2019-10-20 16:39:13 |
| 106.12.93.12 | attack | Oct 20 06:25:22 meumeu sshd[7785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.93.12 Oct 20 06:25:24 meumeu sshd[7785]: Failed password for invalid user cisco from 106.12.93.12 port 53186 ssh2 Oct 20 06:30:19 meumeu sshd[8396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.93.12 ... |
2019-10-20 16:16:02 |
| 61.95.233.61 | attackbotsspam | Oct 20 13:46:57 areeb-Workstation sshd[9887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.95.233.61 Oct 20 13:46:59 areeb-Workstation sshd[9887]: Failed password for invalid user logger from 61.95.233.61 port 47042 ssh2 ... |
2019-10-20 16:17:55 |
| 58.21.173.178 | attackbots | (Oct 20) LEN=40 TTL=48 ID=35414 TCP DPT=8080 WINDOW=50560 SYN (Oct 19) LEN=40 TTL=48 ID=51060 TCP DPT=8080 WINDOW=50560 SYN (Oct 18) LEN=40 TTL=48 ID=31225 TCP DPT=8080 WINDOW=35776 SYN (Oct 18) LEN=40 TTL=48 ID=34464 TCP DPT=8080 WINDOW=50560 SYN (Oct 18) LEN=40 TTL=48 ID=25638 TCP DPT=8080 WINDOW=50560 SYN (Oct 17) LEN=40 TTL=48 ID=17478 TCP DPT=8080 WINDOW=35776 SYN (Oct 16) LEN=40 TTL=48 ID=5387 TCP DPT=8080 WINDOW=35776 SYN (Oct 15) LEN=40 TTL=48 ID=28657 TCP DPT=8080 WINDOW=35776 SYN (Oct 15) LEN=40 TTL=48 ID=23704 TCP DPT=8080 WINDOW=35776 SYN (Oct 14) LEN=40 TTL=48 ID=53658 TCP DPT=8080 WINDOW=35776 SYN (Oct 14) LEN=40 TTL=48 ID=59047 TCP DPT=8080 WINDOW=50560 SYN |
2019-10-20 16:46:27 |
| 177.158.34.177 | attackspambots | Automatic report - Port Scan Attack |
2019-10-20 16:51:03 |
| 198.55.96.100 | attackbotsspam | (From eric@talkwithcustomer.com) Hey, You have a website westsidechiroga.com, right? Of course you do. I am looking at your website now. It gets traffic every day – that you’re probably spending $2 / $4 / $10 or more a click to get. Not including all of the work you put into creating social media, videos, blog posts, emails, and so on. So you’re investing seriously in getting people to that site. But how’s it working? Great? Okay? Not so much? If that answer could be better, then it’s likely you’re putting a lot of time, effort, and money into an approach that’s not paying off like it should. Now… imagine doubling your lead conversion in just minutes… In fact, I’ll go even better. You could actually get up to 100X more conversions! I’m not making this up. As Chris Smith, best-selling author of The Conversion Code says: Speed is essential - there is a 100x decrease in Leads when a Lead is contacted within 14 minutes vs being contacted within 5 minutes. He’s backed up by a stu |
2019-10-20 16:49:20 |
| 91.74.234.154 | attackspambots | Oct 20 06:11:59 host sshd[56956]: Invalid user rakesh from 91.74.234.154 port 40166 Oct 20 06:11:59 host sshd[56956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.74.234.154 Oct 20 06:11:59 host sshd[56956]: Invalid user rakesh from 91.74.234.154 port 40166 Oct 20 06:12:01 host sshd[56956]: Failed password for invalid user rakesh from 91.74.234.154 port 40166 ssh2 ... |
2019-10-20 16:52:52 |