城市(city): unknown
省份(region): unknown
国家(country): Norway
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.117.163.213
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49118
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.117.163.213. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 05:49:32 CST 2025
;; MSG SIZE rcvd: 108
213.163.117.139.in-addr.arpa domain name pointer tietoevry-owned-address-139-117-163-x.hidden-host.tietoevry.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
213.163.117.139.in-addr.arpa name = tietoevry-owned-address-139-117-163-x.hidden-host.tietoevry.com.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 80.13.68.104 | attackbots | SSH invalid-user multiple login try |
2020-08-17 03:15:31 |
| 111.229.4.186 | attackbotsspam | 2020-08-16T12:15:08.283388abusebot.cloudsearch.cf sshd[11435]: Invalid user lvv from 111.229.4.186 port 59712 2020-08-16T12:15:08.288757abusebot.cloudsearch.cf sshd[11435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.4.186 2020-08-16T12:15:08.283388abusebot.cloudsearch.cf sshd[11435]: Invalid user lvv from 111.229.4.186 port 59712 2020-08-16T12:15:09.924539abusebot.cloudsearch.cf sshd[11435]: Failed password for invalid user lvv from 111.229.4.186 port 59712 ssh2 2020-08-16T12:20:26.048371abusebot.cloudsearch.cf sshd[11524]: Invalid user oracle from 111.229.4.186 port 54898 2020-08-16T12:20:26.053899abusebot.cloudsearch.cf sshd[11524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.4.186 2020-08-16T12:20:26.048371abusebot.cloudsearch.cf sshd[11524]: Invalid user oracle from 111.229.4.186 port 54898 2020-08-16T12:20:27.679496abusebot.cloudsearch.cf sshd[11524]: Failed password for invali ... |
2020-08-17 03:28:11 |
| 156.96.46.8 | attackbots | [2020-08-16 08:15:40] NOTICE[1185][C-00002c25] chan_sip.c: Call from '' (156.96.46.8:51265) to extension '01901146213724602' rejected because extension not found in context 'public'. [2020-08-16 08:15:40] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-16T08:15:40.423-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01901146213724602",SessionID="0x7f10c4086ce8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/156.96.46.8/51265",ACLName="no_extension_match" [2020-08-16 08:20:51] NOTICE[1185][C-00002c2b] chan_sip.c: Call from '' (156.96.46.8:59095) to extension '01801146213724602' rejected because extension not found in context 'public'. [2020-08-16 08:20:51] SECURITY[1203] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-08-16T08:20:51.380-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01801146213724602",SessionID="0x7f10c4086ce8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD ... |
2020-08-17 03:05:19 |
| 106.13.197.159 | attackspambots | 2020-08-16T17:15:46.016920amanda2.illicoweb.com sshd\[12734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.197.159 user=root 2020-08-16T17:15:48.188126amanda2.illicoweb.com sshd\[12734\]: Failed password for root from 106.13.197.159 port 46242 ssh2 2020-08-16T17:21:11.647760amanda2.illicoweb.com sshd\[12931\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.197.159 user=root 2020-08-16T17:21:13.433019amanda2.illicoweb.com sshd\[12931\]: Failed password for root from 106.13.197.159 port 37720 ssh2 2020-08-16T17:22:51.176588amanda2.illicoweb.com sshd\[13248\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.197.159 user=root ... |
2020-08-17 02:58:02 |
| 40.127.78.155 | attack | DATE:2020-08-16 14:20:52, IP:40.127.78.155, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc) |
2020-08-17 03:05:51 |
| 160.251.6.207 | attack | Lines containing failures of 160.251.6.207 Aug 16 14:18:45 mc postfix/smtpd[21585]: connect from v160-251-6-207.tqrl.static.cnode.io[160.251.6.207] Aug x@x Aug 16 14:18:45 mc postfix/smtpd[21585]: disconnect from v160-251-6-207.tqrl.static.cnode.io[160.251.6.207] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=160.251.6.207 |
2020-08-17 03:01:12 |
| 93.61.134.60 | attackspambots | Aug 16 17:07:24 vps333114 sshd[4995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93-61-134-60.ip146.fastwebnet.it Aug 16 17:07:26 vps333114 sshd[4995]: Failed password for invalid user dcb from 93.61.134.60 port 44178 ssh2 ... |
2020-08-17 03:01:43 |
| 124.156.114.53 | attackspam | Failed password for invalid user joseph from 124.156.114.53 port 52216 ssh2 |
2020-08-17 03:16:45 |
| 161.35.158.247 | attackbotsspam | Aug 16 20:01:44 hell sshd[31817]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.158.247 Aug 16 20:01:46 hell sshd[31817]: Failed password for invalid user vbox from 161.35.158.247 port 46246 ssh2 ... |
2020-08-17 03:07:22 |
| 193.27.229.189 | attack | firewall-block, port(s): 29993/tcp |
2020-08-17 03:33:01 |
| 83.28.76.43 | attackspambots | Automatic report - Port Scan Attack |
2020-08-17 03:23:54 |
| 106.13.232.193 | attackbotsspam | SSH authentication failure x 6 reported by Fail2Ban ... |
2020-08-17 03:13:26 |
| 106.13.227.104 | attackbotsspam | Aug 16 19:24:39 rotator sshd\[2261\]: Invalid user lynx from 106.13.227.104Aug 16 19:24:41 rotator sshd\[2261\]: Failed password for invalid user lynx from 106.13.227.104 port 37342 ssh2Aug 16 19:26:32 rotator sshd\[3063\]: Invalid user user from 106.13.227.104Aug 16 19:26:34 rotator sshd\[3063\]: Failed password for invalid user user from 106.13.227.104 port 57260 ssh2Aug 16 19:28:18 rotator sshd\[3125\]: Invalid user emmanuel from 106.13.227.104Aug 16 19:28:20 rotator sshd\[3125\]: Failed password for invalid user emmanuel from 106.13.227.104 port 48936 ssh2 ... |
2020-08-17 03:13:42 |
| 123.206.104.162 | attack | Aug 16 17:01:07 ns382633 sshd\[14793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.104.162 user=root Aug 16 17:01:10 ns382633 sshd\[14793\]: Failed password for root from 123.206.104.162 port 53014 ssh2 Aug 16 17:07:13 ns382633 sshd\[16012\]: Invalid user ts from 123.206.104.162 port 54668 Aug 16 17:07:13 ns382633 sshd\[16012\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.104.162 Aug 16 17:07:16 ns382633 sshd\[16012\]: Failed password for invalid user ts from 123.206.104.162 port 54668 ssh2 |
2020-08-17 03:30:13 |
| 14.33.45.230 | attack | Aug 16 08:20:19 Tower sshd[16353]: Connection from 14.33.45.230 port 40302 on 192.168.10.220 port 22 rdomain "" Aug 16 08:20:21 Tower sshd[16353]: Invalid user provider from 14.33.45.230 port 40302 Aug 16 08:20:21 Tower sshd[16353]: error: Could not get shadow information for NOUSER Aug 16 08:20:21 Tower sshd[16353]: Failed password for invalid user provider from 14.33.45.230 port 40302 ssh2 Aug 16 08:20:21 Tower sshd[16353]: Received disconnect from 14.33.45.230 port 40302:11: Bye Bye [preauth] Aug 16 08:20:21 Tower sshd[16353]: Disconnected from invalid user provider 14.33.45.230 port 40302 [preauth] |
2020-08-17 03:12:28 |