城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.140.107.164
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62921
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.140.107.164. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022200 1800 900 604800 86400
;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 22 14:51:05 CST 2025
;; MSG SIZE rcvd: 108Host 164.107.140.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 164.107.140.139.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 130.61.122.5 | attackspam | Nov 10 10:04:24 MK-Soft-VM6 sshd[5448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.122.5 Nov 10 10:04:26 MK-Soft-VM6 sshd[5448]: Failed password for invalid user test from 130.61.122.5 port 39440 ssh2 ... |
2019-11-10 19:52:26 |
| 45.122.223.61 | attackspambots | fail2ban honeypot |
2019-11-10 20:27:17 |
| 104.245.144.42 | attackbotsspam | (From doretha.gerard@msn.com) Want more visitors for your website? Receive hundreds of people who are ready to buy sent directly to your website. Boost your profits fast. Start seeing results in as little as 48 hours. For additional information reply to: michael4621gre@gmail.com |
2019-11-10 20:05:38 |
| 24.64.76.58 | attackspam | Unauthorised access (Nov 10) SRC=24.64.76.58 LEN=40 TTL=52 ID=61621 TCP DPT=8080 WINDOW=46551 SYN Unauthorised access (Nov 6) SRC=24.64.76.58 LEN=40 TTL=52 ID=21164 TCP DPT=8080 WINDOW=46551 SYN |
2019-11-10 20:00:39 |
| 94.191.20.179 | attackbots | Nov 10 13:03:44 nextcloud sshd\[2956\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.20.179 user=root Nov 10 13:03:46 nextcloud sshd\[2956\]: Failed password for root from 94.191.20.179 port 54766 ssh2 Nov 10 13:09:08 nextcloud sshd\[10259\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.20.179 user=root ... |
2019-11-10 20:15:18 |
| 185.42.214.108 | attackbots | Nov 10 06:24:15 system,error,critical: login failure for user admin from 185.42.214.108 via telnet Nov 10 06:24:16 system,error,critical: login failure for user guest from 185.42.214.108 via telnet Nov 10 06:24:18 system,error,critical: login failure for user root from 185.42.214.108 via telnet Nov 10 06:24:23 system,error,critical: login failure for user admin from 185.42.214.108 via telnet Nov 10 06:24:25 system,error,critical: login failure for user guest from 185.42.214.108 via telnet Nov 10 06:24:27 system,error,critical: login failure for user root from 185.42.214.108 via telnet Nov 10 06:24:32 system,error,critical: login failure for user Administrator from 185.42.214.108 via telnet Nov 10 06:24:34 system,error,critical: login failure for user support from 185.42.214.108 via telnet Nov 10 06:24:36 system,error,critical: login failure for user default from 185.42.214.108 via telnet Nov 10 06:24:40 system,error,critical: login failure for user root from 185.42.214.108 via telnet |
2019-11-10 20:10:41 |
| 185.209.0.91 | attackbotsspam | 11/10/2019-13:03:44.474664 185.209.0.91 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-11-10 20:12:06 |
| 204.14.239.54 | attack | port scan and connect, tcp 80 (http) |
2019-11-10 20:22:55 |
| 78.100.18.81 | attackspambots | 2019-11-10T04:31:02.426392WS-Zach sshd[2305621]: User root from 78.100.18.81 not allowed because none of user's groups are listed in AllowGroups 2019-11-10T04:31:02.437149WS-Zach sshd[2305621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.100.18.81 user=root 2019-11-10T04:31:02.426392WS-Zach sshd[2305621]: User root from 78.100.18.81 not allowed because none of user's groups are listed in AllowGroups 2019-11-10T04:31:05.130376WS-Zach sshd[2305621]: Failed password for invalid user root from 78.100.18.81 port 56885 ssh2 2019-11-10T04:50:34.178676WS-Zach sshd[2307866]: User root from 78.100.18.81 not allowed because none of user's groups are listed in AllowGroups ... |
2019-11-10 20:28:41 |
| 187.73.1.246 | attackbotsspam | Automatic report - Port Scan Attack |
2019-11-10 20:24:22 |
| 45.40.198.41 | attackbotsspam | 2019-11-10T03:24:11.914392mizuno.rwx.ovh sshd[3382305]: Connection from 45.40.198.41 port 48257 on 78.46.61.178 port 22 rdomain "" 2019-11-10T03:24:14.134343mizuno.rwx.ovh sshd[3382305]: Invalid user debian-tor from 45.40.198.41 port 48257 2019-11-10T03:24:14.142890mizuno.rwx.ovh sshd[3382305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.40.198.41 2019-11-10T03:24:11.914392mizuno.rwx.ovh sshd[3382305]: Connection from 45.40.198.41 port 48257 on 78.46.61.178 port 22 rdomain "" 2019-11-10T03:24:14.134343mizuno.rwx.ovh sshd[3382305]: Invalid user debian-tor from 45.40.198.41 port 48257 2019-11-10T03:24:16.174533mizuno.rwx.ovh sshd[3382305]: Failed password for invalid user debian-tor from 45.40.198.41 port 48257 ssh2 ... |
2019-11-10 20:22:28 |
| 183.199.220.179 | attackspam | Automatic report - Port Scan Attack |
2019-11-10 20:07:01 |
| 128.199.223.127 | attackspambots | 128.199.223.127 - - \[10/Nov/2019:07:24:56 +0100\] "POST /wp-login.php HTTP/1.0" 200 5731 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 128.199.223.127 - - \[10/Nov/2019:07:24:59 +0100\] "POST /wp-login.php HTTP/1.0" 200 5598 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 128.199.223.127 - - \[10/Nov/2019:07:25:02 +0100\] "POST /wp-login.php HTTP/1.0" 200 5594 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-11-10 19:56:47 |
| 167.172.89.110 | attack | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/167.172.89.110/ US - 1H : (183) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN202109 IP : 167.172.89.110 CIDR : 167.172.0.0/16 PREFIX COUNT : 1 UNIQUE IP COUNT : 65536 ATTACKS DETECTED ASN202109 : 1H - 1 3H - 1 6H - 2 12H - 4 24H - 4 DateTime : 2019-11-10 10:07:21 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN - data recovery |
2019-11-10 20:28:58 |
| 154.86.7.7 | attackspam | Fail2Ban Ban Triggered |
2019-11-10 20:04:26 |