城市(city): Freiberg
省份(region): Saxony
国家(country): Germany
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.20.226.97
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11487
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.20.226.97. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019061301 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Jun 14 02:46:54 CST 2019
;; MSG SIZE rcvd: 117
Host 97.226.20.139.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 97.226.20.139.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 13.68.194.35 | attackspam | proto=tcp . spt=50150 . dpt=3389 . src=13.68.194.35 . dst=xx.xx.4.1 . (listed on rbldns-ru) (32) |
2019-06-23 13:27:32 |
| 94.176.76.230 | attackspam | (Jun 23) LEN=40 TTL=244 ID=50068 DF TCP DPT=23 WINDOW=14600 SYN (Jun 23) LEN=40 TTL=244 ID=5027 DF TCP DPT=23 WINDOW=14600 SYN (Jun 23) LEN=40 TTL=244 ID=27829 DF TCP DPT=23 WINDOW=14600 SYN (Jun 22) LEN=40 TTL=244 ID=5358 DF TCP DPT=23 WINDOW=14600 SYN (Jun 22) LEN=40 TTL=244 ID=7561 DF TCP DPT=23 WINDOW=14600 SYN (Jun 22) LEN=40 TTL=244 ID=8651 DF TCP DPT=23 WINDOW=14600 SYN (Jun 22) LEN=40 TTL=244 ID=22480 DF TCP DPT=23 WINDOW=14600 SYN (Jun 22) LEN=40 TTL=244 ID=45239 DF TCP DPT=23 WINDOW=14600 SYN (Jun 22) LEN=40 TTL=244 ID=44605 DF TCP DPT=23 WINDOW=14600 SYN (Jun 22) LEN=40 TTL=244 ID=61580 DF TCP DPT=23 WINDOW=14600 SYN (Jun 22) LEN=40 TTL=244 ID=56463 DF TCP DPT=23 WINDOW=14600 SYN (Jun 21) LEN=40 TTL=244 ID=11269 DF TCP DPT=23 WINDOW=14600 SYN (Jun 21) LEN=40 TTL=244 ID=61785 DF TCP DPT=23 WINDOW=14600 SYN (Jun 21) LEN=40 TTL=244 ID=7175 DF TCP DPT=23 WINDOW=14600 SYN (Jun 21) LEN=40 TTL=244 ID=65298 DF TCP DPT=23 WINDOW=14600 SYN ... |
2019-06-23 12:56:24 |
| 177.184.13.37 | attack | fail2ban honeypot |
2019-06-23 12:58:02 |
| 61.84.33.162 | attackbots | 81/tcp [2019-06-22]1pkt |
2019-06-23 13:17:31 |
| 177.69.44.193 | attackbots | Jun 23 04:37:02 rpi sshd\[6420\]: Invalid user ghost from 177.69.44.193 port 39747 Jun 23 04:37:02 rpi sshd\[6420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.69.44.193 Jun 23 04:37:04 rpi sshd\[6420\]: Failed password for invalid user ghost from 177.69.44.193 port 39747 ssh2 |
2019-06-23 12:50:17 |
| 159.203.42.75 | attackbots | ports scanning |
2019-06-23 13:42:53 |
| 182.148.114.139 | attack | SSH Brute-Force attacks |
2019-06-23 13:07:35 |
| 177.103.220.193 | attack | proto=tcp . spt=43986 . dpt=25 . (listed on Blocklist de Jun 22) (40) |
2019-06-23 13:04:43 |
| 222.188.98.45 | attackspambots | 20 attempts against mh-ssh on light.magehost.pro |
2019-06-23 13:02:58 |
| 89.132.191.139 | attackbotsspam | SSH Brute Force |
2019-06-23 13:07:08 |
| 107.170.199.11 | attackspambots | 23.06.2019 04:32:28 Connection to port 389 blocked by firewall |
2019-06-23 12:49:40 |
| 51.68.122.216 | attackspambots | Jun 23 07:09:06 mail sshd\[17859\]: Invalid user ftptest from 51.68.122.216 port 51300 Jun 23 07:09:06 mail sshd\[17859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.122.216 Jun 23 07:09:09 mail sshd\[17859\]: Failed password for invalid user ftptest from 51.68.122.216 port 51300 ssh2 Jun 23 07:10:19 mail sshd\[18058\]: Invalid user test from 51.68.122.216 port 36954 Jun 23 07:10:19 mail sshd\[18058\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.122.216 |
2019-06-23 13:25:54 |
| 60.29.241.2 | attack | Jun 23 02:07:24 tux-35-217 sshd\[8185\]: Invalid user marek from 60.29.241.2 port 12618 Jun 23 02:07:24 tux-35-217 sshd\[8185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.29.241.2 Jun 23 02:07:26 tux-35-217 sshd\[8185\]: Failed password for invalid user marek from 60.29.241.2 port 12618 ssh2 Jun 23 02:13:31 tux-35-217 sshd\[8254\]: Invalid user rot from 60.29.241.2 port 57063 Jun 23 02:13:31 tux-35-217 sshd\[8254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.29.241.2 ... |
2019-06-23 12:57:20 |
| 187.120.136.200 | attackbotsspam | failed_logins |
2019-06-23 12:46:47 |
| 185.176.26.61 | attack | 3401/tcp 33778/tcp 5555/tcp... [2019-04-23/06-22]6959pkt,3117pt.(tcp) |
2019-06-23 12:53:11 |