城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.42.153.81
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 678
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.42.153.81. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012201 1800 900 604800 86400
;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 12:09:34 CST 2025
;; MSG SIZE rcvd: 106Host 81.153.42.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 81.153.42.139.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 178.128.158.199 | attack | Jul 31 17:44:50 ghostname-secure sshd[4775]: Failed password for invalid user wangyi from 178.128.158.199 port 37040 ssh2 Jul 31 17:44:50 ghostname-secure sshd[4775]: Received disconnect from 178.128.158.199: 11: Bye Bye [preauth] Jul 31 17:50:15 ghostname-secure sshd[4821]: Failed password for invalid user bj from 178.128.158.199 port 48076 ssh2 Jul 31 17:50:15 ghostname-secure sshd[4821]: Received disconnect from 178.128.158.199: 11: Bye Bye [preauth] Jul 31 17:54:25 ghostname-secure sshd[4870]: Failed password for daemon from 178.128.158.199 port 44886 ssh2 Jul 31 17:54:25 ghostname-secure sshd[4870]: Received disconnect from 178.128.158.199: 11: Bye Bye [preauth] Jul 31 17:58:35 ghostname-secure sshd[4914]: Failed password for invalid user ct from 178.128.158.199 port 41918 ssh2 Jul 31 17:58:35 ghostname-secure sshd[4914]: Received disconnect from 178.128.158.199: 11: Bye Bye [preauth] Jul 31 18:02:44 ghostname-secure sshd[4936]: Failed password for invalid user web........ ------------------------------- |
2019-08-01 05:23:29 |
| 218.5.244.218 | attack | Jun 28 15:47:05 dallas01 sshd[7573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.5.244.218 Jun 28 15:47:07 dallas01 sshd[7573]: Failed password for invalid user unreal from 218.5.244.218 port 32215 ssh2 Jun 28 15:48:33 dallas01 sshd[7682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.5.244.218 Jun 28 15:48:35 dallas01 sshd[7682]: Failed password for invalid user pk from 218.5.244.218 port 38614 ssh2 |
2019-08-01 06:04:14 |
| 128.199.212.82 | attackspam | Jul 31 23:59:42 yabzik sshd[5191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.212.82 Jul 31 23:59:43 yabzik sshd[5191]: Failed password for invalid user magnifik from 128.199.212.82 port 60245 ssh2 Aug 1 00:04:46 yabzik sshd[6859]: Failed password for daemon from 128.199.212.82 port 58131 ssh2 |
2019-08-01 05:19:04 |
| 210.92.91.208 | attack | Jul 31 17:40:07 TORMINT sshd\[27270\]: Invalid user ghost from 210.92.91.208 Jul 31 17:40:07 TORMINT sshd\[27270\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.92.91.208 Jul 31 17:40:09 TORMINT sshd\[27270\]: Failed password for invalid user ghost from 210.92.91.208 port 47864 ssh2 ... |
2019-08-01 06:06:35 |
| 73.59.165.164 | attack | Jul 31 17:07:28 xtremcommunity sshd\[23269\]: Invalid user carl from 73.59.165.164 port 43016 Jul 31 17:07:28 xtremcommunity sshd\[23269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.59.165.164 Jul 31 17:07:30 xtremcommunity sshd\[23269\]: Failed password for invalid user carl from 73.59.165.164 port 43016 ssh2 Jul 31 17:12:08 xtremcommunity sshd\[32486\]: Invalid user csgoserverawp from 73.59.165.164 port 39386 Jul 31 17:12:08 xtremcommunity sshd\[32486\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.59.165.164 ... |
2019-08-01 05:38:50 |
| 36.69.109.51 | attackspambots | Jul 31 20:26:09 server658 sshd[1256]: Did not receive identification string from 36.69.109.51 Jul 31 20:27:33 server658 sshd[1279]: Invalid user thostname0nich from 36.69.109.51 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=36.69.109.51 |
2019-08-01 06:05:13 |
| 115.76.79.217 | attack | Automatic report - Port Scan Attack |
2019-08-01 05:21:58 |
| 31.163.186.28 | attackspambots | Jul 31 08:59:24 localhost kernel: [15822158.142718] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=31.163.186.28 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=39742 PROTO=TCP SPT=27311 DPT=37215 WINDOW=29111 RES=0x00 SYN URGP=0 Jul 31 08:59:24 localhost kernel: [15822158.142743] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=31.163.186.28 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=39742 PROTO=TCP SPT=27311 DPT=37215 SEQ=758669438 ACK=0 WINDOW=29111 RES=0x00 SYN URGP=0 Jul 31 14:46:47 localhost kernel: [15843001.079903] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=31.163.186.28 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=46682 PROTO=TCP SPT=27311 DPT=37215 WINDOW=29111 RES=0x00 SYN URGP=0 Jul 31 14:46:47 localhost kernel: [15843001.079931] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=31.163.186.28 DST=[mungedIP2] LEN=40 TOS=0x0 |
2019-08-01 05:38:01 |
| 58.250.192.32 | attackbotsspam | Jul 29 13:06:34 XXX sshd[2461]: User r.r from 58.250.192.32 not allowed because none of user's groups are listed in AllowGroups Jul 29 13:06:34 XXX sshd[2461]: Received disconnect from 58.250.192.32: 11: Bye Bye [preauth] Jul 29 13:06:35 XXX sshd[2462]: User r.r from 58.250.192.32 not allowed because none of user's groups are listed in AllowGroups Jul 29 13:06:35 XXX sshd[2462]: Received disconnect from 58.250.192.32: 11: Bye Bye [preauth] Jul 29 13:06:37 XXX sshd[2465]: Invalid user teonsean from 58.250.192.32 Jul 29 13:06:38 XXX sshd[2465]: Received disconnect from 58.250.192.32: 11: Bye Bye [preauth] Jul 29 13:06:38 XXX sshd[2467]: Invalid user teonsean from 58.250.192.32 Jul 29 13:06:38 XXX sshd[2467]: Received disconnect from 58.250.192.32: 11: Bye Bye [preauth] Jul 29 13:06:41 XXX sshd[2483]: Invalid user moodog from 58.250.192.32 Jul 29 13:06:41 XXX sshd[2483]: Received disconnect from 58.250.192.32: 11: Bye Bye [preauth] Jul 29 13:06:41 XXX sshd[2485]: Invalid u........ ------------------------------- |
2019-08-01 05:37:38 |
| 78.137.254.41 | attackspambots | Automatic report - Port Scan Attack |
2019-08-01 05:52:38 |
| 104.140.188.2 | attackspam | Portscan or hack attempt detected by psad/fwsnort |
2019-08-01 05:34:51 |
| 40.76.1.138 | attackspam | SSH Brute-Force reported by Fail2Ban |
2019-08-01 05:50:44 |
| 177.99.197.111 | attackbots | Jun 24 23:09:41 server sshd\[122350\]: Invalid user tina from 177.99.197.111 Jun 24 23:09:41 server sshd\[122350\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.99.197.111 Jun 24 23:09:43 server sshd\[122350\]: Failed password for invalid user tina from 177.99.197.111 port 45607 ssh2 ... |
2019-08-01 05:37:21 |
| 220.94.205.218 | attackbotsspam | SSH Brute-Forcing (ownc) |
2019-08-01 05:28:05 |
| 216.245.192.242 | attackbotsspam | k+ssh-bruteforce |
2019-08-01 05:56:54 |