城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.56.64.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 133
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.56.64.49. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021100 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 00:05:49 CST 2025
;; MSG SIZE rcvd: 105Host 49.64.56.139.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 49.64.56.139.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 113.181.19.150 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 14-12-2019 04:55:15. |
2019-12-14 14:03:49 |
| 71.189.47.10 | attack | Dec 13 20:02:50 kapalua sshd\[3443\]: Invalid user squid from 71.189.47.10 Dec 13 20:02:50 kapalua sshd\[3443\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.ehmsllc.com Dec 13 20:02:52 kapalua sshd\[3443\]: Failed password for invalid user squid from 71.189.47.10 port 53589 ssh2 Dec 13 20:08:51 kapalua sshd\[4058\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.ehmsllc.com user=root Dec 13 20:08:53 kapalua sshd\[4058\]: Failed password for root from 71.189.47.10 port 17269 ssh2 |
2019-12-14 14:10:40 |
| 137.74.5.149 | attack | Invalid user thuman from 137.74.5.149 port 55958 |
2019-12-14 14:04:38 |
| 185.143.223.130 | attack | Dec 14 07:06:00 debian-2gb-nbg1-2 kernel: \[24585089.731944\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.143.223.130 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=64621 PROTO=TCP SPT=45595 DPT=12619 WINDOW=1024 RES=0x00 SYN URGP=0 |
2019-12-14 14:17:03 |
| 128.199.177.224 | attack | 2019-12-14T07:21:22.293704scmdmz1 sshd\[27159\]: Invalid user password from 128.199.177.224 port 38486 2019-12-14T07:21:22.296396scmdmz1 sshd\[27159\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.177.224 2019-12-14T07:21:24.030842scmdmz1 sshd\[27159\]: Failed password for invalid user password from 128.199.177.224 port 38486 ssh2 ... |
2019-12-14 14:26:20 |
| 109.173.40.60 | attackbotsspam | Dec 14 06:58:49 nextcloud sshd\[12381\]: Invalid user koay from 109.173.40.60 Dec 14 06:58:49 nextcloud sshd\[12381\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.173.40.60 Dec 14 06:58:51 nextcloud sshd\[12381\]: Failed password for invalid user koay from 109.173.40.60 port 52134 ssh2 ... |
2019-12-14 14:21:31 |
| 223.244.87.132 | attackbots | Dec 14 05:54:55 ks10 sshd[28206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.244.87.132 Dec 14 05:54:56 ks10 sshd[28206]: Failed password for invalid user debian-spamd from 223.244.87.132 port 47252 ssh2 ... |
2019-12-14 14:19:10 |
| 198.211.110.116 | attackspam | SSH invalid-user multiple login attempts |
2019-12-14 13:48:24 |
| 163.172.63.244 | attack | Lines containing failures of 163.172.63.244 Dec 12 20:29:21 mailserver sshd[16507]: Invalid user postgres from 163.172.63.244 port 44688 Dec 12 20:29:21 mailserver sshd[16507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.63.244 Dec 12 20:29:24 mailserver sshd[16507]: Failed password for invalid user postgres from 163.172.63.244 port 44688 ssh2 Dec 12 20:29:24 mailserver sshd[16507]: Received disconnect from 163.172.63.244 port 44688:11: Bye Bye [preauth] Dec 12 20:29:24 mailserver sshd[16507]: Disconnected from invalid user postgres 163.172.63.244 port 44688 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=163.172.63.244 |
2019-12-14 13:55:37 |
| 101.178.58.74 | attackspambots | Lines containing failures of 101.178.58.74 Dec 13 23:27:31 jarvis sshd[12403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.178.58.74 user=backup Dec 13 23:27:33 jarvis sshd[12403]: Failed password for backup from 101.178.58.74 port 46988 ssh2 Dec 13 23:27:33 jarvis sshd[12403]: Received disconnect from 101.178.58.74 port 46988:11: Bye Bye [preauth] Dec 13 23:27:33 jarvis sshd[12403]: Disconnected from authenticating user backup 101.178.58.74 port 46988 [preauth] Dec 13 23:43:45 jarvis sshd[15756]: Invalid user k-yamashhostnamea from 101.178.58.74 port 59956 Dec 13 23:43:45 jarvis sshd[15756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.178.58.74 Dec 13 23:43:48 jarvis sshd[15756]: Failed password for invalid user k-yamashhostnamea from 101.178.58.74 port 59956 ssh2 Dec 13 23:43:50 jarvis sshd[15756]: Received disconnect from 101.178.58.74 port 59956:11: Bye Bye [preauth] Dec........ ------------------------------ |
2019-12-14 14:20:40 |
| 181.41.216.140 | attack | "SMTP brute force auth login attempt." |
2019-12-14 14:05:54 |
| 94.102.49.65 | attack | 12/14/2019-00:48:19.703976 94.102.49.65 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-12-14 14:14:30 |
| 159.203.201.214 | attack | *Port Scan* detected from 159.203.201.214 (US/United States/zg-0911a-249.stretchoid.com). 4 hits in the last 261 seconds |
2019-12-14 14:14:52 |
| 106.12.22.73 | attackspam | Invalid user oracle2 from 106.12.22.73 port 53702 |
2019-12-14 14:08:50 |
| 1.53.179.124 | attackbotsspam | Attempt to attack host OS, exploiting network vulnerabilities, on 14-12-2019 04:55:15. |
2019-12-14 14:04:13 |