城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.95.7.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13897
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;139.95.7.107. IN A
;; AUTHORITY SECTION:
. 316 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022100602 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 07 10:23:14 CST 2022
;; MSG SIZE rcvd: 105Host 107.7.95.139.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 107.7.95.139.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 115.159.185.205 | attackspam | 2019-06-23T02:33:49.574004test01.cajus.name sshd\[23513\]: Invalid user 123456 from 115.159.185.205 port 36126 2019-06-23T02:33:49.588821test01.cajus.name sshd\[23513\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.185.205 2019-06-23T02:33:51.796584test01.cajus.name sshd\[23513\]: Failed password for invalid user 123456 from 115.159.185.205 port 36126 ssh2 |
2019-06-23 14:43:15 |
| 14.212.13.59 | attack | 5500/tcp [2019-06-22]1pkt |
2019-06-23 14:29:06 |
| 111.249.33.252 | attackbots | 37215/tcp [2019-06-22]1pkt |
2019-06-23 13:57:44 |
| 210.64.44.204 | attack | Jun 19 01:22:23 v26 sshd[18163]: Bad protocol version identification '' from 210.64.44.204 port 43310 Jun 19 01:22:24 v26 sshd[18164]: Invalid user support from 210.64.44.204 port 43398 Jun 19 01:22:27 v26 sshd[18164]: Failed password for invalid user support from 210.64.44.204 port 43398 ssh2 Jun 19 01:22:27 v26 sshd[18164]: Connection closed by 210.64.44.204 port 43398 [preauth] Jun 19 01:22:28 v26 sshd[18167]: Invalid user ubnt from 210.64.44.204 port 43950 Jun 19 01:22:31 v26 sshd[18167]: Failed password for invalid user ubnt from 210.64.44.204 port 43950 ssh2 Jun 19 01:22:31 v26 sshd[18167]: Connection closed by 210.64.44.204 port 43950 [preauth] Jun 19 01:22:32 v26 sshd[18175]: Invalid user cisco from 210.64.44.204 port 44564 Jun 19 01:22:35 v26 sshd[18175]: Failed password for invalid user cisco from 210.64.44.204 port 44564 ssh2 Jun 19 01:22:35 v26 sshd[18175]: Connection closed by 210.64.44.204 port 44564 [preauth] Jun 19 01:22:36 v26 sshd[18178]: Invalid user ........ ------------------------------- |
2019-06-23 14:46:36 |
| 139.59.92.10 | attackspam | Invalid user joseluis from 139.59.92.10 port 38236 |
2019-06-23 14:02:01 |
| 171.84.2.4 | attack | Jun 23 00:07:27 ip-172-31-1-72 sshd\[29802\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.84.2.4 user=ubuntu Jun 23 00:07:30 ip-172-31-1-72 sshd\[29802\]: Failed password for ubuntu from 171.84.2.4 port 62932 ssh2 Jun 23 00:10:49 ip-172-31-1-72 sshd\[30130\]: Invalid user teamspeak from 171.84.2.4 Jun 23 00:10:49 ip-172-31-1-72 sshd\[30130\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.84.2.4 Jun 23 00:10:51 ip-172-31-1-72 sshd\[30130\]: Failed password for invalid user teamspeak from 171.84.2.4 port 26246 ssh2 |
2019-06-23 14:41:53 |
| 139.199.113.140 | attack | Jun 23 05:09:51 mail sshd\[32705\]: Invalid user tester from 139.199.113.140 port 36648 Jun 23 05:09:51 mail sshd\[32705\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.140 Jun 23 05:09:53 mail sshd\[32705\]: Failed password for invalid user tester from 139.199.113.140 port 36648 ssh2 Jun 23 05:11:19 mail sshd\[449\]: Invalid user airadmin from 139.199.113.140 port 48506 Jun 23 05:11:19 mail sshd\[449\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.140 |
2019-06-23 14:36:09 |
| 171.221.217.145 | attackspam | 2019-06-23T00:41:33.124558abusebot-3.cloudsearch.cf sshd\[23680\]: Invalid user wq from 171.221.217.145 port 55577 |
2019-06-23 14:40:15 |
| 41.72.105.171 | attackspam | Jun 23 10:52:49 martinbaileyphotography sshd\[29029\]: Invalid user chemin from 41.72.105.171 port 20672 Jun 23 10:52:49 martinbaileyphotography sshd\[29029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.72.105.171 Jun 23 10:52:51 martinbaileyphotography sshd\[29029\]: Failed password for invalid user chemin from 41.72.105.171 port 20672 ssh2 Jun 23 10:56:09 martinbaileyphotography sshd\[29205\]: Invalid user haproxy from 41.72.105.171 port 35406 Jun 23 10:56:09 martinbaileyphotography sshd\[29205\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.72.105.171 ... |
2019-06-23 14:11:39 |
| 192.241.175.115 | attackbotsspam | ports scanning |
2019-06-23 14:04:31 |
| 27.209.15.166 | attackspam | 37215/tcp [2019-06-22]1pkt |
2019-06-23 14:39:14 |
| 27.78.213.21 | attack | 445/tcp [2019-06-22]1pkt |
2019-06-23 14:19:16 |
| 102.131.21.1 | attack | SPF Fail sender not permitted to send mail for @lsys.it / Sent Mail to target address hacked/leaked from Planet3DNow.de |
2019-06-23 14:35:20 |
| 191.53.223.80 | attackspam | SMTP-sasl brute force ... |
2019-06-23 14:38:39 |
| 35.222.163.124 | attack | [munged]::443 35.222.163.124 - - [23/Jun/2019:07:34:28 +0200] "POST /[munged]: HTTP/1.1" 200 6178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 35.222.163.124 - - [23/Jun/2019:07:34:32 +0200] "POST /[munged]: HTTP/1.1" 200 6184 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 35.222.163.124 - - [23/Jun/2019:07:34:32 +0200] "POST /[munged]: HTTP/1.1" 200 6184 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2019-06-23 14:27:57 |