城市(city): Kaohsiung
省份(region): Kaohsiung
国家(country): Taiwan, China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 140.116.193.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30172
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;140.116.193.16. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023050500 1800 900 604800 86400
;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 05 16:02:54 CST 2023
;; MSG SIZE rcvd: 107Host 16.193.116.140.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 16.193.116.140.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 176.31.255.223 | attack | 5x Failed Password |
2020-09-14 07:54:50 |
| 185.202.1.122 | attackspam | RDP Bruteforce |
2020-09-14 12:00:48 |
| 92.246.76.251 | attack | Sep 14 01:19:26 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=92.246.76.251 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=37331 PROTO=TCP SPT=59920 DPT=40432 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 14 01:20:11 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=92.246.76.251 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=59878 PROTO=TCP SPT=59920 DPT=65437 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 14 01:20:12 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=92.246.76.251 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=5170 PROTO=TCP SPT=59920 DPT=37432 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 14 01:20:32 *hidden* kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=92.246.76.251 DST=217.198.117.163 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=42205 PROTO=TCP SPT=59920 DPT=5439 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 14 ... |
2020-09-14 07:50:18 |
| 185.247.224.12 | attackspam | Sep 14 01:40:02 haigwepa sshd[29183]: Failed password for root from 185.247.224.12 port 40780 ssh2 Sep 14 01:40:06 haigwepa sshd[29183]: Failed password for root from 185.247.224.12 port 40780 ssh2 ... |
2020-09-14 07:53:11 |
| 106.13.19.75 | attack | Sep 14 05:00:12 markkoudstaal sshd[392]: Failed password for root from 106.13.19.75 port 41336 ssh2 Sep 14 05:01:57 markkoudstaal sshd[926]: Failed password for root from 106.13.19.75 port 35160 ssh2 ... |
2020-09-14 12:21:33 |
| 45.141.84.99 | attack |
|
2020-09-14 12:07:50 |
| 128.14.229.158 | attackbotsspam | Sep 14 05:13:49 sso sshd[16546]: Failed password for root from 128.14.229.158 port 49820 ssh2 ... |
2020-09-14 12:15:56 |
| 64.225.106.12 | attack | Fail2Ban Ban Triggered |
2020-09-14 08:06:03 |
| 106.12.185.18 | attackspambots | Sep 14 05:56:21 piServer sshd[8568]: Failed password for root from 106.12.185.18 port 59768 ssh2 Sep 14 06:00:21 piServer sshd[9020]: Failed password for root from 106.12.185.18 port 58254 ssh2 Sep 14 06:04:19 piServer sshd[9367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.185.18 ... |
2020-09-14 12:06:57 |
| 115.99.13.91 | attack | 20/9/13@12:55:06: FAIL: IoT-Telnet address from=115.99.13.91 ... |
2020-09-14 07:48:18 |
| 58.230.147.230 | attackspambots | Sep 14 02:16:51 ns37 sshd[1890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.230.147.230 Sep 14 02:16:53 ns37 sshd[1890]: Failed password for invalid user jemmons from 58.230.147.230 port 48858 ssh2 Sep 14 02:21:01 ns37 sshd[2197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.230.147.230 |
2020-09-14 12:11:10 |
| 179.252.115.215 | attack | Sep 13 20:57:23 vps639187 sshd\[5928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.252.115.215 user=root Sep 13 20:57:25 vps639187 sshd\[5928\]: Failed password for root from 179.252.115.215 port 36816 ssh2 Sep 13 21:02:28 vps639187 sshd\[6005\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.252.115.215 user=root ... |
2020-09-14 07:54:22 |
| 189.206.160.153 | attackbotsspam | 2020-09-13T23:14:52.046163shield sshd\[31491\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.206.160.153 user=root 2020-09-13T23:14:54.098446shield sshd\[31491\]: Failed password for root from 189.206.160.153 port 26919 ssh2 2020-09-13T23:19:09.464740shield sshd\[32282\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.206.160.153 user=root 2020-09-13T23:19:10.934942shield sshd\[32282\]: Failed password for root from 189.206.160.153 port 15164 ssh2 2020-09-13T23:23:24.504035shield sshd\[316\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.206.160.153 user=root |
2020-09-14 07:47:16 |
| 106.75.122.191 | attack | fail2ban -- 106.75.122.191 ... |
2020-09-14 12:06:10 |
| 104.131.190.193 | attack | Sep 14 01:50:40 ns308116 sshd[683]: Invalid user wwwdata from 104.131.190.193 port 47069 Sep 14 01:50:40 ns308116 sshd[683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.190.193 Sep 14 01:50:42 ns308116 sshd[683]: Failed password for invalid user wwwdata from 104.131.190.193 port 47069 ssh2 Sep 14 01:59:24 ns308116 sshd[12143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.190.193 user=root Sep 14 01:59:26 ns308116 sshd[12143]: Failed password for root from 104.131.190.193 port 50147 ssh2 ... |
2020-09-14 12:10:38 |