城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.192.52.70
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65288
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;142.192.52.70. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400
;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 11:42:12 CST 2025
;; MSG SIZE rcvd: 106b'Host 70.52.192.142.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 142.192.52.70.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 119.29.67.90 | attack | [ssh] SSH attack |
2019-09-12 17:49:55 |
| 158.69.22.218 | attackspam | Sep 11 17:47:30 hanapaa sshd\[19268\]: Invalid user test from 158.69.22.218 Sep 11 17:47:30 hanapaa sshd\[19268\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns519074.ip-158-69-22.net Sep 11 17:47:32 hanapaa sshd\[19268\]: Failed password for invalid user test from 158.69.22.218 port 45030 ssh2 Sep 11 17:54:01 hanapaa sshd\[19810\]: Invalid user node from 158.69.22.218 Sep 11 17:54:01 hanapaa sshd\[19810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns519074.ip-158-69-22.net |
2019-09-12 16:57:04 |
| 193.70.1.220 | attack | 2019-09-09T23:13:15.220149www.arvenenaske.de sshd[115490]: Invalid user odoo from 193.70.1.220 port 40456 2019-09-09T23:13:15.225226www.arvenenaske.de sshd[115490]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.1.220 user=odoo 2019-09-09T23:13:15.225796www.arvenenaske.de sshd[115490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.1.220 2019-09-09T23:13:15.220149www.arvenenaske.de sshd[115490]: Invalid user odoo from 193.70.1.220 port 40456 2019-09-09T23:13:17.372587www.arvenenaske.de sshd[115490]: Failed password for invalid user odoo from 193.70.1.220 port 40456 ssh2 2019-09-09T23:20:56.529586www.arvenenaske.de sshd[115562]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.1.220 user=ghostname 2019-09-09T23:20:56.529671www.arvenenaske.de sshd[115562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser........ ------------------------------ |
2019-09-12 17:42:43 |
| 218.98.40.132 | attackbots | SSH bruteforce (Triggered fail2ban) |
2019-09-12 17:42:15 |
| 178.128.223.34 | attackspam | 2019-09-12T08:56:28.751997abusebot-8.cloudsearch.cf sshd\[5702\]: Invalid user dspace from 178.128.223.34 port 49614 |
2019-09-12 17:04:34 |
| 84.54.144.161 | attackbotsspam | Lines containing failures of 84.54.144.161 Sep 10 08:12:56 shared02 sshd[2489]: Invalid user steam from 84.54.144.161 port 40930 Sep 10 08:12:56 shared02 sshd[2489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.54.144.161 Sep 10 08:12:59 shared02 sshd[2489]: Failed password for invalid user steam from 84.54.144.161 port 40930 ssh2 Sep 10 08:12:59 shared02 sshd[2489]: Received disconnect from 84.54.144.161 port 40930:11: Bye Bye [preauth] Sep 10 08:12:59 shared02 sshd[2489]: Disconnected from invalid user steam 84.54.144.161 port 40930 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=84.54.144.161 |
2019-09-12 17:08:01 |
| 70.54.203.67 | attack | $f2bV_matches |
2019-09-12 17:18:09 |
| 132.232.226.95 | attackspambots | 2019-09-12 05:52:50,915 [snip] proftpd[20534] [snip] (132.232.226.95[132.232.226.95]): USER root: no such user found from 132.232.226.95 [132.232.226.95] to ::ffff:[snip]:22 2019-09-12 05:52:54,427 [snip] proftpd[20538] [snip] (132.232.226.95[132.232.226.95]): USER root: no such user found from 132.232.226.95 [132.232.226.95] to ::ffff:[snip]:22 2019-09-12 05:52:56,579 [snip] proftpd[20542] [snip] (132.232.226.95[132.232.226.95]): USER root: no such user found from 132.232.226.95 [132.232.226.95] to ::ffff:[snip]:22[...] |
2019-09-12 17:52:42 |
| 178.62.60.233 | attack | Sep 12 11:31:33 vps691689 sshd[18841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.60.233 Sep 12 11:31:35 vps691689 sshd[18841]: Failed password for invalid user user@1234 from 178.62.60.233 port 38134 ssh2 ... |
2019-09-12 17:43:36 |
| 195.209.148.134 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-12 02:43:44,778 INFO [amun_request_handler] PortScan Detected on Port: 445 (195.209.148.134) |
2019-09-12 16:56:35 |
| 181.40.122.2 | attack | Sep 11 23:53:59 plusreed sshd[6301]: Invalid user demo3 from 181.40.122.2 ... |
2019-09-12 16:59:57 |
| 177.95.20.251 | attackbotsspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-12 02:41:42,721 INFO [amun_request_handler] PortScan Detected on Port: 445 (177.95.20.251) |
2019-09-12 17:08:45 |
| 89.64.54.243 | attackspambots | SMTP/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM - |
2019-09-12 17:36:27 |
| 117.88.120.187 | attack | Sep 12 10:37:35 pkdns2 sshd\[12118\]: Invalid user admin from 117.88.120.187Sep 12 10:37:37 pkdns2 sshd\[12118\]: Failed password for invalid user admin from 117.88.120.187 port 45747 ssh2Sep 12 10:37:39 pkdns2 sshd\[12118\]: Failed password for invalid user admin from 117.88.120.187 port 45747 ssh2Sep 12 10:37:41 pkdns2 sshd\[12118\]: Failed password for invalid user admin from 117.88.120.187 port 45747 ssh2Sep 12 10:37:43 pkdns2 sshd\[12118\]: Failed password for invalid user admin from 117.88.120.187 port 45747 ssh2Sep 12 10:37:45 pkdns2 sshd\[12118\]: Failed password for invalid user admin from 117.88.120.187 port 45747 ssh2 ... |
2019-09-12 17:59:50 |
| 78.188.113.184 | attackbots | firewall-block, port(s): 23/tcp |
2019-09-12 17:09:57 |