城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.180.225.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42047
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;149.180.225.141. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020600 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 06 20:20:44 CST 2025
;; MSG SIZE rcvd: 108
Host 141.225.180.149.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 141.225.180.149.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 166.111.7.104 | attack | Aug 30 17:25:41 kapalua sshd\[10491\]: Invalid user cumulus from 166.111.7.104 Aug 30 17:25:41 kapalua sshd\[10491\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.111.7.104 Aug 30 17:25:43 kapalua sshd\[10491\]: Failed password for invalid user cumulus from 166.111.7.104 port 49761 ssh2 Aug 30 17:30:49 kapalua sshd\[10891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.111.7.104 user=root Aug 30 17:30:52 kapalua sshd\[10891\]: Failed password for root from 166.111.7.104 port 43968 ssh2 |
2019-08-31 11:42:09 |
| 41.208.150.114 | attack | Aug 31 03:08:49 game-panel sshd[16995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.208.150.114 Aug 31 03:08:51 game-panel sshd[16995]: Failed password for invalid user teamspeak from 41.208.150.114 port 52666 ssh2 Aug 31 03:13:29 game-panel sshd[17290]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.208.150.114 |
2019-08-31 11:26:38 |
| 178.128.185.38 | attackspam | Aug 31 03:55:20 hcbbdb sshd\[18440\]: Invalid user 123456 from 178.128.185.38 Aug 31 03:55:20 hcbbdb sshd\[18440\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.185.38 Aug 31 03:55:21 hcbbdb sshd\[18440\]: Failed password for invalid user 123456 from 178.128.185.38 port 52056 ssh2 Aug 31 03:59:21 hcbbdb sshd\[18897\]: Invalid user bambi from 178.128.185.38 Aug 31 03:59:21 hcbbdb sshd\[18897\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.185.38 |
2019-08-31 12:05:11 |
| 137.74.119.50 | attackspam | Aug 31 05:14:04 plex sshd[30763]: Invalid user mahern from 137.74.119.50 port 51424 |
2019-08-31 11:33:52 |
| 94.23.204.136 | attackbotsspam | Aug 30 21:16:13 aat-srv002 sshd[11787]: Failed password for invalid user ts from 94.23.204.136 port 55364 ssh2 Aug 30 21:31:54 aat-srv002 sshd[12170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.204.136 Aug 30 21:31:56 aat-srv002 sshd[12170]: Failed password for invalid user mcguitaruser from 94.23.204.136 port 59890 ssh2 Aug 30 21:35:44 aat-srv002 sshd[12220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.204.136 ... |
2019-08-31 12:05:53 |
| 103.208.220.122 | attack | Tor Exit PIAjpn2exit |
2019-08-31 11:16:33 |
| 36.66.149.211 | attackspambots | Reported by AbuseIPDB proxy server. |
2019-08-31 11:39:11 |
| 62.12.115.116 | attackspambots | Aug 31 03:38:06 h2177944 sshd\[23500\]: Failed password for invalid user vncuser from 62.12.115.116 port 44314 ssh2 Aug 31 04:38:27 h2177944 sshd\[25605\]: Invalid user ubuntu from 62.12.115.116 port 39684 Aug 31 04:38:27 h2177944 sshd\[25605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.12.115.116 Aug 31 04:38:29 h2177944 sshd\[25605\]: Failed password for invalid user ubuntu from 62.12.115.116 port 39684 ssh2 ... |
2019-08-31 11:24:36 |
| 103.16.202.90 | attackbots | Aug 31 05:00:36 meumeu sshd[29041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.16.202.90 Aug 31 05:00:38 meumeu sshd[29041]: Failed password for invalid user dg from 103.16.202.90 port 50974 ssh2 Aug 31 05:05:50 meumeu sshd[29654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.16.202.90 ... |
2019-08-31 11:49:01 |
| 61.176.227.135 | attackspam | Unauthorised access (Aug 31) SRC=61.176.227.135 LEN=40 TTL=49 ID=9487 TCP DPT=8080 WINDOW=46936 SYN Unauthorised access (Aug 30) SRC=61.176.227.135 LEN=40 TTL=49 ID=32108 TCP DPT=8080 WINDOW=104 SYN |
2019-08-31 11:16:59 |
| 193.188.22.12 | attackbots | Aug 31 04:25:27 andromeda sshd\[41412\]: Invalid user share from 193.188.22.12 port 4131 Aug 31 04:25:28 andromeda sshd\[41412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.188.22.12 Aug 31 04:25:29 andromeda sshd\[41412\]: Failed password for invalid user share from 193.188.22.12 port 4131 ssh2 |
2019-08-31 11:33:24 |
| 134.255.220.223 | attack | Bruteforcing port 3389 (Remote Desktop) - Exceed maximum 10 attempts/hour |
2019-08-31 11:19:19 |
| 34.74.99.116 | attackbots | Lines containing failures of 34.74.99.116 Aug 29 19:46:00 mailserver sshd[26780]: Invalid user admin from 34.74.99.116 port 38142 Aug 29 19:46:00 mailserver sshd[26780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.74.99.116 Aug 29 19:46:03 mailserver sshd[26780]: Failed password for invalid user admin from 34.74.99.116 port 38142 ssh2 Aug 29 19:46:03 mailserver sshd[26780]: error: Received disconnect from 34.74.99.116 port 38142:3: com.jcraft.jsch.JSchException: Auth fail [preauth] Aug 29 19:46:03 mailserver sshd[26780]: Disconnected from invalid user admin 34.74.99.116 port 38142 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=34.74.99.116 |
2019-08-31 11:34:52 |
| 139.199.164.21 | attackspam | Aug 31 05:38:12 OPSO sshd\[13135\]: Invalid user joomla from 139.199.164.21 port 36018 Aug 31 05:38:12 OPSO sshd\[13135\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.164.21 Aug 31 05:38:14 OPSO sshd\[13135\]: Failed password for invalid user joomla from 139.199.164.21 port 36018 ssh2 Aug 31 05:41:05 OPSO sshd\[13559\]: Invalid user wy from 139.199.164.21 port 33292 Aug 31 05:41:05 OPSO sshd\[13559\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.164.21 |
2019-08-31 11:56:28 |
| 41.216.186.87 | attack | port scan and connect, tcp 80 (http) |
2019-08-31 11:40:59 |