城市(city): unknown
省份(region): unknown
国家(country): Singapore
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.196.139.160
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1599
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;154.196.139.160. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 13:50:29 CST 2025
;; MSG SIZE rcvd: 108Host 160.139.196.154.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 160.139.196.154.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 82.162.61.207 | attackspambots | Fail2Ban - SSH Bruteforce Attempt |
2019-09-07 08:21:10 |
| 189.169.89.128 | attack | Sep 6 19:43:24 www sshd\[144609\]: Invalid user ts from 189.169.89.128 Sep 6 19:43:24 www sshd\[144609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.169.89.128 Sep 6 19:43:26 www sshd\[144609\]: Failed password for invalid user ts from 189.169.89.128 port 58543 ssh2 ... |
2019-09-07 08:27:53 |
| 61.147.57.47 | attackbotsspam | Triggered by Fail2Ban at Vostok web server |
2019-09-07 08:32:44 |
| 149.129.175.132 | attack | Sep 6 19:47:39 eola sshd[31001]: Invalid user myftp from 149.129.175.132 port 34760 Sep 6 19:47:39 eola sshd[31001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.129.175.132 Sep 6 19:47:40 eola sshd[31001]: Failed password for invalid user myftp from 149.129.175.132 port 34760 ssh2 Sep 6 19:47:41 eola sshd[31001]: Received disconnect from 149.129.175.132 port 34760:11: Bye Bye [preauth] Sep 6 19:47:41 eola sshd[31001]: Disconnected from 149.129.175.132 port 34760 [preauth] Sep 6 19:58:12 eola sshd[31143]: Invalid user user1 from 149.129.175.132 port 49548 Sep 6 19:58:12 eola sshd[31143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.129.175.132 Sep 6 19:58:14 eola sshd[31143]: Failed password for invalid user user1 from 149.129.175.132 port 49548 ssh2 Sep 6 19:58:15 eola sshd[31143]: Received disconnect from 149.129.175.132 port 49548:11: Bye Bye [preauth] Sep 6 19:5........ ------------------------------- |
2019-09-07 08:46:17 |
| 60.113.85.41 | attackbotsspam | Sep 6 04:45:56 lcdev sshd\[31260\]: Invalid user factorio from 60.113.85.41 Sep 6 04:45:56 lcdev sshd\[31260\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=softbank060113085041.bbtec.net Sep 6 04:45:58 lcdev sshd\[31260\]: Failed password for invalid user factorio from 60.113.85.41 port 51362 ssh2 Sep 6 04:50:20 lcdev sshd\[31615\]: Invalid user ftpuser from 60.113.85.41 Sep 6 04:50:20 lcdev sshd\[31615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=softbank060113085041.bbtec.net |
2019-09-07 08:41:21 |
| 182.61.149.31 | attackbotsspam | Sep 7 02:46:00 dedicated sshd[28606]: Invalid user mcserver from 182.61.149.31 port 53544 |
2019-09-07 08:55:04 |
| 66.117.9.138 | attackbots | \[2019-09-06 20:38:59\] SECURITY\[1849\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-06T20:38:59.836-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="001441519470549",SessionID="0x7fd9a8197648",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/66.117.9.138/50191",ACLName="no_extension_match" \[2019-09-06 20:40:07\] SECURITY\[1849\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-06T20:40:07.417-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="002441519470549",SessionID="0x7fd9a819fa08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/66.117.9.138/55985",ACLName="no_extension_match" \[2019-09-06 20:41:15\] SECURITY\[1849\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-06T20:41:15.613-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="008441519470549",SessionID="0x7fd9a8123cd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/66.117.9.138/54590",ACLName="no_extens |
2019-09-07 08:43:17 |
| 178.32.47.97 | attackbots | Sep 6 20:59:29 plusreed sshd[11996]: Invalid user bot from 178.32.47.97 ... |
2019-09-07 09:01:03 |
| 125.130.110.20 | attack | Sep 6 14:41:16 web1 sshd\[9415\]: Invalid user oracle from 125.130.110.20 Sep 6 14:41:16 web1 sshd\[9415\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.130.110.20 Sep 6 14:41:18 web1 sshd\[9415\]: Failed password for invalid user oracle from 125.130.110.20 port 47268 ssh2 Sep 6 14:46:01 web1 sshd\[9832\]: Invalid user ut2k4server from 125.130.110.20 Sep 6 14:46:01 web1 sshd\[9832\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.130.110.20 |
2019-09-07 08:48:30 |
| 142.93.215.102 | attackspambots | Sep 7 03:04:55 vtv3 sshd\[16801\]: Invalid user storm from 142.93.215.102 port 43988 Sep 7 03:04:55 vtv3 sshd\[16801\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.215.102 Sep 7 03:04:56 vtv3 sshd\[16801\]: Failed password for invalid user storm from 142.93.215.102 port 43988 ssh2 Sep 7 03:10:32 vtv3 sshd\[19810\]: Invalid user hospital from 142.93.215.102 port 38982 Sep 7 03:10:32 vtv3 sshd\[19810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.215.102 Sep 7 03:25:21 vtv3 sshd\[27601\]: Invalid user mia from 142.93.215.102 port 40916 Sep 7 03:25:21 vtv3 sshd\[27601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.215.102 Sep 7 03:25:23 vtv3 sshd\[27601\]: Failed password for invalid user mia from 142.93.215.102 port 40916 ssh2 Sep 7 03:30:30 vtv3 sshd\[30212\]: Invalid user physics from 142.93.215.102 port 60388 Sep 7 03:30:30 vtv3 sshd\[3021 |
2019-09-07 09:05:02 |
| 141.98.10.55 | attackbotsspam | 2019-09-07T02:52:18.628679ns1.unifynetsol.net postfix/smtpd\[29480\]: warning: unknown\[141.98.10.55\]: SASL LOGIN authentication failed: authentication failure 2019-09-07T03:31:30.300203ns1.unifynetsol.net postfix/smtpd\[29462\]: warning: unknown\[141.98.10.55\]: SASL LOGIN authentication failed: authentication failure 2019-09-07T04:11:04.588604ns1.unifynetsol.net postfix/smtpd\[3820\]: warning: unknown\[141.98.10.55\]: SASL LOGIN authentication failed: authentication failure 2019-09-07T04:50:52.109478ns1.unifynetsol.net postfix/smtpd\[7592\]: warning: unknown\[141.98.10.55\]: SASL LOGIN authentication failed: authentication failure 2019-09-07T05:30:26.990420ns1.unifynetsol.net postfix/smtpd\[18742\]: warning: unknown\[141.98.10.55\]: SASL LOGIN authentication failed: authentication failure |
2019-09-07 08:24:14 |
| 104.248.162.218 | attackspambots | Sep 7 07:46:26 webhost01 sshd[21012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.162.218 Sep 7 07:46:28 webhost01 sshd[21012]: Failed password for invalid user jenkins from 104.248.162.218 port 44964 ssh2 ... |
2019-09-07 08:53:36 |
| 90.187.62.121 | attack | Sep 6 14:37:15 lcprod sshd\[15931\]: Invalid user myftp from 90.187.62.121 Sep 6 14:37:15 lcprod sshd\[15931\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=business-90-187-62-121.pool2.vodafone-ip.de Sep 6 14:37:16 lcprod sshd\[15931\]: Failed password for invalid user myftp from 90.187.62.121 port 56196 ssh2 Sep 6 14:45:43 lcprod sshd\[16872\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=business-90-187-62-121.pool2.vodafone-ip.de user=root Sep 6 14:45:45 lcprod sshd\[16872\]: Failed password for root from 90.187.62.121 port 43598 ssh2 |
2019-09-07 09:08:53 |
| 157.230.146.19 | attackspambots | Sep 6 14:20:16 lcprod sshd\[14316\]: Invalid user testtest from 157.230.146.19 Sep 6 14:20:16 lcprod sshd\[14316\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.146.19 Sep 6 14:20:18 lcprod sshd\[14316\]: Failed password for invalid user testtest from 157.230.146.19 port 49110 ssh2 Sep 6 14:24:30 lcprod sshd\[14694\]: Invalid user sinusbot from 157.230.146.19 Sep 6 14:24:30 lcprod sshd\[14694\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.146.19 |
2019-09-07 08:38:55 |
| 147.135.163.102 | attack | Sep 6 05:18:54 sachi sshd\[28784\]: Invalid user teamspeak from 147.135.163.102 Sep 6 05:18:54 sachi sshd\[28784\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip102.ip-147-135-163.eu Sep 6 05:18:56 sachi sshd\[28784\]: Failed password for invalid user teamspeak from 147.135.163.102 port 54668 ssh2 Sep 6 05:23:05 sachi sshd\[29133\]: Invalid user ts3srv from 147.135.163.102 Sep 6 05:23:05 sachi sshd\[29133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip102.ip-147-135-163.eu |
2019-09-07 08:26:15 |