城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 158.91.4.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36335
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;158.91.4.139. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019091700 1800 900 604800 86400
;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Sep 17 19:10:14 CST 2019
;; MSG SIZE rcvd: 116Host 139.4.91.158.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 67.207.67.2, trying next server
Server: 67.207.67.3
Address: 67.207.67.3#53
** server can't find 139.4.91.158.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 98.29.233.10 | attackspam | $f2bV_matches |
2019-07-15 06:19:10 |
| 218.92.1.130 | attack | Jul 14 23:13:38 debian sshd\[12121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.130 user=root Jul 14 23:13:40 debian sshd\[12121\]: Failed password for root from 218.92.1.130 port 60579 ssh2 ... |
2019-07-15 06:14:04 |
| 221.4.223.212 | attack | Jul 15 04:02:50 areeb-Workstation sshd\[20030\]: Invalid user developer from 221.4.223.212 Jul 15 04:02:50 areeb-Workstation sshd\[20030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.4.223.212 Jul 15 04:02:52 areeb-Workstation sshd\[20030\]: Failed password for invalid user developer from 221.4.223.212 port 40919 ssh2 ... |
2019-07-15 06:43:30 |
| 163.172.106.114 | attackbots | Jul 14 18:06:25 debian sshd\[9705\]: Invalid user admin from 163.172.106.114 port 33998 Jul 14 18:06:25 debian sshd\[9705\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.106.114 Jul 14 18:06:27 debian sshd\[9705\]: Failed password for invalid user admin from 163.172.106.114 port 33998 ssh2 ... |
2019-07-15 06:23:38 |
| 85.50.116.141 | attack | 2019-07-14T22:17:15.638826abusebot-4.cloudsearch.cf sshd\[17539\]: Invalid user cristina from 85.50.116.141 port 60350 |
2019-07-15 06:37:56 |
| 5.39.67.154 | attack | Apr 26 06:37:32 vtv3 sshd\[26944\]: Invalid user nen from 5.39.67.154 port 45543 Apr 26 06:37:32 vtv3 sshd\[26944\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.67.154 Apr 26 06:37:34 vtv3 sshd\[26944\]: Failed password for invalid user nen from 5.39.67.154 port 45543 ssh2 Apr 26 06:42:44 vtv3 sshd\[29480\]: Invalid user spark from 5.39.67.154 port 42610 Apr 26 06:42:44 vtv3 sshd\[29480\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.67.154 Apr 26 06:54:04 vtv3 sshd\[2688\]: Invalid user uftp from 5.39.67.154 port 52131 Apr 26 06:54:04 vtv3 sshd\[2688\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.67.154 Apr 26 06:54:07 vtv3 sshd\[2688\]: Failed password for invalid user uftp from 5.39.67.154 port 52131 ssh2 Apr 26 06:56:28 vtv3 sshd\[4088\]: Invalid user ftpuser from 5.39.67.154 port 37095 Apr 26 06:56:28 vtv3 sshd\[4088\]: pam_unix\(sshd:auth\): authentic |
2019-07-15 06:12:01 |
| 83.222.184.82 | attackbots | Jul 14 18:13:27 plusreed sshd[14874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.222.184.82 user=postgres Jul 14 18:13:29 plusreed sshd[14874]: Failed password for postgres from 83.222.184.82 port 49023 ssh2 ... |
2019-07-15 06:16:15 |
| 129.211.82.124 | attackbots | $f2bV_matches |
2019-07-15 06:25:57 |
| 186.206.134.122 | attackbots | Jul 15 03:34:35 areeb-Workstation sshd\[14147\]: Invalid user teste1 from 186.206.134.122 Jul 15 03:34:35 areeb-Workstation sshd\[14147\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.206.134.122 Jul 15 03:34:37 areeb-Workstation sshd\[14147\]: Failed password for invalid user teste1 from 186.206.134.122 port 57094 ssh2 ... |
2019-07-15 06:21:20 |
| 43.249.104.68 | attack | Jul 15 00:17:24 * sshd[5067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.249.104.68 Jul 15 00:17:26 * sshd[5067]: Failed password for invalid user guang from 43.249.104.68 port 48412 ssh2 |
2019-07-15 06:28:00 |
| 77.42.109.186 | attackbots | Telnetd brute force attack detected by fail2ban |
2019-07-15 06:18:23 |
| 1.255.70.114 | attackspam | $f2bV_matches |
2019-07-15 06:31:54 |
| 105.247.157.59 | attack | Jul 15 00:27:15 eventyay sshd[23157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.247.157.59 Jul 15 00:27:17 eventyay sshd[23157]: Failed password for invalid user centos from 105.247.157.59 port 49427 ssh2 Jul 15 00:33:52 eventyay sshd[24746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=105.247.157.59 ... |
2019-07-15 06:41:02 |
| 79.27.158.74 | attackbots | Lines containing failures of 79.27.158.74 Jul 12 23:46:10 mellenthin postfix/smtpd[9482]: connect from host74-158-dynamic.27-79-r.retail.telecomhostnamealia.hostname[79.27.158.74] Jul x@x Jul 12 23:46:10 mellenthin postfix/smtpd[9482]: lost connection after DATA from host74-158-dynamic.27-79-r.retail.telecomhostnamealia.hostname[79.27.158.74] Jul 12 23:46:10 mellenthin postfix/smtpd[9482]: disconnect from host74-158-dynamic.27-79-r.retail.telecomhostnamealia.hostname[79.27.158.74] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 Jul 14 05:18:01 mellenthin postfix/smtpd[6484]: connect from host74-158-dynamic.27-79-r.retail.telecomhostnamealia.hostname[79.27.158.74] Jul x@x Jul 14 05:18:01 mellenthin postfix/smtpd[6484]: lost connection after DATA from host74-158-dynamic.27-79-r.retail.telecomhostnamealia.hostname[79.27.158.74] Jul 14 05:18:01 mellenthin postfix/smtpd[6484]: disconnect from host74-158-dynamic.27-79-r.retail.telecomhostnamealia.hostname[79.27.158.74] ehlo=1 mai........ ------------------------------ |
2019-07-15 06:50:07 |
| 177.190.145.203 | attackbotsspam | proto=tcp . spt=44989 . dpt=25 . (listed on Blocklist de Jul 14) (634) |
2019-07-15 06:48:24 |