城市(city): unknown
省份(region): unknown
国家(country): Bolivia (Plurinational State of)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 161.138.93.108
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48346
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;161.138.93.108. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020400 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 14:30:00 CST 2025
;; MSG SIZE rcvd: 107Host 108.93.138.161.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 108.93.138.161.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.13.188.35 | attack | Sep 13 21:00:57 PorscheCustomer sshd[32705]: Failed password for root from 106.13.188.35 port 59792 ssh2 Sep 13 21:04:19 PorscheCustomer sshd[388]: Failed password for root from 106.13.188.35 port 50986 ssh2 ... |
2020-09-14 05:30:33 |
| 212.230.191.245 | attackbotsspam | Sep 13 18:55:28 lnxweb61 sshd[3417]: Failed password for root from 212.230.191.245 port 47142 ssh2 Sep 13 18:55:28 lnxweb61 sshd[3417]: Failed password for root from 212.230.191.245 port 47142 ssh2 |
2020-09-14 05:38:33 |
| 118.89.231.109 | attack | Sep 13 22:22:37 server sshd[53422]: Failed password for root from 118.89.231.109 port 36351 ssh2 Sep 13 22:25:31 server sshd[54197]: Failed password for invalid user NetLinx from 118.89.231.109 port 60874 ssh2 Sep 13 22:28:26 server sshd[55100]: Failed password for invalid user ranger from 118.89.231.109 port 57171 ssh2 |
2020-09-14 05:31:47 |
| 111.229.165.57 | attackspam | 111.229.165.57 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 13 16:10:54 server2 sshd[9806]: Failed password for root from 122.51.32.91 port 59916 ssh2 Sep 13 16:12:20 server2 sshd[10758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.69.123 user=root Sep 13 16:12:04 server2 sshd[10646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.125.207 user=root Sep 13 16:12:11 server2 sshd[10730]: Failed password for root from 111.229.165.57 port 54114 ssh2 Sep 13 16:12:05 server2 sshd[10646]: Failed password for root from 157.230.125.207 port 62805 ssh2 Sep 13 16:12:09 server2 sshd[10730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.165.57 user=root IP Addresses Blocked: 122.51.32.91 (CN/China/-) 190.145.69.123 (CO/Colombia/-) 157.230.125.207 (DE/Germany/-) |
2020-09-14 05:30:15 |
| 178.33.212.220 | attack | firewall-block, port(s): 9919/tcp |
2020-09-14 05:54:43 |
| 85.51.12.244 | attack | Sep 13 22:54:25 vpn01 sshd[19955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.51.12.244 Sep 13 22:54:27 vpn01 sshd[19955]: Failed password for invalid user tina from 85.51.12.244 port 43192 ssh2 ... |
2020-09-14 05:45:29 |
| 117.50.14.123 | attackbots | Lines containing failures of 117.50.14.123 Sep 12 19:18:02 shared07 sshd[4543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.14.123 user=r.r Sep 12 19:18:03 shared07 sshd[4543]: Failed password for r.r from 117.50.14.123 port 45626 ssh2 Sep 12 19:18:04 shared07 sshd[4543]: Received disconnect from 117.50.14.123 port 45626:11: Bye Bye [preauth] Sep 12 19:18:04 shared07 sshd[4543]: Disconnected from authenticating user r.r 117.50.14.123 port 45626 [preauth] Sep 12 19:31:06 shared07 sshd[9557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.14.123 user=r.r Sep 12 19:31:08 shared07 sshd[9557]: Failed password for r.r from 117.50.14.123 port 58638 ssh2 Sep 12 19:31:08 shared07 sshd[9557]: Received disconnect from 117.50.14.123 port 58638:11: Bye Bye [preauth] Sep 12 19:31:08 shared07 sshd[9557]: Disconnected from authenticating user r.r 117.50.14.123 port 58638 [preauth] Sep 12........ ------------------------------ |
2020-09-14 05:50:16 |
| 49.233.84.59 | attack | Time: Sun Sep 13 17:52:45 2020 +0000 IP: 49.233.84.59 (CN/China/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 13 17:43:15 ca-48-ede1 sshd[50958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.84.59 user=root Sep 13 17:43:17 ca-48-ede1 sshd[50958]: Failed password for root from 49.233.84.59 port 48100 ssh2 Sep 13 17:49:04 ca-48-ede1 sshd[51203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.84.59 user=root Sep 13 17:49:06 ca-48-ede1 sshd[51203]: Failed password for root from 49.233.84.59 port 49438 ssh2 Sep 13 17:52:41 ca-48-ede1 sshd[51311]: Invalid user freedom from 49.233.84.59 port 59516 |
2020-09-14 05:40:18 |
| 140.143.19.144 | attackspambots | Lines containing failures of 140.143.19.144 (max 1000) Sep 12 13:20:08 localhost sshd[15495]: User r.r from 140.143.19.144 not allowed because listed in DenyUsers Sep 12 13:20:08 localhost sshd[15495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.19.144 user=r.r Sep 12 13:20:10 localhost sshd[15495]: Failed password for invalid user r.r from 140.143.19.144 port 56772 ssh2 Sep 12 13:20:12 localhost sshd[15495]: Received disconnect from 140.143.19.144 port 56772:11: Bye Bye [preauth] Sep 12 13:20:12 localhost sshd[15495]: Disconnected from invalid user r.r 140.143.19.144 port 56772 [preauth] Sep 12 13:34:27 localhost sshd[20314]: Invalid user ghostname from 140.143.19.144 port 49952 Sep 12 13:34:27 localhost sshd[20314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.19.144 Sep 12 13:34:30 localhost sshd[20314]: Failed password for invalid user ghostname from 140.143.19.14........ ------------------------------ |
2020-09-14 06:02:39 |
| 138.68.253.149 | attackspambots | Sep 13 21:36:24 ip-172-31-16-56 sshd\[14588\]: Failed password for root from 138.68.253.149 port 39628 ssh2\ Sep 13 21:38:45 ip-172-31-16-56 sshd\[14612\]: Failed password for root from 138.68.253.149 port 53224 ssh2\ Sep 13 21:41:10 ip-172-31-16-56 sshd\[14723\]: Failed password for root from 138.68.253.149 port 38588 ssh2\ Sep 13 21:43:30 ip-172-31-16-56 sshd\[14750\]: Invalid user koeso from 138.68.253.149\ Sep 13 21:43:31 ip-172-31-16-56 sshd\[14750\]: Failed password for invalid user koeso from 138.68.253.149 port 52192 ssh2\ |
2020-09-14 05:57:38 |
| 94.102.49.106 | attackspambots |
|
2020-09-14 05:50:34 |
| 62.210.91.62 | attackbots | Automatic report - Banned IP Access |
2020-09-14 05:31:20 |
| 118.25.196.31 | attack | Sep 13 21:47:28 root sshd[26996]: Invalid user heinse from 118.25.196.31 ... |
2020-09-14 05:40:02 |
| 174.138.27.165 | attack | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-13T19:48:08Z and 2020-09-13T19:54:22Z |
2020-09-14 05:48:37 |
| 117.50.13.167 | attackbotsspam | ssh brute force |
2020-09-14 05:41:29 |