城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.126.50.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9747
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;18.126.50.139. IN A
;; AUTHORITY SECTION:
. 99 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022011001 1800 900 604800 86400
;; Query time: 94 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 11 02:18:11 CST 2022
;; MSG SIZE rcvd: 106
Host 139.50.126.18.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 139.50.126.18.in-addr.arpa: SERVFAIL
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.54.221.148 | attack | *Port Scan* detected from 106.54.221.148 (CN/China/-). 7 hits in the last 126 seconds |
2019-11-13 16:36:55 |
| 189.172.41.180 | attackspambots | Lines containing failures of 189.172.41.180 (max 1000) Nov 11 17:10:29 localhost sshd[563]: Invalid user kaytlin from 189.172.41.180 port 50900 Nov 11 17:10:29 localhost sshd[563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.172.41.180 Nov 11 17:10:31 localhost sshd[563]: Failed password for invalid user kaytlin from 189.172.41.180 port 50900 ssh2 Nov 11 17:10:33 localhost sshd[563]: Received disconnect from 189.172.41.180 port 50900:11: Bye Bye [preauth] Nov 11 17:10:33 localhost sshd[563]: Disconnected from invalid user kaytlin 189.172.41.180 port 50900 [preauth] Nov 11 17:14:38 localhost sshd[2606]: Invalid user comsey from 189.172.41.180 port 33530 Nov 11 17:14:38 localhost sshd[2606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.172.41.180 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=189.172.41.180 |
2019-11-13 16:04:33 |
| 159.203.82.104 | attack | Nov 13 03:27:28 ws19vmsma01 sshd[120782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.82.104 Nov 13 03:27:29 ws19vmsma01 sshd[120782]: Failed password for invalid user keely from 159.203.82.104 port 49660 ssh2 ... |
2019-11-13 16:38:54 |
| 82.251.135.244 | attack | Invalid user clamav from 82.251.135.244 port 39604 |
2019-11-13 16:15:28 |
| 49.235.216.174 | attack | Nov 13 08:14:11 dedicated sshd[18696]: Invalid user leer from 49.235.216.174 port 40514 |
2019-11-13 16:30:52 |
| 51.4.195.188 | attackspam | Nov 13 04:37:11 firewall sshd[8783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.4.195.188 Nov 13 04:37:11 firewall sshd[8783]: Invalid user test from 51.4.195.188 Nov 13 04:37:13 firewall sshd[8783]: Failed password for invalid user test from 51.4.195.188 port 44672 ssh2 ... |
2019-11-13 16:30:31 |
| 197.210.114.42 | attackbots | Lines containing failures of 197.210.114.42 Oct 17 17:36:01 server-name sshd[5815]: Invalid user admin from 197.210.114.42 port 39552 Oct 17 17:36:02 server-name sshd[5815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.210.114.42 Oct 17 17:36:04 server-name sshd[5815]: Failed password for invalid user admin from 197.210.114.42 port 39552 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=197.210.114.42 |
2019-11-13 16:29:30 |
| 2a01:4f8:10b:129b::2 | attack | xmlrpc attack |
2019-11-13 16:35:23 |
| 139.198.189.36 | attackbots | Nov 13 06:30:42 thevastnessof sshd[25752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.36 ... |
2019-11-13 16:20:21 |
| 84.33.83.107 | attackspam | port 23 attempt blocked |
2019-11-13 16:45:30 |
| 182.61.55.239 | attack | Nov 12 22:08:36 hpm sshd\[17823\]: Invalid user S150Y47000293 from 182.61.55.239 Nov 12 22:08:36 hpm sshd\[17823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.55.239 Nov 12 22:08:38 hpm sshd\[17823\]: Failed password for invalid user S150Y47000293 from 182.61.55.239 port 37626 ssh2 Nov 12 22:12:51 hpm sshd\[18286\]: Invalid user party from 182.61.55.239 Nov 12 22:12:51 hpm sshd\[18286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.55.239 |
2019-11-13 16:20:41 |
| 51.68.198.75 | attackbotsspam | $f2bV_matches |
2019-11-13 16:10:08 |
| 78.177.29.86 | attack | Automatic report - Port Scan Attack |
2019-11-13 16:40:17 |
| 163.172.199.18 | attackspam | 163.172.199.18 - - [13/Nov/2019:07:27:27 +0100] "POST /wp-login.php HTTP/1.1" 200 3126 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 163.172.199.18 - - [13/Nov/2019:07:27:27 +0100] "POST /wp-login.php HTTP/1.1" 200 3105 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-11-13 16:40:47 |
| 46.21.54.224 | attack | port scan and connect, tcp 23 (telnet) |
2019-11-13 16:11:21 |