城市(city): unknown
省份(region): unknown
国家(country): Brazil
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 189.21.129.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29560
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;189.21.129.158. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021400 1800 900 604800 86400
;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 14:14:02 CST 2025
;; MSG SIZE rcvd: 107Host 158.129.21.189.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 158.129.21.189.in-addr.arpa: SERVFAIL
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 54.38.241.162 | attackbots | Sep 3 08:56:55 auw2 sshd\[26271\]: Invalid user Jordan from 54.38.241.162 Sep 3 08:56:55 auw2 sshd\[26271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.ip-54-38-241.eu Sep 3 08:56:57 auw2 sshd\[26271\]: Failed password for invalid user Jordan from 54.38.241.162 port 48430 ssh2 Sep 3 09:05:09 auw2 sshd\[27090\]: Invalid user test from 54.38.241.162 Sep 3 09:05:09 auw2 sshd\[27090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.ip-54-38-241.eu |
2019-09-04 03:10:48 |
| 103.1.94.21 | attackspam | Sep 3 15:03:53 plusreed sshd[2503]: Invalid user tanvir from 103.1.94.21 Sep 3 15:03:53 plusreed sshd[2503]: Invalid user tanvir from 103.1.94.21 Sep 3 15:03:53 plusreed sshd[2503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.1.94.21 Sep 3 15:03:53 plusreed sshd[2503]: Invalid user tanvir from 103.1.94.21 Sep 3 15:03:55 plusreed sshd[2503]: Failed password for invalid user tanvir from 103.1.94.21 port 41714 ssh2 ... |
2019-09-04 03:13:20 |
| 94.176.76.230 | attack | (Sep 3) LEN=40 TTL=245 ID=56969 DF TCP DPT=23 WINDOW=14600 SYN (Sep 3) LEN=40 TTL=245 ID=31074 DF TCP DPT=23 WINDOW=14600 SYN (Sep 3) LEN=40 TTL=245 ID=4484 DF TCP DPT=23 WINDOW=14600 SYN (Sep 3) LEN=40 TTL=245 ID=25598 DF TCP DPT=23 WINDOW=14600 SYN (Sep 3) LEN=40 TTL=245 ID=28192 DF TCP DPT=23 WINDOW=14600 SYN (Sep 3) LEN=40 TTL=245 ID=59969 DF TCP DPT=23 WINDOW=14600 SYN (Sep 3) LEN=40 TTL=245 ID=32876 DF TCP DPT=23 WINDOW=14600 SYN (Sep 3) LEN=40 TTL=245 ID=34036 DF TCP DPT=23 WINDOW=14600 SYN (Sep 3) LEN=40 TTL=245 ID=54117 DF TCP DPT=23 WINDOW=14600 SYN (Sep 3) LEN=40 TTL=245 ID=49738 DF TCP DPT=23 WINDOW=14600 SYN (Sep 3) LEN=40 TTL=245 ID=43738 DF TCP DPT=23 WINDOW=14600 SYN (Sep 2) LEN=40 TTL=245 ID=42029 DF TCP DPT=23 WINDOW=14600 SYN (Sep 2) LEN=40 TTL=245 ID=48653 DF TCP DPT=23 WINDOW=14600 SYN (Sep 2) LEN=40 TTL=245 ID=13177 DF TCP DPT=23 WINDOW=14600 SYN (Sep 2) LEN=40 TTL=245 ID=32055 DF TCP DPT=23 WINDOW=14600 S... |
2019-09-04 03:12:36 |
| 104.42.47.225 | attackbotsspam | Brute forcing RDP port 3389 |
2019-09-04 02:46:26 |
| 45.231.132.134 | attack | Sep 3 20:33:28 dev0-dcfr-rnet sshd[25414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.231.132.134 Sep 3 20:33:30 dev0-dcfr-rnet sshd[25414]: Failed password for invalid user ftpuser from 45.231.132.134 port 41412 ssh2 Sep 3 20:41:10 dev0-dcfr-rnet sshd[25539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.231.132.134 |
2019-09-04 02:51:36 |
| 34.67.85.179 | attackbots | Sep 3 18:51:27 ip-172-31-1-72 sshd\[24159\]: Invalid user joey from 34.67.85.179 Sep 3 18:51:27 ip-172-31-1-72 sshd\[24159\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.67.85.179 Sep 3 18:51:29 ip-172-31-1-72 sshd\[24159\]: Failed password for invalid user joey from 34.67.85.179 port 44480 ssh2 Sep 3 18:55:10 ip-172-31-1-72 sshd\[24232\]: Invalid user alfredo from 34.67.85.179 Sep 3 18:55:10 ip-172-31-1-72 sshd\[24232\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.67.85.179 |
2019-09-04 03:18:20 |
| 81.22.45.71 | attackbotsspam | Sep 3 20:50:04 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.71 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=11123 PROTO=TCP SPT=50201 DPT=3389 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-09-04 02:51:00 |
| 201.215.66.11 | attack | Automatic report |
2019-09-04 03:06:20 |
| 51.83.45.151 | attack | Sep 3 21:03:23 dedicated sshd[26659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.45.151 user=root Sep 3 21:03:25 dedicated sshd[26659]: Failed password for root from 51.83.45.151 port 33222 ssh2 |
2019-09-04 03:13:45 |
| 187.32.80.11 | attackbots | Jul 31 14:26:23 Server10 sshd[9071]: Invalid user Nicole from 187.32.80.11 port 46954 Jul 31 14:26:23 Server10 sshd[9071]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.32.80.11 Jul 31 14:26:25 Server10 sshd[9071]: Failed password for invalid user Nicole from 187.32.80.11 port 46954 ssh2 Jul 31 14:31:44 Server10 sshd[16240]: Invalid user teamspeak from 187.32.80.11 port 39726 Jul 31 14:31:44 Server10 sshd[16240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.32.80.11 Jul 31 14:31:46 Server10 sshd[16240]: Failed password for invalid user teamspeak from 187.32.80.11 port 39726 ssh2 |
2019-09-04 03:17:54 |
| 218.98.26.163 | attack | Sep 3 10:54:31 [HOSTNAME] sshd[32441]: User **removed** from 218.98.26.163 not allowed because not listed in AllowUsers Sep 3 18:36:21 [HOSTNAME] sshd[21305]: User **removed** from 218.98.26.163 not allowed because not listed in AllowUsers Sep 3 19:41:47 [HOSTNAME] sshd[28915]: User **removed** from 218.98.26.163 not allowed because not listed in AllowUsers ... |
2019-09-04 02:52:58 |
| 80.211.171.195 | attackspambots | Sep 3 14:58:54 plusreed sshd[1118]: Invalid user 123456 from 80.211.171.195 ... |
2019-09-04 03:10:26 |
| 134.209.193.141 | attack | Sep 3 21:33:22 intra sshd\[55752\]: Invalid user oracle from 134.209.193.141Sep 3 21:33:25 intra sshd\[55752\]: Failed password for invalid user oracle from 134.209.193.141 port 60254 ssh2Sep 3 21:37:17 intra sshd\[55786\]: Invalid user renee from 134.209.193.141Sep 3 21:37:19 intra sshd\[55786\]: Failed password for invalid user renee from 134.209.193.141 port 48294 ssh2Sep 3 21:41:16 intra sshd\[55851\]: Invalid user dave from 134.209.193.141Sep 3 21:41:18 intra sshd\[55851\]: Failed password for invalid user dave from 134.209.193.141 port 36340 ssh2 ... |
2019-09-04 02:45:52 |
| 203.198.185.113 | attackbots | Sep 3 14:36:00 ny01 sshd[24066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.198.185.113 Sep 3 14:36:02 ny01 sshd[24066]: Failed password for invalid user theodora from 203.198.185.113 port 37336 ssh2 Sep 3 14:41:15 ny01 sshd[24954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.198.185.113 |
2019-09-04 02:48:57 |
| 37.187.25.138 | attackspambots | Sep 3 20:40:58 herz-der-gamer sshd[11215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.25.138 user=root Sep 3 20:41:01 herz-der-gamer sshd[11215]: Failed password for root from 37.187.25.138 port 55772 ssh2 ... |
2019-09-04 03:00:40 |