城市(city): unknown
省份(region): unknown
国家(country): The Netherlands
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 194.34.19.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45070
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;194.34.19.42. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021300 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 13 19:36:17 CST 2025
;; MSG SIZE rcvd: 105
Host 42.19.34.194.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 42.19.34.194.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 68.183.122.146 | attack | fire |
2019-08-09 08:45:40 |
| 5.188.206.250 | attackspam | Aug 9 02:21:23 h2177944 kernel: \[3633904.168528\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.206.250 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=7964 PROTO=TCP SPT=49107 DPT=5425 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 9 02:22:02 h2177944 kernel: \[3633942.653784\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.206.250 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=30395 PROTO=TCP SPT=49107 DPT=7845 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 9 02:25:17 h2177944 kernel: \[3634137.540053\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.206.250 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=36489 PROTO=TCP SPT=49107 DPT=7490 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 9 02:29:44 h2177944 kernel: \[3634404.667458\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.206.250 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=11410 PROTO=TCP SPT=49107 DPT=7443 WINDOW=1024 RES=0x00 SYN URGP=0 Aug 9 02:33:01 h2177944 kernel: \[3634601.382155\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.206.250 DST=85.214.117.9 |
2019-08-09 08:51:41 |
| 66.70.130.153 | attackbots | 2019-08-09T00:49:47.666744centos sshd\[1085\]: Invalid user ur from 66.70.130.153 port 57508 2019-08-09T00:49:47.671036centos sshd\[1085\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip153.ip-66-70-130.net 2019-08-09T00:49:50.188576centos sshd\[1085\]: Failed password for invalid user ur from 66.70.130.153 port 57508 ssh2 |
2019-08-09 08:56:36 |
| 63.142.101.182 | attack | fire |
2019-08-09 08:53:10 |
| 178.33.233.54 | attackbotsspam | Aug 9 02:43:38 SilenceServices sshd[22489]: Failed password for root from 178.33.233.54 port 55564 ssh2 Aug 9 02:47:33 SilenceServices sshd[26934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.233.54 Aug 9 02:47:35 SilenceServices sshd[26934]: Failed password for invalid user testuser from 178.33.233.54 port 52508 ssh2 |
2019-08-09 08:48:37 |
| 134.209.155.239 | attackbotsspam | Aug 9 01:02:13 server2 sshd\[18531\]: Invalid user fake from 134.209.155.239 Aug 9 01:02:15 server2 sshd\[18535\]: Invalid user support from 134.209.155.239 Aug 9 01:02:16 server2 sshd\[18537\]: Invalid user ubnt from 134.209.155.239 Aug 9 01:02:17 server2 sshd\[18539\]: Invalid user admin from 134.209.155.239 Aug 9 01:02:19 server2 sshd\[18541\]: User root from 134.209.155.239 not allowed because not listed in AllowUsers Aug 9 01:02:20 server2 sshd\[18543\]: Invalid user admin from 134.209.155.239 |
2019-08-09 08:36:06 |
| 132.232.198.170 | attackbots | Aug 9 02:27:55 eventyay sshd[27900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.198.170 Aug 9 02:27:56 eventyay sshd[27900]: Failed password for invalid user guest from 132.232.198.170 port 33890 ssh2 Aug 9 02:33:27 eventyay sshd[29133]: Failed password for root from 132.232.198.170 port 57974 ssh2 ... |
2019-08-09 08:40:28 |
| 198.251.82.92 | attack | Aug 9 03:17:36 www sshd\[8078\]: Invalid user eyesblu from 198.251.82.92 Aug 9 03:17:36 www sshd\[8078\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.251.82.92 Aug 9 03:17:38 www sshd\[8078\]: Failed password for invalid user eyesblu from 198.251.82.92 port 39946 ssh2 ... |
2019-08-09 08:31:57 |
| 68.183.106.121 | attackbots | fire |
2019-08-09 08:46:37 |
| 71.34.149.153 | attack | fire |
2019-08-09 08:38:37 |
| 218.92.0.194 | attack | Aug 9 02:14:16 eventyay sshd[24420]: Failed password for root from 218.92.0.194 port 51051 ssh2 Aug 9 02:14:18 eventyay sshd[24420]: Failed password for root from 218.92.0.194 port 51051 ssh2 Aug 9 02:14:21 eventyay sshd[24420]: Failed password for root from 218.92.0.194 port 51051 ssh2 ... |
2019-08-09 08:15:21 |
| 77.20.201.235 | attackbotsspam | fire |
2019-08-09 08:27:29 |
| 52.151.31.130 | attack | Aug 9 02:42:36 MainVPS sshd[12392]: Invalid user deb123 from 52.151.31.130 port 33168 Aug 9 02:42:36 MainVPS sshd[12392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.151.31.130 Aug 9 02:42:36 MainVPS sshd[12392]: Invalid user deb123 from 52.151.31.130 port 33168 Aug 9 02:42:38 MainVPS sshd[12392]: Failed password for invalid user deb123 from 52.151.31.130 port 33168 ssh2 Aug 9 02:47:28 MainVPS sshd[12747]: Invalid user sgeadmin from 52.151.31.130 port 58378 ... |
2019-08-09 08:53:45 |
| 103.207.11.12 | attackbotsspam | Aug 9 06:07:56 vibhu-HP-Z238-Microtower-Workstation sshd\[26959\]: Invalid user dkauffman from 103.207.11.12 Aug 9 06:07:56 vibhu-HP-Z238-Microtower-Workstation sshd\[26959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.207.11.12 Aug 9 06:07:58 vibhu-HP-Z238-Microtower-Workstation sshd\[26959\]: Failed password for invalid user dkauffman from 103.207.11.12 port 46634 ssh2 Aug 9 06:12:29 vibhu-HP-Z238-Microtower-Workstation sshd\[27146\]: Invalid user ngit from 103.207.11.12 Aug 9 06:12:29 vibhu-HP-Z238-Microtower-Workstation sshd\[27146\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.207.11.12 ... |
2019-08-09 08:45:12 |
| 51.255.168.127 | attackbotsspam | Automatic report - Banned IP Access |
2019-08-09 08:41:14 |