城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 194.39.70.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64472
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;194.39.70.112. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025022802 1800 900 604800 86400
;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 01 10:56:26 CST 2025
;; MSG SIZE rcvd: 106b'Host 112.70.39.194.in-addr.arpa not found: 2(SERVFAIL)
';; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 112.70.39.194.in-addr.arpa: SERVFAIL
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 51.75.24.200 | attackspam | 2020-09-28T16:24:33.001832luisaranguren sshd[1338367]: Invalid user mon from 51.75.24.200 port 52378 2020-09-28T16:24:35.165672luisaranguren sshd[1338367]: Failed password for invalid user mon from 51.75.24.200 port 52378 ssh2 ... |
2020-09-28 22:03:11 |
| 95.217.234.23 | attack | Invalid user ftp1 from 95.217.234.23 port 25208 |
2020-09-28 22:19:01 |
| 119.29.173.247 | attackbotsspam | Invalid user ryan from 119.29.173.247 port 44940 |
2020-09-28 21:58:07 |
| 152.170.65.133 | attack | (sshd) Failed SSH login from 152.170.65.133 (AR/Argentina/133-65-170-152.fibertel.com.ar): 5 in the last 3600 secs |
2020-09-28 22:12:23 |
| 37.187.54.67 | attack | 37.187.54.67 (FR/France/-), 7 distributed sshd attacks on account [test] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 28 14:22:12 server sshd[20440]: Failed password for invalid user test from 51.75.28.25 port 41084 ssh2 Sep 28 14:23:41 server sshd[20676]: Invalid user test from 37.187.54.67 Sep 28 14:23:43 server sshd[20676]: Failed password for invalid user test from 37.187.54.67 port 45431 ssh2 Sep 28 14:22:10 server sshd[20440]: Invalid user test from 51.75.28.25 Sep 28 14:53:10 server sshd[25379]: Invalid user test from 58.56.164.66 Sep 28 14:42:56 server sshd[23629]: Invalid user test from 119.45.208.191 Sep 28 14:42:58 server sshd[23629]: Failed password for invalid user test from 119.45.208.191 port 40792 ssh2 IP Addresses Blocked: 51.75.28.25 (FR/France/-) |
2020-09-28 22:27:25 |
| 180.76.55.119 | attack | Time: Sun Sep 27 01:17:43 2020 +0000 IP: 180.76.55.119 (CN/China/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 27 01:09:07 activeserver sshd[363]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.55.119 user=git Sep 27 01:09:09 activeserver sshd[363]: Failed password for git from 180.76.55.119 port 39794 ssh2 Sep 27 01:14:15 activeserver sshd[15264]: Invalid user qbtuser from 180.76.55.119 port 57994 Sep 27 01:14:17 activeserver sshd[15264]: Failed password for invalid user qbtuser from 180.76.55.119 port 57994 ssh2 Sep 27 01:17:41 activeserver sshd[25396]: Invalid user joao from 180.76.55.119 port 41904 |
2020-09-28 22:13:33 |
| 45.248.68.153 | attackbotsspam | Sep 28 15:51:27 melroy-server sshd[29174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.248.68.153 Sep 28 15:51:29 melroy-server sshd[29174]: Failed password for invalid user ircd from 45.248.68.153 port 52602 ssh2 ... |
2020-09-28 22:06:00 |
| 222.186.173.142 | attackbots | SSH login attempts. |
2020-09-28 22:23:01 |
| 52.13.201.144 | attackspam | Time: Sun Sep 27 14:35:47 2020 +0000 IP: 52.13.201.144 (US/United States/ec2-52-13-201-144.us-west-2.compute.amazonaws.com) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 27 14:28:35 3 sshd[3144]: Invalid user bitnami from 52.13.201.144 port 48248 Sep 27 14:28:37 3 sshd[3144]: Failed password for invalid user bitnami from 52.13.201.144 port 48248 ssh2 Sep 27 14:33:15 3 sshd[17099]: Invalid user cs from 52.13.201.144 port 46996 Sep 27 14:35:39 3 sshd[27226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.13.201.144 user=root Sep 27 14:35:42 3 sshd[27226]: Failed password for root from 52.13.201.144 port 46370 ssh2 |
2020-09-28 22:31:01 |
| 104.131.42.61 | attack | Sep 28 11:05:12 fhem-rasp sshd[1994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.42.61 Sep 28 11:05:15 fhem-rasp sshd[1994]: Failed password for invalid user alessandro from 104.131.42.61 port 48486 ssh2 ... |
2020-09-28 22:29:55 |
| 119.45.45.185 | attackspambots | Time: Sat Sep 26 18:23:12 2020 +0000 IP: 119.45.45.185 (CN/China/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 26 18:06:33 activeserver sshd[8205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.45.185 user=postgres Sep 26 18:06:35 activeserver sshd[8205]: Failed password for postgres from 119.45.45.185 port 48924 ssh2 Sep 26 18:11:27 activeserver sshd[19426]: Invalid user marta from 119.45.45.185 port 35380 Sep 26 18:11:29 activeserver sshd[19426]: Failed password for invalid user marta from 119.45.45.185 port 35380 ssh2 Sep 26 18:23:11 activeserver sshd[15532]: Invalid user info from 119.45.45.185 port 43880 |
2020-09-28 22:04:58 |
| 95.85.9.94 | attack | Time: Sun Sep 27 09:09:14 2020 +0000 IP: 95.85.9.94 (NL/Netherlands/dev.kepit.net) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 27 08:59:44 3 sshd[14904]: Failed password for root from 95.85.9.94 port 46195 ssh2 Sep 27 09:06:01 3 sshd[32341]: Invalid user spider from 95.85.9.94 port 57226 Sep 27 09:06:04 3 sshd[32341]: Failed password for invalid user spider from 95.85.9.94 port 57226 ssh2 Sep 27 09:09:06 3 sshd[8903]: Invalid user jessica from 95.85.9.94 port 48625 Sep 27 09:09:08 3 sshd[8903]: Failed password for invalid user jessica from 95.85.9.94 port 48625 ssh2 |
2020-09-28 21:55:40 |
| 177.67.9.133 | attackspam | DATE:2020-09-27 22:36:11, IP:177.67.9.133, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq) |
2020-09-28 22:29:25 |
| 103.26.136.173 | attack | Sep 28 09:29:30 NPSTNNYC01T sshd[10875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.26.136.173 Sep 28 09:29:32 NPSTNNYC01T sshd[10875]: Failed password for invalid user oracle from 103.26.136.173 port 53404 ssh2 Sep 28 09:34:27 NPSTNNYC01T sshd[11375]: Failed password for root from 103.26.136.173 port 34942 ssh2 ... |
2020-09-28 22:30:38 |
| 134.122.112.200 | attackbotsspam | Time: Sat Sep 26 20:41:51 2020 +0000 IP: 134.122.112.200 (US/United States/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 26 20:26:13 activeserver sshd[30966]: Invalid user myftp from 134.122.112.200 port 42976 Sep 26 20:26:16 activeserver sshd[30966]: Failed password for invalid user myftp from 134.122.112.200 port 42976 ssh2 Sep 26 20:37:19 activeserver sshd[26475]: Invalid user test from 134.122.112.200 port 53474 Sep 26 20:37:20 activeserver sshd[26475]: Failed password for invalid user test from 134.122.112.200 port 53474 ssh2 Sep 26 20:41:49 activeserver sshd[5477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.112.200 user=root |
2020-09-28 22:30:17 |