城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 214.42.235.137
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36414
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;214.42.235.137. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400
;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 08:10:05 CST 2025
;; MSG SIZE rcvd: 107Host 137.235.42.214.in-addr.arpa not found: 2(SERVFAIL)
server can't find 214.42.235.137.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 159.203.139.128 | attackspambots | Aug 17 18:55:17 aiointranet sshd\[30103\]: Invalid user ccradio from 159.203.139.128 Aug 17 18:55:17 aiointranet sshd\[30103\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128 Aug 17 18:55:19 aiointranet sshd\[30103\]: Failed password for invalid user ccradio from 159.203.139.128 port 36974 ssh2 Aug 17 18:59:20 aiointranet sshd\[30442\]: Invalid user centos from 159.203.139.128 Aug 17 18:59:20 aiointranet sshd\[30442\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128 |
2019-08-18 14:38:31 |
| 186.249.217.35 | attackbotsspam | $f2bV_matches |
2019-08-18 14:32:24 |
| 51.68.174.248 | attack | Splunk® : Brute-Force login attempt on SSH: Aug 17 23:21:02 testbed sshd[10545]: Failed password for invalid user mehdi from 51.68.174.248 port 51652 ssh2 |
2019-08-18 14:28:20 |
| 165.22.246.228 | attackbotsspam | Aug 17 20:58:25 lcdev sshd\[25226\]: Invalid user simon from 165.22.246.228 Aug 17 20:58:25 lcdev sshd\[25226\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.246.228 Aug 17 20:58:26 lcdev sshd\[25226\]: Failed password for invalid user simon from 165.22.246.228 port 34222 ssh2 Aug 17 21:03:44 lcdev sshd\[25696\]: Invalid user timmy from 165.22.246.228 Aug 17 21:03:44 lcdev sshd\[25696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.246.228 |
2019-08-18 15:06:42 |
| 91.121.142.225 | attackspam | Aug 17 17:18:17 wbs sshd\[22090\]: Invalid user kcs from 91.121.142.225 Aug 17 17:18:17 wbs sshd\[22090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns356732.ip-91-121-142.eu Aug 17 17:18:19 wbs sshd\[22090\]: Failed password for invalid user kcs from 91.121.142.225 port 55346 ssh2 Aug 17 17:22:33 wbs sshd\[23074\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns356732.ip-91-121-142.eu user=root Aug 17 17:22:35 wbs sshd\[23074\]: Failed password for root from 91.121.142.225 port 45790 ssh2 |
2019-08-18 15:04:19 |
| 187.163.116.92 | attack | Aug 17 20:47:09 hcbb sshd\[22776\]: Invalid user rudolph from 187.163.116.92 Aug 17 20:47:09 hcbb sshd\[22776\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187-163-116-92.static.axtel.net Aug 17 20:47:11 hcbb sshd\[22776\]: Failed password for invalid user rudolph from 187.163.116.92 port 43592 ssh2 Aug 17 20:51:31 hcbb sshd\[23170\]: Invalid user FB from 187.163.116.92 Aug 17 20:51:31 hcbb sshd\[23170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187-163-116-92.static.axtel.net |
2019-08-18 14:54:21 |
| 185.125.113.65 | attackbotsspam | [portscan] Port scan |
2019-08-18 14:21:42 |
| 195.154.51.180 | attack | $f2bV_matches |
2019-08-18 15:02:29 |
| 118.25.214.4 | attack | Invalid user ubuntu from 118.25.214.4 port 50812 |
2019-08-18 14:18:38 |
| 208.117.223.98 | attack | Sent mail to target address hacked/leaked from abandonia in 2016 |
2019-08-18 14:59:39 |
| 195.43.189.10 | attackbotsspam | $f2bV_matches |
2019-08-18 14:54:41 |
| 54.39.104.30 | attackspambots | Aug 18 06:17:44 hb sshd\[24990\]: Invalid user rob from 54.39.104.30 Aug 18 06:17:44 hb sshd\[24990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns558643.ip-54-39-104.net Aug 18 06:17:46 hb sshd\[24990\]: Failed password for invalid user rob from 54.39.104.30 port 44620 ssh2 Aug 18 06:21:58 hb sshd\[25363\]: Invalid user az from 54.39.104.30 Aug 18 06:21:58 hb sshd\[25363\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns558643.ip-54-39-104.net |
2019-08-18 14:31:05 |
| 121.199.68.112 | attackspambots | Splunk® : port scan detected: Aug 17 23:06:22 testbed kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:c0:42:d0:39:2c:30:08:00 SRC=121.199.68.112 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=42 ID=61340 PROTO=TCP SPT=4442 DPT=8080 WINDOW=3319 RES=0x00 SYN URGP=0 |
2019-08-18 14:37:58 |
| 14.161.18.58 | attackbots | SMB Server BruteForce Attack |
2019-08-18 14:45:01 |
| 54.39.187.138 | attackbotsspam | Aug 18 07:03:09 server sshd\[17803\]: User root from 54.39.187.138 not allowed because listed in DenyUsers Aug 18 07:03:09 server sshd\[17803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.187.138 user=root Aug 18 07:03:11 server sshd\[17803\]: Failed password for invalid user root from 54.39.187.138 port 43010 ssh2 Aug 18 07:07:20 server sshd\[31807\]: Invalid user test from 54.39.187.138 port 37589 Aug 18 07:07:20 server sshd\[31807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.187.138 |
2019-08-18 14:40:38 |