城市(city): unknown
省份(region): unknown
国家(country): Multicast Address
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 234.39.121.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51339
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;234.39.121.44. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025013100 1800 900 604800 86400
;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 14:38:27 CST 2025
;; MSG SIZE rcvd: 106
Host 44.121.39.234.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 44.121.39.234.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 138.197.32.150 | attack | SSH brute-force: detected 6 distinct usernames within a 24-hour window. |
2020-03-04 08:52:22 |
| 178.128.211.39 | attackbots | [ssh] SSH attack |
2020-03-04 08:43:09 |
| 210.56.112.5 | attack | 2020-03-03T23:08:11.571669scmdmz1 sshd[24589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.56.112.5 2020-03-03T23:08:11.412294scmdmz1 sshd[24589]: Invalid user pi from 210.56.112.5 port 61276 2020-03-03T23:08:13.410284scmdmz1 sshd[24589]: Failed password for invalid user pi from 210.56.112.5 port 61276 ssh2 ... |
2020-03-04 08:24:26 |
| 142.93.127.16 | attackbots | Mar 4 00:39:43 l02a sshd[28543]: Invalid user customhostorg from 142.93.127.16 Mar 4 00:39:43 l02a sshd[28543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.127.16 Mar 4 00:39:43 l02a sshd[28543]: Invalid user customhostorg from 142.93.127.16 Mar 4 00:39:46 l02a sshd[28543]: Failed password for invalid user customhostorg from 142.93.127.16 port 33736 ssh2 |
2020-03-04 08:40:36 |
| 106.12.109.173 | attackspam | Mar 4 05:44:58 gw1 sshd[8624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.109.173 Mar 4 05:45:01 gw1 sshd[8624]: Failed password for invalid user narciso from 106.12.109.173 port 37582 ssh2 ... |
2020-03-04 08:58:43 |
| 34.69.143.119 | attackspam | Lines containing failures of 34.69.143.119 Mar 3 20:29:25 shared01 sshd[891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.69.143.119 user=r.r Mar 3 20:29:27 shared01 sshd[891]: Failed password for r.r from 34.69.143.119 port 53092 ssh2 Mar 3 20:29:27 shared01 sshd[891]: Received disconnect from 34.69.143.119 port 53092:11: Bye Bye [preauth] Mar 3 20:29:27 shared01 sshd[891]: Disconnected from authenticating user r.r 34.69.143.119 port 53092 [preauth] Mar 3 20:46:43 shared01 sshd[10703]: Invalid user doug from 34.69.143.119 port 42578 Mar 3 20:46:43 shared01 sshd[10703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.69.143.119 Mar 3 20:46:45 shared01 sshd[10703]: Failed password for invalid user doug from 34.69.143.119 port 42578 ssh2 Mar 3 20:46:45 shared01 sshd[10703]: Received disconnect from 34.69.143.119 port 42578:11: Bye Bye [preauth] Mar 3 20:46:45 shared01 sshd[1........ ------------------------------ |
2020-03-04 08:55:38 |
| 119.27.165.134 | attack | Mar 3 13:37:35 hanapaa sshd\[10850\]: Invalid user gzx from 119.27.165.134 Mar 3 13:37:35 hanapaa sshd\[10850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.27.165.134 Mar 3 13:37:37 hanapaa sshd\[10850\]: Failed password for invalid user gzx from 119.27.165.134 port 60058 ssh2 Mar 3 13:45:02 hanapaa sshd\[11867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.27.165.134 user=mysql Mar 3 13:45:04 hanapaa sshd\[11867\]: Failed password for mysql from 119.27.165.134 port 47381 ssh2 |
2020-03-04 08:23:14 |
| 110.16.76.213 | attackbotsspam | DATE:2020-03-04 01:09:49, IP:110.16.76.213, PORT:ssh SSH brute force auth (docker-dc) |
2020-03-04 08:49:48 |
| 92.63.194.81 | attackbots | ET DROP Dshield Block Listed Source group 1 - port: 1723 proto: TCP cat: Misc Attack |
2020-03-04 08:54:22 |
| 152.136.112.18 | attackbotsspam | Brute-force attempt banned |
2020-03-04 08:43:38 |
| 192.99.4.145 | attackspam | Mar 3 19:25:37 NPSTNNYC01T sshd[2221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.4.145 Mar 3 19:25:39 NPSTNNYC01T sshd[2221]: Failed password for invalid user trung from 192.99.4.145 port 34584 ssh2 Mar 3 19:33:59 NPSTNNYC01T sshd[2781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.4.145 ... |
2020-03-04 08:45:11 |
| 111.229.33.138 | attack | 2020-03-04T01:18:42.450295vps751288.ovh.net sshd\[14158\]: Invalid user www from 111.229.33.138 port 53092 2020-03-04T01:18:42.459256vps751288.ovh.net sshd\[14158\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.33.138 2020-03-04T01:18:44.357243vps751288.ovh.net sshd\[14158\]: Failed password for invalid user www from 111.229.33.138 port 53092 ssh2 2020-03-04T01:23:41.101634vps751288.ovh.net sshd\[14234\]: Invalid user kafka from 111.229.33.138 port 52188 2020-03-04T01:23:41.109670vps751288.ovh.net sshd\[14234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.33.138 |
2020-03-04 08:35:05 |
| 190.191.163.43 | attackbotsspam | 2020-03-04T00:48:20.487172shield sshd\[8237\]: Invalid user jack from 190.191.163.43 port 35522 2020-03-04T00:48:20.493969shield sshd\[8237\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.191.163.43 2020-03-04T00:48:22.145986shield sshd\[8237\]: Failed password for invalid user jack from 190.191.163.43 port 35522 ssh2 2020-03-04T00:54:06.675729shield sshd\[9162\]: Invalid user gameserver from 190.191.163.43 port 42024 2020-03-04T00:54:06.679660shield sshd\[9162\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.191.163.43 |
2020-03-04 08:58:22 |
| 95.110.229.194 | attackbotsspam | SSH Brute Force |
2020-03-04 08:51:08 |
| 43.226.150.153 | attack | Lines containing failures of 43.226.150.153 Mar 3 20:25:49 kmh-vmh-001-fsn05 sshd[7261]: Invalid user zju from 43.226.150.153 port 48702 Mar 3 20:25:49 kmh-vmh-001-fsn05 sshd[7261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.150.153 Mar 3 20:25:51 kmh-vmh-001-fsn05 sshd[7261]: Failed password for invalid user zju from 43.226.150.153 port 48702 ssh2 Mar 3 20:25:52 kmh-vmh-001-fsn05 sshd[7261]: Received disconnect from 43.226.150.153 port 48702:11: Bye Bye [preauth] Mar 3 20:25:52 kmh-vmh-001-fsn05 sshd[7261]: Disconnected from invalid user zju 43.226.150.153 port 48702 [preauth] Mar 3 20:39:14 kmh-vmh-001-fsn05 sshd[10283]: Invalid user nexus from 43.226.150.153 port 35554 Mar 3 20:39:14 kmh-vmh-001-fsn05 sshd[10283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.150.153 Mar 3 20:39:17 kmh-vmh-001-fsn05 sshd[10283]: Failed password for invalid user nexus from 43......... ------------------------------ |
2020-03-04 08:51:51 |