城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 242.231.154.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27832
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;242.231.154.142. IN A
;; AUTHORITY SECTION:
. 150 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022010900 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 09 14:43:14 CST 2022
;; MSG SIZE rcvd: 108
Host 142.154.231.242.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 142.154.231.242.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 188.92.75.248 | attackspambots | detected by Fail2Ban |
2019-10-13 04:53:48 |
| 185.47.52.131 | attack | 10/12/2019-16:08:35.639737 185.47.52.131 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433 |
2019-10-13 04:23:07 |
| 103.72.163.222 | attackspam | Oct 12 20:44:04 game-panel sshd[23901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.72.163.222 Oct 12 20:44:05 game-panel sshd[23901]: Failed password for invalid user Losenord12345 from 103.72.163.222 port 35681 ssh2 Oct 12 20:48:53 game-panel sshd[24032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.72.163.222 |
2019-10-13 04:56:45 |
| 13.69.168.250 | attack | Oct 12 06:03:26 foo sshd[2874]: Did not receive identification string from 13.69.168.250 Oct 12 06:05:53 foo sshd[2896]: Invalid user kafka from 13.69.168.250 Oct 12 06:05:53 foo sshd[2896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.69.168.250 Oct 12 06:05:56 foo sshd[2896]: Failed password for invalid user kafka from 13.69.168.250 port 35942 ssh2 Oct 12 06:05:56 foo sshd[2896]: Received disconnect from 13.69.168.250: 11: Normal Shutdown, Thank you for playing [preauth] Oct 12 06:06:27 foo sshd[2915]: Invalid user kafka from 13.69.168.250 Oct 12 06:06:27 foo sshd[2915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.69.168.250 Oct 12 06:06:29 foo sshd[2915]: Failed password for invalid user kafka from 13.69.168.250 port 36698 ssh2 Oct 12 06:06:29 foo sshd[2915]: Received disconnect from 13.69.168.250: 11: Normal Shutdown, Thank you for playing [preauth] Oct 12 06:07:02 foo ssh........ ------------------------------- |
2019-10-13 04:44:27 |
| 164.132.56.243 | attackbots | Oct 12 16:34:10 ny01 sshd[7978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.56.243 Oct 12 16:34:12 ny01 sshd[7978]: Failed password for invalid user 123Summer from 164.132.56.243 port 40951 ssh2 Oct 12 16:37:54 ny01 sshd[8342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.56.243 |
2019-10-13 04:51:16 |
| 176.111.215.88 | attackspam | slow and persistent scanner |
2019-10-13 04:22:17 |
| 42.85.26.195 | attack | Unauthorised access (Oct 12) SRC=42.85.26.195 LEN=40 TTL=49 ID=32431 TCP DPT=8080 WINDOW=19911 SYN Unauthorised access (Oct 10) SRC=42.85.26.195 LEN=40 TTL=49 ID=39765 TCP DPT=8080 WINDOW=50783 SYN Unauthorised access (Oct 10) SRC=42.85.26.195 LEN=40 TTL=49 ID=9208 TCP DPT=8080 WINDOW=50783 SYN |
2019-10-13 04:33:28 |
| 111.29.27.97 | attack | Oct 12 18:00:00 vmd17057 sshd\[15694\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.29.27.97 user=root Oct 12 18:00:02 vmd17057 sshd\[15694\]: Failed password for root from 111.29.27.97 port 33162 ssh2 Oct 12 18:06:10 vmd17057 sshd\[16247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.29.27.97 user=root ... |
2019-10-13 05:01:09 |
| 186.103.197.99 | attackbots | Port 1433 Scan |
2019-10-13 04:56:04 |
| 130.105.239.154 | attackspam | Oct 12 16:02:42 vmanager6029 sshd\[15200\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.105.239.154 user=root Oct 12 16:02:44 vmanager6029 sshd\[15200\]: Failed password for root from 130.105.239.154 port 43858 ssh2 Oct 12 16:07:50 vmanager6029 sshd\[15281\]: Invalid user 123 from 130.105.239.154 port 33958 |
2019-10-13 04:44:55 |
| 77.42.85.186 | attackspambots | Automatic report - Port Scan Attack |
2019-10-13 04:30:08 |
| 192.227.252.24 | attackbots | Oct 12 20:30:26 root sshd[10437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.24 Oct 12 20:30:28 root sshd[10437]: Failed password for invalid user vfr4BGT% from 192.227.252.24 port 48326 ssh2 Oct 12 20:34:46 root sshd[10471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.252.24 ... |
2019-10-13 04:31:09 |
| 54.37.154.254 | attackbotsspam | Invalid user 123 from 54.37.154.254 port 48809 |
2019-10-13 04:37:35 |
| 1.183.152.253 | attack | Unsolicited bulk porn & phishing - varying ISPs (primarily Chinanet); repetitive redirects from blacklisted IP 92.63.192.124 & .151; spam volume up to 15/day. Unsolicited bulk spam - u-gun.co.jp, CHINANET NeiMengGu province network - 1.183.152.253 Sender domain hekimpor.com = 212.252.63.11 Tellcom Customer LAN Repetitive reply-to in this spam series. Reply-To: nanikarige@yahoo.com Spam series change: no phishing redirect spam link. Malicious attachment - Outlook blocked access to unsafe attachment: 22.jpg |
2019-10-13 04:46:27 |
| 139.199.88.93 | attack | Oct 12 18:01:41 microserver sshd[47731]: Invalid user 321 from 139.199.88.93 port 44264 Oct 12 18:01:41 microserver sshd[47731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.88.93 Oct 12 18:01:42 microserver sshd[47731]: Failed password for invalid user 321 from 139.199.88.93 port 44264 ssh2 Oct 12 18:07:46 microserver sshd[48492]: Invalid user Genius@123 from 139.199.88.93 port 54616 Oct 12 18:07:46 microserver sshd[48492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.88.93 Oct 12 18:20:28 microserver sshd[50324]: Invalid user P4rol4@1 from 139.199.88.93 port 47128 Oct 12 18:20:28 microserver sshd[50324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.88.93 Oct 12 18:20:30 microserver sshd[50324]: Failed password for invalid user P4rol4@1 from 139.199.88.93 port 47128 ssh2 Oct 12 18:26:33 microserver sshd[51095]: Invalid user Premier@123 from 139.199.88.93 por |
2019-10-13 04:47:27 |