城市(city): unknown
省份(region): unknown
国家(country): Russian Federation
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 37.139.243.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13237
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;37.139.243.34. IN A
;; AUTHORITY SECTION:
. 295 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 18:37:33 CST 2022
;; MSG SIZE rcvd: 10634.243.139.37.in-addr.arpa domain name pointer 37.139.243.34.rikt.ru.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
34.243.139.37.in-addr.arpa name = 37.139.243.34.rikt.ru.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 46.146.240.185 | attack | Jul 4 03:58:11 odroid64 sshd\[18068\]: User root from 46.146.240.185 not allowed because not listed in AllowUsers Jul 4 03:58:11 odroid64 sshd\[18068\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.146.240.185 user=root ... |
2020-07-04 11:49:41 |
| 51.77.140.232 | attackspambots | 51.77.140.232 - - [04/Jul/2020:04:38:50 +0100] "POST /wp-login.php HTTP/1.1" 200 2261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.77.140.232 - - [04/Jul/2020:04:38:51 +0100] "POST /wp-login.php HTTP/1.1" 200 2234 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.77.140.232 - - [04/Jul/2020:04:38:51 +0100] "POST /wp-login.php HTTP/1.1" 200 2233 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-07-04 11:41:58 |
| 159.65.142.192 | attackbotsspam | Jul 4 03:47:23 sip sshd[831708]: Failed password for invalid user god from 159.65.142.192 port 57992 ssh2 Jul 4 03:49:28 sip sshd[831714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.142.192 user=root Jul 4 03:49:30 sip sshd[831714]: Failed password for root from 159.65.142.192 port 34360 ssh2 ... |
2020-07-04 11:53:15 |
| 112.85.42.176 | attackbotsspam | 2020-07-03T23:45:57.703532na-vps210223 sshd[24038]: Failed password for root from 112.85.42.176 port 24715 ssh2 2020-07-03T23:46:01.697264na-vps210223 sshd[24038]: Failed password for root from 112.85.42.176 port 24715 ssh2 2020-07-03T23:46:05.259982na-vps210223 sshd[24038]: Failed password for root from 112.85.42.176 port 24715 ssh2 2020-07-03T23:46:05.260217na-vps210223 sshd[24038]: error: maximum authentication attempts exceeded for root from 112.85.42.176 port 24715 ssh2 [preauth] 2020-07-03T23:46:05.260245na-vps210223 sshd[24038]: Disconnecting: Too many authentication failures [preauth] ... |
2020-07-04 11:48:42 |
| 117.94.92.164 | attack | Honeypot attack, port: 5555, PTR: PTR record not found |
2020-07-04 12:04:23 |
| 86.57.131.182 | attack | Honeypot attack, port: 445, PTR: 182-131-57-86-static.mgts.by. |
2020-07-04 11:57:27 |
| 194.26.29.32 | attackbotsspam | Port scan on 31 port(s): 3335 3371 3579 3990 4025 4095 4192 4423 4441 4448 4696 4749 4846 4891 4932 5050 5096 5193 5422 5542 5871 5918 6110 6196 6212 6338 6427 6438 6458 6495 6654 |
2020-07-04 12:05:17 |
| 186.212.157.206 | attack | 1593818066 - 07/04/2020 01:14:26 Host: 186.212.157.206/186.212.157.206 Port: 445 TCP Blocked |
2020-07-04 11:44:09 |
| 181.101.168.138 | attack | Honeypot attack, port: 445, PTR: host138.181-101-168.telecom.net.ar. |
2020-07-04 11:46:10 |
| 36.90.179.187 | attackspam | Lines containing failures of 36.90.179.187 Jul 1 05:39:33 shared01 sshd[3088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.90.179.187 user=r.r Jul 1 05:39:34 shared01 sshd[3088]: Failed password for r.r from 36.90.179.187 port 50976 ssh2 Jul 1 05:39:34 shared01 sshd[3088]: Received disconnect from 36.90.179.187 port 50976:11: Bye Bye [preauth] Jul 1 05:39:34 shared01 sshd[3088]: Disconnected from authenticating user r.r 36.90.179.187 port 50976 [preauth] Jul 1 05:43:39 shared01 sshd[4594]: Invalid user Redistoor from 36.90.179.187 port 41964 Jul 1 05:43:39 shared01 sshd[4594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.90.179.187 Jul 1 05:43:41 shared01 sshd[4594]: Failed password for invalid user Redistoor from 36.90.179.187 port 41964 ssh2 Jul 1 05:43:41 shared01 sshd[4594]: Received disconnect from 36.90.179.187 port 41964:11: Bye Bye [preauth] Jul 1 05:43:41 share........ ------------------------------ |
2020-07-04 11:59:58 |
| 27.72.195.145 | attackbots | SSH-BruteForce |
2020-07-04 12:11:02 |
| 176.107.182.236 | attackspam | 1,09-03/29 [bc01/m17] PostRequest-Spammer scoring: essen |
2020-07-04 11:46:36 |
| 49.65.244.79 | attackbotsspam | 20 attempts against mh-ssh on pluto |
2020-07-04 11:38:05 |
| 190.37.117.151 | attackbots | Honeypot attack, port: 445, PTR: 190-37-117-151.dyn.dsl.cantv.net. |
2020-07-04 11:42:51 |
| 157.47.154.134 | attackbotsspam | 1593818054 - 07/04/2020 01:14:14 Host: 157.47.154.134/157.47.154.134 Port: 445 TCP Blocked |
2020-07-04 11:55:58 |