城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 38.49.22.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25230
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;38.49.22.134. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020602 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 07:46:04 CST 2025
;; MSG SIZE rcvd: 105Host 134.22.49.38.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 134.22.49.38.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 139.59.13.223 | attack | Sep 6 00:06:21 lcprod sshd\[32242\]: Invalid user deployer from 139.59.13.223 Sep 6 00:06:21 lcprod sshd\[32242\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.223 Sep 6 00:06:23 lcprod sshd\[32242\]: Failed password for invalid user deployer from 139.59.13.223 port 45290 ssh2 Sep 6 00:10:59 lcprod sshd\[32720\]: Invalid user student1 from 139.59.13.223 Sep 6 00:10:59 lcprod sshd\[32720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.223 |
2019-09-06 21:03:49 |
| 52.162.237.22 | attackbots | Sep 6 14:28:01 SilenceServices sshd[31005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.162.237.22 Sep 6 14:28:03 SilenceServices sshd[31005]: Failed password for invalid user ubuntu from 52.162.237.22 port 33642 ssh2 Sep 6 14:33:20 SilenceServices sshd[690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.162.237.22 |
2019-09-06 20:40:43 |
| 139.209.105.236 | attackbotsspam | Unauthorised access (Sep 6) SRC=139.209.105.236 LEN=40 TTL=49 ID=17913 TCP DPT=8080 WINDOW=26096 SYN Unauthorised access (Sep 5) SRC=139.209.105.236 LEN=40 TTL=49 ID=50586 TCP DPT=8080 WINDOW=47812 SYN |
2019-09-06 20:36:44 |
| 159.203.203.65 | attackbotsspam | EventTime:Fri Sep 6 21:38:36 AEST 2019,Protocol:TCP,VendorEventCode:RT_FLOW_SESSION_DENY,TargetPort:587,SourceIP:159.203.203.65,SourcePort:46338 |
2019-09-06 20:42:27 |
| 165.227.1.117 | attack | Sep 6 12:48:50 game-panel sshd[14769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.1.117 Sep 6 12:48:53 game-panel sshd[14769]: Failed password for invalid user minecraft from 165.227.1.117 port 35812 ssh2 Sep 6 12:53:44 game-panel sshd[14967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.1.117 |
2019-09-06 20:55:27 |
| 149.56.129.68 | attack | Sep 6 02:43:28 tdfoods sshd\[7195\]: Invalid user 1234 from 149.56.129.68 Sep 6 02:43:28 tdfoods sshd\[7195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.ip-149-56-129.net Sep 6 02:43:29 tdfoods sshd\[7195\]: Failed password for invalid user 1234 from 149.56.129.68 port 37778 ssh2 Sep 6 02:47:44 tdfoods sshd\[7516\]: Invalid user test from 149.56.129.68 Sep 6 02:47:44 tdfoods sshd\[7516\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.ip-149-56-129.net |
2019-09-06 21:01:08 |
| 185.254.122.56 | attackbotsspam | 09/06/2019-07:55:32.861734 185.254.122.56 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-09-06 21:03:17 |
| 167.71.203.148 | attackspambots | Sep 6 10:16:15 mail sshd[9919]: Invalid user steam from 167.71.203.148 Sep 6 10:16:15 mail sshd[9919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.203.148 Sep 6 10:16:15 mail sshd[9919]: Invalid user steam from 167.71.203.148 Sep 6 10:16:17 mail sshd[9919]: Failed password for invalid user steam from 167.71.203.148 port 41564 ssh2 Sep 6 10:25:58 mail sshd[11018]: Invalid user smbuser from 167.71.203.148 ... |
2019-09-06 20:48:23 |
| 191.8.190.32 | attackspambots | Sep 6 08:11:53 ns3110291 sshd\[27566\]: Invalid user teamspeak3 from 191.8.190.32 Sep 6 08:11:53 ns3110291 sshd\[27566\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.8.190.32 Sep 6 08:11:55 ns3110291 sshd\[27566\]: Failed password for invalid user teamspeak3 from 191.8.190.32 port 34366 ssh2 Sep 6 08:20:21 ns3110291 sshd\[28440\]: Invalid user student2 from 191.8.190.32 Sep 6 08:20:21 ns3110291 sshd\[28440\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.8.190.32 ... |
2019-09-06 21:12:53 |
| 71.66.168.146 | attackbotsspam | Sep 6 02:30:09 hiderm sshd\[17449\]: Invalid user oracle from 71.66.168.146 Sep 6 02:30:09 hiderm sshd\[17449\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.66.168.146 Sep 6 02:30:11 hiderm sshd\[17449\]: Failed password for invalid user oracle from 71.66.168.146 port 3466 ssh2 Sep 6 02:35:10 hiderm sshd\[17882\]: Invalid user tsbot from 71.66.168.146 Sep 6 02:35:10 hiderm sshd\[17882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.66.168.146 |
2019-09-06 20:46:46 |
| 1.163.196.195 | attackbotsspam | Telnet Server BruteForce Attack |
2019-09-06 21:07:17 |
| 1.24.226.226 | attackbots | SSH bruteforce (Triggered fail2ban) Sep 6 05:48:10 dev1 sshd[175436]: error: maximum authentication attempts exceeded for invalid user admin from 1.24.226.226 port 53494 ssh2 [preauth] Sep 6 05:48:10 dev1 sshd[175436]: Disconnecting invalid user admin 1.24.226.226 port 53494: Too many authentication failures [preauth] |
2019-09-06 20:38:14 |
| 213.202.211.200 | attackspam | Sep 6 14:34:01 localhost sshd\[15291\]: Invalid user gitolite from 213.202.211.200 port 55350 Sep 6 14:34:01 localhost sshd\[15291\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.202.211.200 Sep 6 14:34:04 localhost sshd\[15291\]: Failed password for invalid user gitolite from 213.202.211.200 port 55350 ssh2 |
2019-09-06 20:41:42 |
| 187.207.222.124 | attack | Sep 5 22:59:31 eddieflores sshd\[20841\]: Invalid user q3server from 187.207.222.124 Sep 5 22:59:31 eddieflores sshd\[20841\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.207.222.124 Sep 5 22:59:32 eddieflores sshd\[20841\]: Failed password for invalid user q3server from 187.207.222.124 port 47710 ssh2 Sep 5 23:03:54 eddieflores sshd\[21233\]: Invalid user ark from 187.207.222.124 Sep 5 23:03:54 eddieflores sshd\[21233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.207.222.124 |
2019-09-06 21:11:46 |
| 128.199.203.236 | attack | Sep 6 02:24:23 tdfoods sshd\[5528\]: Invalid user P@ssw0rd from 128.199.203.236 Sep 6 02:24:23 tdfoods sshd\[5528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.203.236 Sep 6 02:24:25 tdfoods sshd\[5528\]: Failed password for invalid user P@ssw0rd from 128.199.203.236 port 52222 ssh2 Sep 6 02:30:21 tdfoods sshd\[6013\]: Invalid user devpass from 128.199.203.236 Sep 6 02:30:21 tdfoods sshd\[6013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.203.236 |
2019-09-06 20:36:02 |