城市(city): unknown
省份(region): unknown
国家(country): Pakistan
运营商(isp): Pakistan Telecommunication Company Limited
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 39.45.164.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41338
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;39.45.164.55. IN A
;; AUTHORITY SECTION:
. 506 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020070400 1800 900 604800 86400
;; Query time: 76 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 04 14:02:26 CST 2020
;; MSG SIZE rcvd: 116Host 55.164.45.39.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 55.164.45.39.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 167.99.157.37 | attack | Aug 7 16:29:18 pixelmemory sshd[2108515]: Failed password for root from 167.99.157.37 port 47346 ssh2 Aug 7 16:34:30 pixelmemory sshd[2120702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.157.37 user=root Aug 7 16:34:32 pixelmemory sshd[2120702]: Failed password for root from 167.99.157.37 port 59716 ssh2 Aug 7 16:39:45 pixelmemory sshd[2143245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.157.37 user=root Aug 7 16:39:47 pixelmemory sshd[2143245]: Failed password for root from 167.99.157.37 port 43854 ssh2 ... |
2020-08-08 08:22:25 |
| 106.13.166.122 | attack | (sshd) Failed SSH login from 106.13.166.122 (CN/China/-): 5 in the last 3600 secs |
2020-08-08 07:57:58 |
| 192.169.219.79 | attackbotsspam | C1,WP GET /comic/wp-login.php |
2020-08-08 08:25:50 |
| 152.136.53.29 | attack | Aug 7 23:57:54 NPSTNNYC01T sshd[9930]: Failed password for root from 152.136.53.29 port 43408 ssh2 Aug 7 23:58:41 NPSTNNYC01T sshd[9978]: Failed password for root from 152.136.53.29 port 51080 ssh2 ... |
2020-08-08 12:00:41 |
| 139.59.22.2 | attackbotsspam | Web App Attack |
2020-08-08 07:51:29 |
| 172.81.227.243 | attack | Lines containing failures of 172.81.227.243 Aug 5 04:52:07 penfold sshd[8488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.227.243 user=r.r Aug 5 04:52:08 penfold sshd[8488]: Failed password for r.r from 172.81.227.243 port 41078 ssh2 Aug 5 04:52:09 penfold sshd[8488]: Received disconnect from 172.81.227.243 port 41078:11: Bye Bye [preauth] Aug 5 04:52:09 penfold sshd[8488]: Disconnected from authenticating user r.r 172.81.227.243 port 41078 [preauth] Aug 5 05:05:53 penfold sshd[9322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.227.243 user=r.r Aug 5 05:05:55 penfold sshd[9322]: Failed password for r.r from 172.81.227.243 port 43928 ssh2 Aug 5 05:05:55 penfold sshd[9322]: Received disconnect from 172.81.227.243 port 43928:11: Bye Bye [preauth] Aug 5 05:05:55 penfold sshd[9322]: Disconnected from authenticating user r.r 172.81.227.243 port 43928 [preauth] Aug ........ ------------------------------ |
2020-08-08 07:56:49 |
| 145.239.82.192 | attack | SSH Brute Force |
2020-08-08 08:29:17 |
| 82.65.23.62 | attackspambots | 2020-08-08T01:18:09.358036amanda2.illicoweb.com sshd\[3960\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82-65-23-62.subs.proxad.net user=root 2020-08-08T01:18:11.295172amanda2.illicoweb.com sshd\[3960\]: Failed password for root from 82.65.23.62 port 34080 ssh2 2020-08-08T01:20:59.154779amanda2.illicoweb.com sshd\[4292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82-65-23-62.subs.proxad.net user=root 2020-08-08T01:21:01.097111amanda2.illicoweb.com sshd\[4292\]: Failed password for root from 82.65.23.62 port 33172 ssh2 2020-08-08T01:23:43.577064amanda2.illicoweb.com sshd\[4629\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82-65-23-62.subs.proxad.net user=root ... |
2020-08-08 08:24:53 |
| 107.189.11.160 | attack | 2020-08-08T02:12:30.837793ns386461 sshd\[18030\]: Invalid user vagrant from 107.189.11.160 port 40926 2020-08-08T02:12:30.841268ns386461 sshd\[18032\]: Invalid user oracle from 107.189.11.160 port 40932 2020-08-08T02:12:30.841455ns386461 sshd\[18036\]: Invalid user centos from 107.189.11.160 port 40924 2020-08-08T02:12:30.841681ns386461 sshd\[18035\]: Invalid user admin from 107.189.11.160 port 40920 2020-08-08T02:12:30.841884ns386461 sshd\[18037\]: Invalid user postgres from 107.189.11.160 port 40928 2020-08-08T02:12:30.842009ns386461 sshd\[18034\]: Invalid user ubuntu from 107.189.11.160 port 40922 2020-08-08T02:12:30.842066ns386461 sshd\[18031\]: Invalid user test from 107.189.11.160 port 40930 ... |
2020-08-08 08:15:40 |
| 202.155.228.207 | attackspam | 2020-08-07T22:17:24.775449amanda2.illicoweb.com sshd\[28318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.155.228.207 user=root 2020-08-07T22:17:26.216802amanda2.illicoweb.com sshd\[28318\]: Failed password for root from 202.155.228.207 port 58550 ssh2 2020-08-07T22:20:32.398492amanda2.illicoweb.com sshd\[28808\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.155.228.207 user=root 2020-08-07T22:20:34.646953amanda2.illicoweb.com sshd\[28808\]: Failed password for root from 202.155.228.207 port 34510 ssh2 2020-08-07T22:23:55.805097amanda2.illicoweb.com sshd\[29397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.155.228.207 user=root ... |
2020-08-08 08:09:51 |
| 113.203.240.35 | attack | Port Scan ... |
2020-08-08 07:57:28 |
| 218.92.0.145 | attackspambots | Aug 7 21:04:47 firewall sshd[23121]: Failed password for root from 218.92.0.145 port 14315 ssh2 Aug 7 21:04:50 firewall sshd[23121]: Failed password for root from 218.92.0.145 port 14315 ssh2 Aug 7 21:04:53 firewall sshd[23121]: Failed password for root from 218.92.0.145 port 14315 ssh2 ... |
2020-08-08 08:27:05 |
| 185.113.97.67 | attackspam | Port probing on unauthorized port 5555 |
2020-08-08 07:52:48 |
| 68.183.19.26 | attack | *Port Scan* detected from 68.183.19.26 (US/United States/New Jersey/North Bergen/kaltim.bawaslu.go.id). 4 hits in the last 75 seconds |
2020-08-08 07:55:30 |
| 5.64.65.0 | attack | $f2bV_matches |
2020-08-08 08:06:23 |