城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 40.46.60.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31500
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;40.46.60.139. IN A
;; AUTHORITY SECTION:
. 317 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022010800 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jan 08 19:55:47 CST 2022
;; MSG SIZE rcvd: 105b'Host 139.60.46.40.in-addr.arpa. not found: 3(NXDOMAIN)
'Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 139.60.46.40.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 185.175.93.101 | attack | firewall-block, port(s): 5901/tcp, 5910/tcp, 5911/tcp, 5913/tcp |
2020-02-10 09:53:07 |
| 203.135.25.122 | attackbots | Feb 10 05:57:40 localhost kernel: [1094615.627631] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=203.135.25.122 DST=91.205.173.180 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=33907 DF PROTO=TCP SPT=34599 DPT=6380 WINDOW=14600 RES=0x00 SYN URGP=0 Feb 10 05:57:41 localhost kernel: [1094616.628970] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=203.135.25.122 DST=91.205.173.180 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=33908 DF PROTO=TCP SPT=34599 DPT=6380 WINDOW=14600 RES=0x00 SYN URGP=0 Feb 10 05:57:43 localhost kernel: [1094618.166026] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=203.135.25.122 DST=91.205.173.180 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=13337 DF PROTO=TCP SPT=52261 DPT=8088 WINDOW=14600 RES=0x00 SYN URGP=0 |
2020-02-10 13:04:17 |
| 59.188.15.198 | attackbotsspam | Honeypot attack, port: 445, PTR: nwt198.hkwebeasy.com. |
2020-02-10 09:57:53 |
| 77.65.42.66 | attackbots | Tried sshing with brute force. |
2020-02-10 10:06:57 |
| 103.116.203.154 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 09-02-2020 22:05:13. |
2020-02-10 10:05:37 |
| 94.67.89.130 | attack | Honeypot attack, port: 81, PTR: ppp-94-67-89-130.home.otenet.gr. |
2020-02-10 09:59:44 |
| 106.12.74.123 | attackbots | Feb 9 23:54:33 plusreed sshd[16254]: Invalid user jia from 106.12.74.123 Feb 9 23:54:33 plusreed sshd[16254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.74.123 Feb 9 23:54:33 plusreed sshd[16254]: Invalid user jia from 106.12.74.123 Feb 9 23:54:35 plusreed sshd[16254]: Failed password for invalid user jia from 106.12.74.123 port 35076 ssh2 Feb 9 23:57:41 plusreed sshd[17086]: Invalid user ono from 106.12.74.123 ... |
2020-02-10 13:08:08 |
| 66.147.237.34 | attackspam | Unauthorized connection attempt from IP address 66.147.237.34 on Port 445(SMB) |
2020-02-10 10:01:56 |
| 175.24.135.131 | attackbotsspam | Feb 10 02:48:30 cvbnet sshd[24361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.135.131 Feb 10 02:48:31 cvbnet sshd[24361]: Failed password for invalid user xtl from 175.24.135.131 port 59558 ssh2 ... |
2020-02-10 09:58:47 |
| 41.63.1.42 | attack | Feb 10 00:13:53 plusreed sshd[21453]: Invalid user fda from 41.63.1.42 ... |
2020-02-10 13:15:54 |
| 1.161.199.197 | attackspam | Honeypot attack, port: 5555, PTR: 1-161-199-197.dynamic-ip.hinet.net. |
2020-02-10 09:52:43 |
| 112.197.172.111 | attack | Telnet/23 MH Probe, BF, Hack - |
2020-02-10 10:10:36 |
| 202.62.83.234 | attack | Unauthorized connection attempt from IP address 202.62.83.234 on Port 445(SMB) |
2020-02-10 09:50:52 |
| 185.176.27.242 | attack | Port Scan, Trojan. Tried to access Steam.exe. Blocked by Malvarebytes, many... many times. |
2020-02-10 11:33:44 |
| 47.100.224.117 | attack | Port probing on unauthorized port 1433 |
2020-02-10 10:11:33 |