城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.139.156.207
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17079
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.139.156.207. IN A
;; AUTHORITY SECTION:
. 367 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022053101 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 01 04:22:33 CST 2022
;; MSG SIZE rcvd: 107Host 207.156.139.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 207.156.139.42.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 93.118.104.149 | attackspam | postfix (unknown user, SPF fail or relay access denied) |
2019-09-17 04:51:05 |
| 167.86.79.122 | attackspambots | Client information: Source IP: 167.86.79.122 Country: DE Request line: Method: GET URI: /aastra.cfg |
2019-09-17 04:54:31 |
| 81.184.240.177 | attack | Autoban 81.184.240.177 AUTH/CONNECT |
2019-09-17 04:30:18 |
| 69.167.17.151 | attackbotsspam | Malicious Traffic/Form Submission |
2019-09-17 04:20:47 |
| 37.203.208.3 | attackbotsspam | Sep 16 20:41:37 game-panel sshd[453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.203.208.3 Sep 16 20:41:39 game-panel sshd[453]: Failed password for invalid user winata from 37.203.208.3 port 43716 ssh2 Sep 16 20:46:02 game-panel sshd[660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.203.208.3 |
2019-09-17 04:58:31 |
| 37.59.46.85 | attack | Sep 16 15:15:24 aat-srv002 sshd[22305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.46.85 Sep 16 15:15:27 aat-srv002 sshd[22305]: Failed password for invalid user ftpuser from 37.59.46.85 port 36818 ssh2 Sep 16 15:19:27 aat-srv002 sshd[22402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.46.85 Sep 16 15:19:28 aat-srv002 sshd[22402]: Failed password for invalid user esc from 37.59.46.85 port 58126 ssh2 ... |
2019-09-17 04:36:30 |
| 94.158.83.31 | attackspambots | Sep 16 20:20:49 MK-Soft-VM7 sshd\[16092\]: Invalid user user from 94.158.83.31 port 41658 Sep 16 20:20:49 MK-Soft-VM7 sshd\[16092\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.158.83.31 Sep 16 20:20:52 MK-Soft-VM7 sshd\[16092\]: Failed password for invalid user user from 94.158.83.31 port 41658 ssh2 ... |
2019-09-17 04:21:52 |
| 142.93.33.62 | attackspambots | Sep 16 09:50:45 wbs sshd\[10022\]: Invalid user cba from 142.93.33.62 Sep 16 09:50:45 wbs sshd\[10022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.33.62 Sep 16 09:50:48 wbs sshd\[10022\]: Failed password for invalid user cba from 142.93.33.62 port 48332 ssh2 Sep 16 09:54:27 wbs sshd\[10338\]: Invalid user ubnt from 142.93.33.62 Sep 16 09:54:27 wbs sshd\[10338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.33.62 |
2019-09-17 04:17:29 |
| 120.92.12.108 | attackbots | 120.92.12.108 - - [16/Sep/2019:20:57:24 +0200] "GET /TP/public/index.php HTTP/1.1" 404 390 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 120.92.12.108 - - [16/Sep/2019:20:57:24 +0200] "GET /TP/index.php HTTP/1.1" 404 390 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 120.92.12.108 - - [16/Sep/2019:20:57:25 +0200] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 390 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 120.92.12.108 - - [16/Sep/2019:20:57:25 +0200] "GET /html/public/index.php HTTP/1.1" 404 390 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 120.92.12.108 - - [16/Sep/2019:20:57:26 +0200] "GET /public/index.php HTTP/1.1" 404 390 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 F ... |
2019-09-17 04:58:12 |
| 92.53.65.123 | attackspambots | slow and persistent scanner |
2019-09-17 04:29:43 |
| 106.13.150.14 | attackspambots | Sep 16 10:31:21 hiderm sshd\[3738\]: Invalid user hadoop from 106.13.150.14 Sep 16 10:31:21 hiderm sshd\[3738\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.150.14 Sep 16 10:31:22 hiderm sshd\[3738\]: Failed password for invalid user hadoop from 106.13.150.14 port 49082 ssh2 Sep 16 10:34:33 hiderm sshd\[4030\]: Invalid user splunk from 106.13.150.14 Sep 16 10:34:33 hiderm sshd\[4030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.150.14 |
2019-09-17 04:46:04 |
| 104.40.2.56 | attackspam | 2019-09-16T18:57:43.281146abusebot-3.cloudsearch.cf sshd\[29693\]: Invalid user tomcat from 104.40.2.56 port 29824 |
2019-09-17 04:42:09 |
| 106.13.101.220 | attack | 2019-09-16T22:54:04.640273tmaserv sshd\[14684\]: Failed password for invalid user kigwa from 106.13.101.220 port 36690 ssh2 2019-09-16T23:07:48.543839tmaserv sshd\[15788\]: Invalid user cisco from 106.13.101.220 port 33346 2019-09-16T23:07:48.549243tmaserv sshd\[15788\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.101.220 2019-09-16T23:07:50.091066tmaserv sshd\[15788\]: Failed password for invalid user cisco from 106.13.101.220 port 33346 ssh2 2019-09-16T23:10:37.826239tmaserv sshd\[15845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.101.220 user=ftp 2019-09-16T23:10:39.573137tmaserv sshd\[15845\]: Failed password for ftp from 106.13.101.220 port 60900 ssh2 ... |
2019-09-17 04:26:13 |
| 37.211.25.98 | attackspam | Sep 16 20:02:34 MK-Soft-VM6 sshd\[10503\]: Invalid user bukkit from 37.211.25.98 port 42999 Sep 16 20:02:34 MK-Soft-VM6 sshd\[10503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.211.25.98 Sep 16 20:02:36 MK-Soft-VM6 sshd\[10503\]: Failed password for invalid user bukkit from 37.211.25.98 port 42999 ssh2 ... |
2019-09-17 04:26:45 |
| 45.136.108.16 | attackspambots | rdp brute-force attack 2019-09-16 19:03:05 ALLOW TCP 45.136.108.16 ###.###.###.### 61490 3391 0 - 0 0 0 - - - RECEIVE 2019-09-16 19:03:05 ALLOW TCP 45.136.108.16 ###.###.###.### 61515 3391 0 - 0 0 0 - - - RECEIVE ... |
2019-09-17 04:44:02 |