城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 51.139.125.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58189
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;51.139.125.21. IN A
;; AUTHORITY SECTION:
. 453 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022010600 1800 900 604800 86400
;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 06 16:13:28 CST 2022
;; MSG SIZE rcvd: 106Host 21.125.139.51.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 21.125.139.51.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 58.118.25.250 | attackspambots | Portscan or hack attempt detected by psad/fwsnort |
2019-11-09 02:11:05 |
| 188.254.0.197 | attackbotsspam | Nov 8 18:19:41 localhost sshd\[23812\]: Invalid user tznv2903 from 188.254.0.197 port 56434 Nov 8 18:19:41 localhost sshd\[23812\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.197 Nov 8 18:19:43 localhost sshd\[23812\]: Failed password for invalid user tznv2903 from 188.254.0.197 port 56434 ssh2 |
2019-11-09 02:43:17 |
| 181.48.225.126 | attack | Lines containing failures of 181.48.225.126 Nov 8 10:46:10 jarvis sshd[9548]: Invalid user spark from 181.48.225.126 port 43860 Nov 8 10:46:10 jarvis sshd[9548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.225.126 Nov 8 10:46:12 jarvis sshd[9548]: Failed password for invalid user spark from 181.48.225.126 port 43860 ssh2 Nov 8 10:46:14 jarvis sshd[9548]: Received disconnect from 181.48.225.126 port 43860:11: Bye Bye [preauth] Nov 8 10:46:14 jarvis sshd[9548]: Disconnected from invalid user spark 181.48.225.126 port 43860 [preauth] Nov 8 11:07:01 jarvis sshd[13815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.225.126 user=r.r Nov 8 11:07:03 jarvis sshd[13815]: Failed password for r.r from 181.48.225.126 port 53654 ssh2 Nov 8 11:07:05 jarvis sshd[13815]: Received disconnect from 181.48.225.126 port 53654:11: Bye Bye [preauth] Nov 8 11:07:05 jarvis sshd[13815]: D........ ------------------------------ |
2019-11-09 02:42:31 |
| 91.234.125.163 | attackbots | RDP Bruteforce |
2019-11-09 02:16:07 |
| 116.196.109.197 | attackspam | 2019-11-08T18:20:39.791799abusebot-5.cloudsearch.cf sshd\[2676\]: Invalid user waggoner from 116.196.109.197 port 43502 |
2019-11-09 02:32:50 |
| 122.155.174.34 | attack | 2019-10-03 13:35:23,043 fail2ban.actions [843]: NOTICE [sshd] Ban 122.155.174.34 2019-10-03 16:42:01,162 fail2ban.actions [843]: NOTICE [sshd] Ban 122.155.174.34 2019-10-03 19:47:12,838 fail2ban.actions [843]: NOTICE [sshd] Ban 122.155.174.34 ... |
2019-11-09 02:40:05 |
| 119.193.27.90 | attackspambots | Lines containing failures of 119.193.27.90 Nov 7 13:39:21 shared10 sshd[31236]: Invalid user admin from 119.193.27.90 port 54025 Nov 7 13:39:21 shared10 sshd[31236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.193.27.90 Nov 7 13:39:24 shared10 sshd[31236]: Failed password for invalid user admin from 119.193.27.90 port 54025 ssh2 Nov 7 13:39:24 shared10 sshd[31236]: Connection closed by invalid user admin 119.193.27.90 port 54025 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=119.193.27.90 |
2019-11-09 02:08:55 |
| 113.171.23.119 | attack | IP attempted unauthorised action |
2019-11-09 02:18:43 |
| 46.105.124.52 | attack | 2019-11-08 02:08:05 server sshd[7953]: Failed password for invalid user root from 46.105.124.52 port 47308 ssh2 |
2019-11-09 02:44:46 |
| 106.13.204.251 | attackspambots | Nov 8 15:29:48 bouncer sshd\[5173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.204.251 user=root Nov 8 15:29:50 bouncer sshd\[5173\]: Failed password for root from 106.13.204.251 port 42102 ssh2 Nov 8 15:36:27 bouncer sshd\[5194\]: Invalid user dovecot from 106.13.204.251 port 50776 ... |
2019-11-09 02:28:35 |
| 86.49.224.130 | attackbots | Brute force attempt |
2019-11-09 02:23:09 |
| 74.82.47.11 | attackspambots | 3389BruteforceFW23 |
2019-11-09 02:37:36 |
| 92.119.160.52 | attackspambots | 92.119.160.52 was recorded 54 times by 15 hosts attempting to connect to the following ports: 26106,26081,54592,44939,25670,47142,51557,39814,42714,56055,43621,49289,45661,29825,60656,42987,39486,28497,28843,48148,27137,55029,27403,55979,50103,63034,63694,55792,65055,29228,59557,29528. Incident counter (4h, 24h, all-time): 54, 326, 441 |
2019-11-09 02:03:58 |
| 109.94.82.149 | attack | 2019-10-11 22:40:08,916 fail2ban.actions [843]: NOTICE [sshd] Ban 109.94.82.149 2019-10-12 01:48:57,349 fail2ban.actions [843]: NOTICE [sshd] Ban 109.94.82.149 2019-10-12 04:55:50,548 fail2ban.actions [843]: NOTICE [sshd] Ban 109.94.82.149 ... |
2019-11-09 02:09:18 |
| 27.155.99.161 | attack | Nov 8 18:13:29 SilenceServices sshd[12934]: Failed password for root from 27.155.99.161 port 39932 ssh2 Nov 8 18:19:38 SilenceServices sshd[17008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.155.99.161 Nov 8 18:19:40 SilenceServices sshd[17008]: Failed password for invalid user nancys from 27.155.99.161 port 58566 ssh2 |
2019-11-09 02:26:17 |