城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 55.34.17.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48515
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;55.34.17.138. IN A
;; AUTHORITY SECTION:
. 561 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022041701 1800 900 604800 86400
;; Query time: 75 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 18 04:27:00 CST 2022
;; MSG SIZE rcvd: 105b'Host 138.17.34.55.in-addr.arpa. not found: 3(NXDOMAIN)
'server can't find 55.34.17.138.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 222.186.175.202 | attack | Scanned 53 times in the last 24 hours on port 22 |
2020-05-26 08:13:18 |
| 77.243.181.54 | attackbots | Honeypot attack, port: 81, PTR: PTR record not found |
2020-05-26 08:22:36 |
| 103.81.156.8 | attackspam | DATE:2020-05-26 01:28:09, IP:103.81.156.8, PORT:ssh SSH brute force auth (docker-dc) |
2020-05-26 08:26:40 |
| 125.64.94.220 | attackspambots | May 26 01:58:48 debian-2gb-nbg1-2 kernel: \[12709929.815173\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=125.64.94.220 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=54321 PROTO=TCP SPT=43462 DPT=2376 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-05-26 08:22:16 |
| 47.99.99.232 | attackspambots | Blocked for port scanning. Time: Mon May 25. 16:40:52 2020 +0200 IP: 47.99.99.232 (CN/China/-) Sample of block hits: May 25 16:40:18 vserv kernel: [40074006.766968] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=47.99.99.232 DST=[removed] LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=32315 DF PROTO=TCP SPT=50914 DPT=2222 WINDOW=29200 RES=0x00 SYN URGP=0 May 25 16:40:19 vserv kernel: [40074007.769934] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=47.99.99.232 DST=[removed] LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=32316 DF PROTO=TCP SPT=50914 DPT=2222 WINDOW=29200 RES=0x00 SYN URGP=0 May 25 16:40:21 vserv kernel: [40074009.775291] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=47.99.99.232 DST=[removed] LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=32317 DF PROTO=TCP SPT=50914 DPT=2222 WINDOW=29200 RES=0x00 SYN URGP=0 May 25 16:40:25 vserv kernel: [40074013.789245] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=47.99.99.232 DST=[removed] LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=32318 DF PROTO=TCP SPT=50914 DPT=2222 |
2020-05-26 08:03:50 |
| 222.186.30.57 | attackbots | May 26 02:14:37 legacy sshd[32463]: Failed password for root from 222.186.30.57 port 24658 ssh2 May 26 02:14:46 legacy sshd[32471]: Failed password for root from 222.186.30.57 port 60499 ssh2 May 26 02:14:49 legacy sshd[32471]: Failed password for root from 222.186.30.57 port 60499 ssh2 ... |
2020-05-26 08:17:28 |
| 122.51.253.157 | attack | May 25 16:21:03 pixelmemory sshd[1153379]: Failed password for root from 122.51.253.157 port 49666 ssh2 May 25 16:24:36 pixelmemory sshd[1158768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.253.157 user=root May 25 16:24:38 pixelmemory sshd[1158768]: Failed password for root from 122.51.253.157 port 59858 ssh2 May 25 16:28:12 pixelmemory sshd[1164133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.253.157 user=root May 25 16:28:14 pixelmemory sshd[1164133]: Failed password for root from 122.51.253.157 port 41796 ssh2 ... |
2020-05-26 08:21:35 |
| 124.79.18.225 | attackbotsspam | Honeypot attack, port: 445, PTR: 225.18.79.124.broad.xw.sh.dynamic.163data.com.cn. |
2020-05-26 08:16:51 |
| 92.119.231.177 | attackbotsspam | May 26 01:39:43 srv-ubuntu-dev3 sshd[35000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.119.231.177 user=root May 26 01:39:45 srv-ubuntu-dev3 sshd[35000]: Failed password for root from 92.119.231.177 port 60166 ssh2 May 26 01:42:28 srv-ubuntu-dev3 sshd[35438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.119.231.177 user=root May 26 01:42:30 srv-ubuntu-dev3 sshd[35438]: Failed password for root from 92.119.231.177 port 51328 ssh2 May 26 01:45:22 srv-ubuntu-dev3 sshd[35934]: Invalid user admin from 92.119.231.177 May 26 01:45:22 srv-ubuntu-dev3 sshd[35934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.119.231.177 May 26 01:45:22 srv-ubuntu-dev3 sshd[35934]: Invalid user admin from 92.119.231.177 May 26 01:45:25 srv-ubuntu-dev3 sshd[35934]: Failed password for invalid user admin from 92.119.231.177 port 42506 ssh2 May 26 01:48:09 srv-ubuntu-dev3 ss ... |
2020-05-26 08:05:23 |
| 65.182.2.241 | attackbotsspam | May 26 02:54:10 journals sshd\[6641\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.182.2.241 user=root May 26 02:54:12 journals sshd\[6641\]: Failed password for root from 65.182.2.241 port 36180 ssh2 May 26 02:56:03 journals sshd\[6924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.182.2.241 user=root May 26 02:56:05 journals sshd\[6924\]: Failed password for root from 65.182.2.241 port 58928 ssh2 May 26 02:57:53 journals sshd\[7203\]: Invalid user max from 65.182.2.241 ... |
2020-05-26 08:12:20 |
| 117.65.84.235 | attack | May 15 22:07:50 localhost postfix/smtpd[7601]: lost connection after EHLO from unknown[117.65.84.235] May 15 22:07:56 localhost postfix/smtpd[7601]: lost connection after EHLO from unknown[117.65.84.235] May 15 22:08:03 localhost postfix/smtpd[7601]: lost connection after EHLO from unknown[117.65.84.235] May 15 22:08:12 localhost postfix/smtpd[7601]: lost connection after EHLO from unknown[117.65.84.235] May 15 22:08:30 localhost postfix/smtpd[7601]: lost connection after EHLO from unknown[117.65.84.235] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.65.84.235 |
2020-05-26 08:25:47 |
| 142.93.202.159 | attackspambots | May 26 02:11:46 OPSO sshd\[2661\]: Invalid user neptune from 142.93.202.159 port 50368 May 26 02:11:46 OPSO sshd\[2661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.202.159 May 26 02:11:48 OPSO sshd\[2661\]: Failed password for invalid user neptune from 142.93.202.159 port 50368 ssh2 May 26 02:15:21 OPSO sshd\[4790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.202.159 user=root May 26 02:15:24 OPSO sshd\[4790\]: Failed password for root from 142.93.202.159 port 57754 ssh2 |
2020-05-26 08:18:58 |
| 144.217.67.224 | attackspambots | Abuse of XMLRPC |
2020-05-26 07:56:08 |
| 103.254.198.67 | attack | May 26 07:00:51 webhost01 sshd[4069]: Failed password for root from 103.254.198.67 port 59656 ssh2 ... |
2020-05-26 08:31:02 |
| 92.118.161.9 | attackspambots | ET CINS Active Threat Intelligence Poor Reputation IP group 89 - port: 123 proto: UDP cat: Misc Attack |
2020-05-26 08:20:10 |