城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 56.118.78.39
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40508
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;56.118.78.39. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021901 1800 900 604800 86400
;; Query time: 41 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 20 03:25:35 CST 2025
;; MSG SIZE rcvd: 105Host 39.78.118.56.in-addr.arpa not found: 2(SERVFAIL)
server can't find 56.118.78.39.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 14.192.50.206 | attack | Feb 12 08:22:14 josie sshd[23350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.192.50.206 user=r.r Feb 12 08:22:16 josie sshd[23350]: Failed password for r.r from 14.192.50.206 port 51756 ssh2 Feb 12 08:22:16 josie sshd[23361]: Received disconnect from 14.192.50.206: 11: Bye Bye Feb 12 08:29:21 josie sshd[29187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.192.50.206 user=r.r Feb 12 08:29:23 josie sshd[29187]: Failed password for r.r from 14.192.50.206 port 35668 ssh2 Feb 12 08:29:23 josie sshd[29195]: Received disconnect from 14.192.50.206: 11: Bye Bye Feb 12 08:30:54 josie sshd[30426]: Invalid user yuanwd from 14.192.50.206 Feb 12 08:30:54 josie sshd[30426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.192.50.206 Feb 12 08:30:56 josie sshd[30426]: Failed password for invalid user yuanwd from 14.192.50.206 port 47616 ssh2 Feb 12........ ------------------------------- |
2020-02-13 02:34:02 |
| 117.34.118.44 | attackbotsspam | 1581520569 - 02/12/2020 16:16:09 Host: 117.34.118.44/117.34.118.44 Port: 445 TCP Blocked |
2020-02-13 02:27:05 |
| 103.141.136.42 | attackbotsspam | 2020-02-12 08:39:21 dovecot_login authenticator failed for (yJjB8e) [103.141.136.42]:53540 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=habu@lerctr.org) 2020-02-12 08:39:39 dovecot_login authenticator failed for (NAkUlnVExj) [103.141.136.42]:56571 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=habu@lerctr.org) 2020-02-12 08:40:01 dovecot_login authenticator failed for (cYRrlzEv) [103.141.136.42]:60650 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=habu@lerctr.org) ... |
2020-02-13 02:34:41 |
| 5.189.159.33 | attackspambots | Feb 12 17:30:32 ns381471 sshd[28428]: Failed password for daemon from 5.189.159.33 port 46314 ssh2 |
2020-02-13 02:30:29 |
| 201.76.120.223 | attackspam | port scan and connect, tcp 8080 (http-proxy) |
2020-02-13 02:04:26 |
| 222.209.85.197 | attackbots | Feb 12 13:37:25 prox sshd[30527]: Failed password for root from 222.209.85.197 port 58932 ssh2 |
2020-02-13 02:45:00 |
| 188.131.238.91 | attackbots | Feb 12 03:38:38 web9 sshd\[17205\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.238.91 user=root Feb 12 03:38:40 web9 sshd\[17205\]: Failed password for root from 188.131.238.91 port 48728 ssh2 Feb 12 03:42:48 web9 sshd\[17727\]: Invalid user tamarah from 188.131.238.91 Feb 12 03:42:48 web9 sshd\[17727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.238.91 Feb 12 03:42:50 web9 sshd\[17727\]: Failed password for invalid user tamarah from 188.131.238.91 port 44342 ssh2 |
2020-02-13 02:18:27 |
| 111.93.235.74 | attackbots | Feb 12 18:35:43 srv01 sshd[17708]: Invalid user marta from 111.93.235.74 port 38881 Feb 12 18:35:43 srv01 sshd[17708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.235.74 Feb 12 18:35:43 srv01 sshd[17708]: Invalid user marta from 111.93.235.74 port 38881 Feb 12 18:35:46 srv01 sshd[17708]: Failed password for invalid user marta from 111.93.235.74 port 38881 ssh2 Feb 12 18:38:35 srv01 sshd[17892]: Invalid user niu from 111.93.235.74 port 3777 ... |
2020-02-13 02:34:16 |
| 24.10.217.208 | attack | Feb 12 03:36:33 auw2 sshd\[21953\]: Invalid user sling from 24.10.217.208 Feb 12 03:36:33 auw2 sshd\[21953\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-24-10-217-208.hsd1.ut.comcast.net Feb 12 03:36:35 auw2 sshd\[21953\]: Failed password for invalid user sling from 24.10.217.208 port 61608 ssh2 Feb 12 03:43:00 auw2 sshd\[22811\]: Invalid user dcmadmin from 24.10.217.208 Feb 12 03:43:00 auw2 sshd\[22811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-24-10-217-208.hsd1.ut.comcast.net |
2020-02-13 02:09:13 |
| 130.162.64.72 | attackspambots | Feb 12 07:01:49 sachi sshd\[23044\]: Invalid user hbVFhJIsyFQ from 130.162.64.72 Feb 12 07:01:49 sachi sshd\[23044\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=oc-130-162-64-72.compute.oraclecloud.com Feb 12 07:01:52 sachi sshd\[23044\]: Failed password for invalid user hbVFhJIsyFQ from 130.162.64.72 port 25437 ssh2 Feb 12 07:04:53 sachi sshd\[23332\]: Invalid user saito from 130.162.64.72 Feb 12 07:04:53 sachi sshd\[23332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=oc-130-162-64-72.compute.oraclecloud.com |
2020-02-13 02:15:49 |
| 51.83.104.120 | attack | $f2bV_matches |
2020-02-13 02:12:09 |
| 45.143.220.191 | attack | [2020-02-12 08:40:35] NOTICE[1148][C-0000861c] chan_sip.c: Call from '' (45.143.220.191:61991) to extension '01146586739261' rejected because extension not found in context 'public'. [2020-02-12 08:40:35] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-12T08:40:35.618-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146586739261",SessionID="0x7fd82c3c1c38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.191/61991",ACLName="no_extension_match" [2020-02-12 08:42:27] NOTICE[1148][C-0000861e] chan_sip.c: Call from '' (45.143.220.191:60895) to extension '901146586739261' rejected because extension not found in context 'public'. [2020-02-12 08:42:27] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-12T08:42:27.867-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="901146586739261",SessionID="0x7fd82c2bd8a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ... |
2020-02-13 02:36:40 |
| 80.78.71.69 | attack | Lines containing failures of 80.78.71.69 auth.log:Feb 12 14:38:27 omfg sshd[27827]: Connection from 80.78.71.69 port 63201 on 78.46.60.16 port 22 auth.log:Feb 12 14:38:27 omfg sshd[27827]: Did not receive identification string from 80.78.71.69 auth.log:Feb 12 14:38:27 omfg sshd[27828]: Connection from 80.78.71.69 port 51841 on 78.46.60.42 port 22 auth.log:Feb 12 14:38:27 omfg sshd[27828]: Did not receive identification string from 80.78.71.69 auth.log:Feb 12 14:38:30 omfg sshd[27829]: Connection from 80.78.71.69 port 60172 on 78.46.60.16 port 22 auth.log:Feb 12 14:38:30 omfg sshd[27831]: Connection from 80.78.71.69 port 64343 on 78.46.60.42 port 22 auth.log:Feb 12 14:38:30 omfg sshd[27829]: Invalid user support from 80.78.71.69 auth.log:Feb 12 14:38:32 omfg sshd[27829]: Connection closed by 80.78.71.69 port 60172 [preauth] auth.log:Feb 12 14:38:32 omfg sshd[27831]: Invalid user support from 80.78.71.69 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=80.78.71 |
2020-02-13 02:22:27 |
| 84.127.226.108 | attack | Feb 12 03:55:27 auw2 sshd\[24235\]: Invalid user luca from 84.127.226.108 Feb 12 03:55:27 auw2 sshd\[24235\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.127.226.108.static.user.ono.com Feb 12 03:55:28 auw2 sshd\[24235\]: Failed password for invalid user luca from 84.127.226.108 port 29779 ssh2 Feb 12 03:59:50 auw2 sshd\[24725\]: Invalid user jn from 84.127.226.108 Feb 12 03:59:50 auw2 sshd\[24725\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.127.226.108.static.user.ono.com |
2020-02-13 02:41:26 |
| 178.161.203.128 | attack | Feb 12 19:19:36 tuotantolaitos sshd[23469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.161.203.128 Feb 12 19:19:38 tuotantolaitos sshd[23469]: Failed password for invalid user dagger from 178.161.203.128 port 58126 ssh2 ... |
2020-02-13 02:06:49 |