城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 56.72.134.38
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5181
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;56.72.134.38. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025012902 1800 900 604800 86400
;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 10:06:32 CST 2025
;; MSG SIZE rcvd: 105Host 38.134.72.56.in-addr.arpa not found: 2(SERVFAIL)
server can't find 56.72.134.38.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 182.61.161.121 | attackspambots | Sep 16 10:17:39 ns382633 sshd\[464\]: Invalid user admin from 182.61.161.121 port 63361 Sep 16 10:17:39 ns382633 sshd\[464\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.161.121 Sep 16 10:17:40 ns382633 sshd\[464\]: Failed password for invalid user admin from 182.61.161.121 port 63361 ssh2 Sep 16 10:25:02 ns382633 sshd\[1766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.161.121 user=root Sep 16 10:25:04 ns382633 sshd\[1766\]: Failed password for root from 182.61.161.121 port 52737 ssh2 |
2020-09-16 17:09:27 |
| 64.227.13.158 | attackspam | $f2bV_matches |
2020-09-16 17:35:04 |
| 159.89.89.65 | attackbots | (sshd) Failed SSH login from 159.89.89.65 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 16 04:58:19 optimus sshd[5005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.89.65 user=root Sep 16 04:58:22 optimus sshd[5005]: Failed password for root from 159.89.89.65 port 50428 ssh2 Sep 16 05:02:23 optimus sshd[6319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.89.65 user=root Sep 16 05:02:25 optimus sshd[6319]: Failed password for root from 159.89.89.65 port 34272 ssh2 Sep 16 05:06:26 optimus sshd[7707]: Invalid user oraprod from 159.89.89.65 |
2020-09-16 17:17:32 |
| 64.225.124.107 | attackbotsspam | Sep 16 13:11:29 dhoomketu sshd[3134772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.124.107 Sep 16 13:11:29 dhoomketu sshd[3134772]: Invalid user onitelecom from 64.225.124.107 port 37686 Sep 16 13:11:31 dhoomketu sshd[3134772]: Failed password for invalid user onitelecom from 64.225.124.107 port 37686 ssh2 Sep 16 13:15:06 dhoomketu sshd[3134815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.124.107 user=root Sep 16 13:15:08 dhoomketu sshd[3134815]: Failed password for root from 64.225.124.107 port 48452 ssh2 ... |
2020-09-16 17:11:35 |
| 74.82.47.5 | attackbots | Icarus honeypot on github |
2020-09-16 17:30:04 |
| 195.54.161.132 | attack | [MK-Root1] Blocked by UFW |
2020-09-16 17:06:51 |
| 148.70.209.112 | attackbots | Sep 16 10:20:07 h1745522 sshd[16658]: Invalid user voicebot from 148.70.209.112 port 44882 Sep 16 10:20:07 h1745522 sshd[16658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.209.112 Sep 16 10:20:07 h1745522 sshd[16658]: Invalid user voicebot from 148.70.209.112 port 44882 Sep 16 10:20:09 h1745522 sshd[16658]: Failed password for invalid user voicebot from 148.70.209.112 port 44882 ssh2 Sep 16 10:24:01 h1745522 sshd[17828]: Invalid user openelec from 148.70.209.112 port 58586 Sep 16 10:24:01 h1745522 sshd[17828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.209.112 Sep 16 10:24:01 h1745522 sshd[17828]: Invalid user openelec from 148.70.209.112 port 58586 Sep 16 10:24:03 h1745522 sshd[17828]: Failed password for invalid user openelec from 148.70.209.112 port 58586 ssh2 Sep 16 10:27:43 h1745522 sshd[18392]: Invalid user csgo from 148.70.209.112 port 44070 ... |
2020-09-16 17:28:45 |
| 196.27.127.61 | attack | Sep 16 10:49:54 abendstille sshd\[32260\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.27.127.61 user=root Sep 16 10:49:56 abendstille sshd\[32260\]: Failed password for root from 196.27.127.61 port 36530 ssh2 Sep 16 10:54:29 abendstille sshd\[3970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.27.127.61 user=root Sep 16 10:54:31 abendstille sshd\[3970\]: Failed password for root from 196.27.127.61 port 59198 ssh2 Sep 16 10:58:56 abendstille sshd\[7893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.27.127.61 user=root ... |
2020-09-16 17:32:25 |
| 71.246.210.34 | attackbots | 2020-09-16T11:09:22.360221ks3355764 sshd[4229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.246.210.34 user=root 2020-09-16T11:09:24.181396ks3355764 sshd[4229]: Failed password for root from 71.246.210.34 port 48358 ssh2 ... |
2020-09-16 17:24:27 |
| 45.140.17.74 | attackbotsspam | Port scan on 6 port(s): 33093 33119 33128 33143 33182 33430 |
2020-09-16 17:36:52 |
| 122.51.41.109 | attackbots | 122.51.41.109 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 16 05:07:16 server5 sshd[13829]: Failed password for root from 195.154.42.43 port 58748 ssh2 Sep 16 05:08:13 server5 sshd[14594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.164.108.43 user=root Sep 16 05:07:45 server5 sshd[14303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.41.109 user=root Sep 16 05:07:47 server5 sshd[14303]: Failed password for root from 122.51.41.109 port 50976 ssh2 Sep 16 05:07:55 server5 sshd[14467]: Failed password for root from 51.68.44.13 port 37496 ssh2 IP Addresses Blocked: 195.154.42.43 (FR/France/-) 102.164.108.43 (ZA/South Africa/-) |
2020-09-16 17:38:24 |
| 180.253.233.148 | attackspambots | Automatic report - Port Scan Attack |
2020-09-16 17:13:24 |
| 77.247.181.163 | attack | port scan and connect, tcp 22 (ssh) |
2020-09-16 17:30:53 |
| 116.75.246.117 | attackbots | port scan and connect, tcp 23 (telnet) |
2020-09-16 17:45:04 |
| 149.202.160.192 | attack | Sep 16 09:39:40 nopemail auth.info sshd[24799]: Disconnected from authenticating user root 149.202.160.192 port 59690 [preauth] ... |
2020-09-16 17:11:16 |