城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 6.139.252.135
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27604
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;6.139.252.135. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021401 1800 900 604800 86400
;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 15 07:46:38 CST 2025
;; MSG SIZE rcvd: 106Host 135.252.139.6.in-addr.arpa not found: 2(SERVFAIL)
server can't find 6.139.252.135.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 45.129.33.7 | attackspam | IPS Sensor Hit - Port Scan detected |
2020-08-10 22:24:16 |
| 37.26.236.12 | attackbots | Hit honeypot r. |
2020-08-10 22:39:49 |
| 113.161.54.47 | attackbotsspam | [munged]::443 113.161.54.47 - - [10/Aug/2020:14:06:55 +0200] "POST /[munged]: HTTP/1.1" 200 10186 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 113.161.54.47 - - [10/Aug/2020:14:06:58 +0200] "POST /[munged]: HTTP/1.1" 200 6243 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 113.161.54.47 - - [10/Aug/2020:14:07:01 +0200] "POST /[munged]: HTTP/1.1" 200 6243 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 113.161.54.47 - - [10/Aug/2020:14:07:04 +0200] "POST /[munged]: HTTP/1.1" 200 6243 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 113.161.54.47 - - [10/Aug/2020:14:07:07 +0200] "POST /[munged]: HTTP/1.1" 200 6243 "http://[munged]:/[munged]:" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0" [munged]::443 113.161.54.47 - - [10/Aug/2020:14:07:10 |
2020-08-10 22:19:55 |
| 104.211.216.173 | attackbotsspam | Aug 10 05:27:42 vm0 sshd[30349]: Failed password for root from 104.211.216.173 port 37632 ssh2 Aug 10 14:07:11 vm0 sshd[9293]: Failed password for root from 104.211.216.173 port 57386 ssh2 ... |
2020-08-10 22:33:49 |
| 65.49.205.39 | attack | Aug 10 14:42:26 vm0 sshd[14827]: Failed password for root from 65.49.205.39 port 44328 ssh2 ... |
2020-08-10 22:43:16 |
| 117.254.186.98 | attack | Aug 10 13:55:08 onepixel sshd[1810278]: Failed password for invalid user QW from 117.254.186.98 port 33620 ssh2 Aug 10 13:59:19 onepixel sshd[1812625]: Invalid user 1qaz#EDCxsw2 from 117.254.186.98 port 56858 Aug 10 13:59:19 onepixel sshd[1812625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.254.186.98 Aug 10 13:59:19 onepixel sshd[1812625]: Invalid user 1qaz#EDCxsw2 from 117.254.186.98 port 56858 Aug 10 13:59:21 onepixel sshd[1812625]: Failed password for invalid user 1qaz#EDCxsw2 from 117.254.186.98 port 56858 ssh2 |
2020-08-10 22:23:52 |
| 149.56.151.201 | attackspam | Scanning an empty webserver with deny all robots.txt |
2020-08-10 22:40:49 |
| 203.81.78.180 | attack | Aug 10 15:55:33 piServer sshd[11967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.81.78.180 Aug 10 15:55:35 piServer sshd[11967]: Failed password for invalid user QWEqweQWE123! from 203.81.78.180 port 42600 ssh2 Aug 10 15:59:37 piServer sshd[12321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.81.78.180 ... |
2020-08-10 22:54:31 |
| 203.195.175.47 | attackspam | Aug 10 14:09:16 ajax sshd[29200]: Failed password for root from 203.195.175.47 port 54462 ssh2 |
2020-08-10 22:52:11 |
| 175.24.4.5 | attackspam | Lines containing failures of 175.24.4.5 Aug 10 07:47:55 kmh-vmh-003-fsn07 sshd[31649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.4.5 user=r.r Aug 10 07:47:57 kmh-vmh-003-fsn07 sshd[31649]: Failed password for r.r from 175.24.4.5 port 35346 ssh2 Aug 10 07:47:58 kmh-vmh-003-fsn07 sshd[31649]: Received disconnect from 175.24.4.5 port 35346:11: Bye Bye [preauth] Aug 10 07:47:58 kmh-vmh-003-fsn07 sshd[31649]: Disconnected from authenticating user r.r 175.24.4.5 port 35346 [preauth] Aug 10 08:05:03 kmh-vmh-003-fsn07 sshd[1652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.4.5 user=r.r Aug 10 08:05:05 kmh-vmh-003-fsn07 sshd[1652]: Failed password for r.r from 175.24.4.5 port 55744 ssh2 Aug 10 08:05:07 kmh-vmh-003-fsn07 sshd[1652]: Received disconnect from 175.24.4.5 port 55744:11: Bye Bye [preauth] Aug 10 08:05:07 kmh-vmh-003-fsn07 sshd[1652]: Disconnected from authenticatin........ ------------------------------ |
2020-08-10 22:37:19 |
| 80.211.223.121 | attackbotsspam | ssh intrusion attempt |
2020-08-10 22:44:22 |
| 51.75.202.218 | attackbotsspam | Banned for a week because repeated abuses, for example SSH, but not only |
2020-08-10 22:57:09 |
| 141.98.9.161 | attackspambots | Aug 10 16:23:15 piServer sshd[14539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.161 Aug 10 16:23:17 piServer sshd[14539]: Failed password for invalid user admin from 141.98.9.161 port 38619 ssh2 Aug 10 16:23:47 piServer sshd[14652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.161 ... |
2020-08-10 22:51:06 |
| 106.13.144.207 | attack | Bruteforce detected by fail2ban |
2020-08-10 22:28:13 |
| 77.99.11.217 | attackspam | Lines containing failures of 77.99.11.217 Aug 10 13:44:08 nexus sshd[2595]: Invalid user admin from 77.99.11.217 port 49918 Aug 10 13:44:08 nexus sshd[2595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.99.11.217 Aug 10 13:44:10 nexus sshd[2595]: Failed password for invalid user admin from 77.99.11.217 port 49918 ssh2 Aug 10 13:44:11 nexus sshd[2595]: Received disconnect from 77.99.11.217 port 49918:11: Bye Bye [preauth] Aug 10 13:44:11 nexus sshd[2595]: Disconnected from 77.99.11.217 port 49918 [preauth] Aug 10 13:44:11 nexus sshd[2597]: Invalid user admin from 77.99.11.217 port 49962 Aug 10 13:44:11 nexus sshd[2597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.99.11.217 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=77.99.11.217 |
2020-08-10 22:51:44 |