城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 6.150.212.155
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18171
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;6.150.212.155. IN A
;; AUTHORITY SECTION:
. 480 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020090401 1800 900 604800 86400
;; Query time: 140 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Sep 05 08:27:01 CST 2020
;; MSG SIZE rcvd: 117Host 155.212.150.6.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 100.100.2.138
Address: 100.100.2.138#53
** server can't find 155.212.150.6.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 162.14.2.60 | attackbots | ICMP MH Probe, Scan /Distributed - |
2020-02-08 03:12:18 |
| 49.88.112.55 | attackspam | 2020-02-07T13:33:21.059389xentho-1 sshd[40076]: Failed password for root from 49.88.112.55 port 11880 ssh2 2020-02-07T13:33:15.321728xentho-1 sshd[40076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.55 user=root 2020-02-07T13:33:17.051465xentho-1 sshd[40076]: Failed password for root from 49.88.112.55 port 11880 ssh2 2020-02-07T13:33:21.059389xentho-1 sshd[40076]: Failed password for root from 49.88.112.55 port 11880 ssh2 2020-02-07T13:33:24.353359xentho-1 sshd[40076]: Failed password for root from 49.88.112.55 port 11880 ssh2 2020-02-07T13:33:15.321728xentho-1 sshd[40076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.55 user=root 2020-02-07T13:33:17.051465xentho-1 sshd[40076]: Failed password for root from 49.88.112.55 port 11880 ssh2 2020-02-07T13:33:21.059389xentho-1 sshd[40076]: Failed password for root from 49.88.112.55 port 11880 ssh2 2020-02-07T13:33:24.353359xentho-1 ssh ... |
2020-02-08 02:37:12 |
| 139.59.41.154 | attack | Feb 7 19:08:41 v22018076622670303 sshd\[4119\]: Invalid user fks from 139.59.41.154 port 50316 Feb 7 19:08:41 v22018076622670303 sshd\[4119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.41.154 Feb 7 19:08:43 v22018076622670303 sshd\[4119\]: Failed password for invalid user fks from 139.59.41.154 port 50316 ssh2 ... |
2020-02-08 02:50:14 |
| 1.214.215.236 | attack | Feb 7 07:41:22 hpm sshd\[12822\]: Invalid user wzi from 1.214.215.236 Feb 7 07:41:22 hpm sshd\[12822\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.215.236 Feb 7 07:41:24 hpm sshd\[12822\]: Failed password for invalid user wzi from 1.214.215.236 port 38652 ssh2 Feb 7 07:44:46 hpm sshd\[13233\]: Invalid user qrn from 1.214.215.236 Feb 7 07:44:46 hpm sshd\[13233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.214.215.236 |
2020-02-08 03:04:40 |
| 158.140.63.102 | attack | Honeypot attack, port: 81, PTR: PTR record not found |
2020-02-08 03:00:30 |
| 107.181.174.74 | attackspam | Automatic report - SSH Brute-Force Attack |
2020-02-08 02:45:16 |
| 14.188.98.53 | attackspambots | Feb 7 09:34:05 nandi sshd[19785]: Did not receive identification string from 14.188.98.53 Feb 7 09:34:06 nandi sshd[19790]: Address 14.188.98.53 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Feb 7 09:34:07 nandi sshd[19790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.188.98.53 user=r.r Feb 7 09:34:08 nandi sshd[19790]: Failed password for r.r from 14.188.98.53 port 53614 ssh2 Feb 7 09:34:09 nandi sshd[19790]: Connection closed by 14.188.98.53 [preauth] Feb 7 09:34:10 nandi sshd[19811]: Address 14.188.98.53 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Feb 7 09:34:11 nandi sshd[19811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.188.98.53 user=r.r Feb 7 09:34:12 nandi sshd[19811]: Failed password for r.r from 14.188.98.53 port 54361 ssh2 Feb 7 09:34:12 nandi sshd[19811]:........ ------------------------------- |
2020-02-08 02:53:59 |
| 182.247.245.72 | attackbotsspam | Automatic report - SSH Brute-Force Attack |
2020-02-08 02:46:41 |
| 77.247.181.163 | attackspam | ET COMPROMISED Known Compromised or Hostile Host Traffic group 21 - port: 2791 proto: UDP cat: Misc Attack |
2020-02-08 02:46:14 |
| 206.189.229.112 | attackspam | SSH login attempts. |
2020-02-08 02:42:25 |
| 162.14.20.162 | attackspambots | ICMP MH Probe, Scan /Distributed - |
2020-02-08 03:03:49 |
| 185.175.93.19 | attackspambots | Feb 7 19:50:23 debian-2gb-nbg1-2 kernel: \[3360664.823334\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.175.93.19 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=7227 PROTO=TCP SPT=59061 DPT=5922 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-02-08 02:55:18 |
| 37.187.97.33 | attackbots | Hacking |
2020-02-08 02:44:14 |
| 39.43.38.125 | attackspam | 20/2/7@09:04:41: FAIL: Alarm-Network address from=39.43.38.125 20/2/7@09:04:42: FAIL: Alarm-Network address from=39.43.38.125 ... |
2020-02-08 02:51:26 |
| 139.99.105.138 | attack | Feb 7 07:44:51 auw2 sshd\[22905\]: Invalid user pdf from 139.99.105.138 Feb 7 07:44:51 auw2 sshd\[22905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.105.138 Feb 7 07:44:53 auw2 sshd\[22905\]: Failed password for invalid user pdf from 139.99.105.138 port 36938 ssh2 Feb 7 07:48:19 auw2 sshd\[23257\]: Invalid user peo from 139.99.105.138 Feb 7 07:48:19 auw2 sshd\[23257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.105.138 |
2020-02-08 02:58:17 |