城市(city): El Paso
省份(region): Texas
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 68.201.139.168
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1851
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;68.201.139.168. IN A
;; AUTHORITY SECTION:
. 271 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020040501 1800 900 604800 86400
;; Query time: 118 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 06 07:08:16 CST 2020
;; MSG SIZE rcvd: 118168.139.201.68.in-addr.arpa domain name pointer cpe-68-201-139-168.elp.res.rr.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
168.139.201.68.in-addr.arpa name = cpe-68-201-139-168.elp.res.rr.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 181.115.156.59 | attack | Sep 5 11:42:52 hanapaa sshd\[18222\]: Invalid user 123456 from 181.115.156.59 Sep 5 11:42:52 hanapaa sshd\[18222\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.115.156.59 Sep 5 11:42:54 hanapaa sshd\[18222\]: Failed password for invalid user 123456 from 181.115.156.59 port 58592 ssh2 Sep 5 11:48:13 hanapaa sshd\[18672\]: Invalid user 123 from 181.115.156.59 Sep 5 11:48:13 hanapaa sshd\[18672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.115.156.59 |
2019-09-06 05:49:22 |
| 187.188.172.86 | attack | Portscan or hack attempt detected by psad/fwsnort |
2019-09-06 05:53:49 |
| 104.42.30.9 | attackbotsspam | Sep 5 23:25:43 vps647732 sshd[21643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.30.9 Sep 5 23:25:46 vps647732 sshd[21643]: Failed password for invalid user ts from 104.42.30.9 port 22848 ssh2 ... |
2019-09-06 05:50:59 |
| 202.131.231.210 | attackbots | Sep 5 23:27:02 core sshd[5115]: Failed password for root from 202.131.231.210 port 42900 ssh2 Sep 5 23:32:03 core sshd[11314]: Invalid user mpiuser from 202.131.231.210 port 57790 ... |
2019-09-06 05:34:34 |
| 101.36.150.59 | attack | Sep 5 11:45:57 lcdev sshd\[10471\]: Invalid user test from 101.36.150.59 Sep 5 11:45:57 lcdev sshd\[10471\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.150.59 Sep 5 11:45:59 lcdev sshd\[10471\]: Failed password for invalid user test from 101.36.150.59 port 57936 ssh2 Sep 5 11:49:27 lcdev sshd\[10716\]: Invalid user owncloud from 101.36.150.59 Sep 5 11:49:27 lcdev sshd\[10716\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.36.150.59 |
2019-09-06 05:51:35 |
| 188.114.159.114 | attack | Automatic report - Banned IP Access |
2019-09-06 05:13:50 |
| 150.136.193.165 | attack | Sep 5 23:11:34 ArkNodeAT sshd\[8282\]: Invalid user lamar from 150.136.193.165 Sep 5 23:11:34 ArkNodeAT sshd\[8282\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.193.165 Sep 5 23:11:35 ArkNodeAT sshd\[8282\]: Failed password for invalid user lamar from 150.136.193.165 port 43367 ssh2 |
2019-09-06 05:26:14 |
| 188.166.119.244 | attack | fire |
2019-09-06 05:29:08 |
| 141.98.9.130 | attackbots | Sep 5 17:19:07 web1 postfix/smtpd[16107]: warning: unknown[141.98.9.130]: SASL LOGIN authentication failed: authentication failure ... |
2019-09-06 05:29:53 |
| 159.89.139.228 | attack | Sep 5 11:09:54 web1 sshd\[19228\]: Invalid user dspacedspace from 159.89.139.228 Sep 5 11:09:54 web1 sshd\[19228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.139.228 Sep 5 11:09:56 web1 sshd\[19228\]: Failed password for invalid user dspacedspace from 159.89.139.228 port 36278 ssh2 Sep 5 11:14:26 web1 sshd\[19628\]: Invalid user password from 159.89.139.228 Sep 5 11:14:26 web1 sshd\[19628\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.139.228 |
2019-09-06 05:24:47 |
| 188.92.77.235 | attackspambots | fire |
2019-09-06 05:23:28 |
| 92.118.37.82 | attackspambots | Sep 5 23:21:12 h2177944 kernel: \[595072.746551\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=6703 PROTO=TCP SPT=55326 DPT=28839 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 5 23:22:27 h2177944 kernel: \[595147.668093\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=15379 PROTO=TCP SPT=55326 DPT=21300 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 5 23:23:03 h2177944 kernel: \[595183.513144\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=7586 PROTO=TCP SPT=55326 DPT=23531 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 5 23:23:11 h2177944 kernel: \[595192.323121\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=14802 PROTO=TCP SPT=55326 DPT=21932 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 5 23:23:17 h2177944 kernel: \[595197.854727\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.82 DST=85.214.117.9 LEN=40 |
2019-09-06 05:47:04 |
| 66.117.9.138 | attackbots | \[2019-09-05 17:22:35\] SECURITY\[1837\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-05T17:22:35.707-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00441519470549",SessionID="0x7f7b300a3788",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/66.117.9.138/49955",ACLName="no_extension_match" \[2019-09-05 17:23:44\] SECURITY\[1837\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-05T17:23:44.964-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="000441519470549",SessionID="0x7f7b30330878",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/66.117.9.138/57195",ACLName="no_extension_match" \[2019-09-05 17:24:53\] SECURITY\[1837\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-05T17:24:53.848-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="900441519470549",SessionID="0x7f7b30a920c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/66.117.9.138/58165",ACLName="no_extensi |
2019-09-06 05:27:32 |
| 194.182.67.69 | attackbotsspam | fire |
2019-09-06 05:18:04 |
| 185.137.168.72 | attackspam | fire |
2019-09-06 05:41:55 |