城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 72.126.31.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16931
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;72.126.31.139. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 10:02:50 CST 2025
;; MSG SIZE rcvd: 106139.31.126.72.in-addr.arpa domain name pointer 139.sub-72-126-31.myvzw.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
139.31.126.72.in-addr.arpa name = 139.sub-72-126-31.myvzw.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 42.119.201.181 | attackspam | (Oct 3) LEN=40 TTL=47 ID=47178 TCP DPT=8080 WINDOW=32533 SYN (Oct 2) LEN=40 TTL=47 ID=34886 TCP DPT=8080 WINDOW=32533 SYN (Oct 2) LEN=40 TTL=47 ID=19517 TCP DPT=8080 WINDOW=23861 SYN (Oct 2) LEN=40 TTL=47 ID=17855 TCP DPT=8080 WINDOW=18477 SYN (Oct 1) LEN=40 TTL=47 ID=6355 TCP DPT=8080 WINDOW=23861 SYN (Oct 1) LEN=40 TTL=47 ID=29727 TCP DPT=8080 WINDOW=63148 SYN (Oct 1) LEN=40 TTL=47 ID=30662 TCP DPT=8080 WINDOW=23861 SYN (Oct 1) LEN=40 TTL=47 ID=14700 TCP DPT=8080 WINDOW=63148 SYN (Oct 1) LEN=40 TTL=47 ID=43390 TCP DPT=8080 WINDOW=32533 SYN (Oct 1) LEN=40 TTL=47 ID=49416 TCP DPT=8080 WINDOW=32533 SYN (Sep 30) LEN=40 TTL=43 ID=7115 TCP DPT=8080 WINDOW=32533 SYN (Sep 30) LEN=40 TTL=43 ID=35 TCP DPT=8080 WINDOW=63148 SYN (Sep 30) LEN=40 TTL=48 ID=27801 TCP DPT=8080 WINDOW=23861 SYN (Sep 30) LEN=40 TTL=47 ID=14719 TCP DPT=8080 WINDOW=18477 SYN |
2019-10-03 08:08:16 |
| 106.13.136.3 | attackbotsspam | Oct 3 03:14:30 site2 sshd\[3485\]: Invalid user web from 106.13.136.3Oct 3 03:14:33 site2 sshd\[3485\]: Failed password for invalid user web from 106.13.136.3 port 38878 ssh2Oct 3 03:19:11 site2 sshd\[3634\]: Invalid user bernier1 from 106.13.136.3Oct 3 03:19:13 site2 sshd\[3634\]: Failed password for invalid user bernier1 from 106.13.136.3 port 46458 ssh2Oct 3 03:23:56 site2 sshd\[3783\]: Failed password for manager from 106.13.136.3 port 54008 ssh2 ... |
2019-10-03 08:26:20 |
| 14.63.167.192 | attackspam | Oct 2 20:15:35 ny01 sshd[21121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.167.192 Oct 2 20:15:37 ny01 sshd[21121]: Failed password for invalid user paul from 14.63.167.192 port 41902 ssh2 Oct 2 20:20:13 ny01 sshd[21914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.167.192 |
2019-10-03 08:28:56 |
| 103.63.109.74 | attackspambots | Oct 2 14:03:28 auw2 sshd\[9114\]: Invalid user teste from 103.63.109.74 Oct 2 14:03:28 auw2 sshd\[9114\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.63.109.74 Oct 2 14:03:30 auw2 sshd\[9114\]: Failed password for invalid user teste from 103.63.109.74 port 49712 ssh2 Oct 2 14:08:15 auw2 sshd\[9545\]: Invalid user super from 103.63.109.74 Oct 2 14:08:15 auw2 sshd\[9545\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.63.109.74 |
2019-10-03 08:09:21 |
| 106.13.32.106 | attackspambots | Automatic report - Banned IP Access |
2019-10-03 08:27:03 |
| 172.108.154.2 | attackbots | Oct 2 14:15:02 php1 sshd\[28530\]: Invalid user fbackup from 172.108.154.2 Oct 2 14:15:02 php1 sshd\[28530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.108.154.2 Oct 2 14:15:04 php1 sshd\[28530\]: Failed password for invalid user fbackup from 172.108.154.2 port 59407 ssh2 Oct 2 14:19:32 php1 sshd\[28976\]: Invalid user an from 172.108.154.2 Oct 2 14:19:32 php1 sshd\[28976\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.108.154.2 |
2019-10-03 08:20:39 |
| 54.37.254.57 | attack | detected by Fail2Ban |
2019-10-03 07:57:20 |
| 91.180.125.193 | attackspambots | Oct 2 09:48:48 XXX sshd[8179]: Invalid user frank from 91.180.125.193 port 47892 |
2019-10-03 08:32:00 |
| 116.196.94.108 | attackbotsspam | 2019-10-02T23:42:42.627968abusebot-7.cloudsearch.cf sshd\[8652\]: Invalid user mitchell from 116.196.94.108 port 53678 |
2019-10-03 08:35:09 |
| 103.247.88.136 | attack | Oct 3 02:07:52 mail kernel: [1250639.684976] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=103.247.88.136 DST=77.73.69.240 LEN=40 TOS=0x08 PREC=0x20 TTL=78 ID=8407 DF PROTO=TCP SPT=56166 DPT=443 WINDOW=29200 RES=0x00 SYN URGP=0 ... |
2019-10-03 08:09:00 |
| 106.13.67.22 | attack | Oct 2 20:15:49 xtremcommunity sshd\[118885\]: Invalid user vk from 106.13.67.22 port 44926 Oct 2 20:15:49 xtremcommunity sshd\[118885\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.67.22 Oct 2 20:15:52 xtremcommunity sshd\[118885\]: Failed password for invalid user vk from 106.13.67.22 port 44926 ssh2 Oct 2 20:19:49 xtremcommunity sshd\[118994\]: Invalid user admin from 106.13.67.22 port 48288 Oct 2 20:19:49 xtremcommunity sshd\[118994\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.67.22 ... |
2019-10-03 08:26:45 |
| 77.247.110.222 | attackspam | 10/03/2019-00:16:06.091820 77.247.110.222 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 75 |
2019-10-03 08:13:54 |
| 189.10.195.130 | attack | Oct 2 23:56:52 *** sshd[21139]: Invalid user postgres from 189.10.195.130 |
2019-10-03 08:30:34 |
| 123.206.51.192 | attackbotsspam | Oct 3 01:27:29 lnxded63 sshd[7856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.51.192 |
2019-10-03 08:29:17 |
| 198.50.138.230 | attackspam | Oct 3 00:10:41 hcbbdb sshd\[13346\]: Invalid user guest from 198.50.138.230 Oct 3 00:10:41 hcbbdb sshd\[13346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip230.ip-198-50-138.net Oct 3 00:10:44 hcbbdb sshd\[13346\]: Failed password for invalid user guest from 198.50.138.230 port 56406 ssh2 Oct 3 00:15:00 hcbbdb sshd\[13793\]: Invalid user helpdesk from 198.50.138.230 Oct 3 00:15:00 hcbbdb sshd\[13793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip230.ip-198-50-138.net |
2019-10-03 08:23:17 |