城市(city): unknown
省份(region): unknown
国家(country): Canada
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 72.142.169.172
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7959
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;72.142.169.172. IN A
;; AUTHORITY SECTION:
. 446 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022010600 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 06 19:56:09 CST 2022
;; MSG SIZE rcvd: 107172.169.142.72.in-addr.arpa domain name pointer unallocated-static.rogers.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
172.169.142.72.in-addr.arpa name = unallocated-static.rogers.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 51.83.70.93 | attack | Invalid user test from 51.83.70.93 port 51642 |
2020-09-22 03:44:53 |
| 206.189.87.108 | attackbotsspam | detected by Fail2Ban |
2020-09-22 03:28:22 |
| 101.231.146.34 | attackbotsspam | Sep 21 21:04:35 OPSO sshd\[15171\]: Invalid user xx from 101.231.146.34 port 54115 Sep 21 21:04:35 OPSO sshd\[15171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.231.146.34 Sep 21 21:04:37 OPSO sshd\[15171\]: Failed password for invalid user xx from 101.231.146.34 port 54115 ssh2 Sep 21 21:09:56 OPSO sshd\[16219\]: Invalid user romain from 101.231.146.34 port 57340 Sep 21 21:09:56 OPSO sshd\[16219\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.231.146.34 |
2020-09-22 03:23:48 |
| 82.64.201.47 | attack | Sep 21 18:55:47 ovpn sshd\[20924\]: Invalid user test1 from 82.64.201.47 Sep 21 18:55:47 ovpn sshd\[20924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.64.201.47 Sep 21 18:55:50 ovpn sshd\[20924\]: Failed password for invalid user test1 from 82.64.201.47 port 53010 ssh2 Sep 21 19:00:47 ovpn sshd\[22230\]: Invalid user ubuntu from 82.64.201.47 Sep 21 19:00:47 ovpn sshd\[22230\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.64.201.47 |
2020-09-22 03:18:58 |
| 142.93.52.174 | attackspam | 142.93.52.174 - - [21/Sep/2020:20:43:25 +0200] "POST /xmlrpc.php HTTP/1.1" 403 613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.52.174 - - [21/Sep/2020:20:55:53 +0200] "POST /xmlrpc.php HTTP/1.1" 403 613 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-22 03:16:06 |
| 189.8.108.50 | attackbotsspam | detected by Fail2Ban |
2020-09-22 03:20:38 |
| 104.206.128.54 | attackbots |
|
2020-09-22 03:42:43 |
| 144.48.227.74 | attackspambots | Sep 21 20:35:24 buvik sshd[2136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.48.227.74 Sep 21 20:35:27 buvik sshd[2136]: Failed password for invalid user monica from 144.48.227.74 port 39734 ssh2 Sep 21 20:38:12 buvik sshd[2450]: Invalid user postgres from 144.48.227.74 ... |
2020-09-22 03:41:06 |
| 164.90.194.165 | attackspam | Invalid user teamspeak2 from 164.90.194.165 port 52224 |
2020-09-22 03:30:40 |
| 139.162.137.207 | attackbots | *Port Scan* detected from 139.162.137.207 (DE/Germany/Hesse/Frankfurt am Main/li1403-207.members.linode.com). 4 hits in the last 66 seconds |
2020-09-22 03:35:06 |
| 222.186.175.148 | attack | 2020-09-21T22:31:53.662759lavrinenko.info sshd[27369]: Failed password for root from 222.186.175.148 port 25752 ssh2 2020-09-21T22:31:57.319342lavrinenko.info sshd[27369]: Failed password for root from 222.186.175.148 port 25752 ssh2 2020-09-21T22:32:00.969448lavrinenko.info sshd[27369]: Failed password for root from 222.186.175.148 port 25752 ssh2 2020-09-21T22:32:05.581087lavrinenko.info sshd[27369]: Failed password for root from 222.186.175.148 port 25752 ssh2 2020-09-21T22:32:09.721806lavrinenko.info sshd[27369]: Failed password for root from 222.186.175.148 port 25752 ssh2 ... |
2020-09-22 03:32:46 |
| 142.4.211.222 | attackspam | 142.4.211.222 - - [21/Sep/2020:16:50:30 +0200] "GET /wp-login.php HTTP/1.1" 200 9184 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.211.222 - - [21/Sep/2020:16:50:31 +0200] "POST /wp-login.php HTTP/1.1" 200 9435 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.211.222 - - [21/Sep/2020:16:50:31 +0200] "GET /wp-login.php HTTP/1.1" 200 9184 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-09-22 03:20:13 |
| 13.92.97.171 | attackbots | k+ssh-bruteforce |
2020-09-22 03:13:08 |
| 35.190.214.113 | attack | Brute forcing RDP port 3389 |
2020-09-22 03:17:48 |
| 125.42.4.7 | attackspam | Found on Alienvault / proto=6 . srcport=38058 . dstport=23 . (2292) |
2020-09-22 03:18:35 |