城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 74.91.130.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15784
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;74.91.130.140. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020601 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 07 04:31:50 CST 2025
;; MSG SIZE rcvd: 106b'Host 140.130.91.74.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 74.91.130.140.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 209.97.138.97 | attack | 209.97.138.97 - - [23/Aug/2020:14:25:13 +0200] "GET /wp-login.php HTTP/1.1" 200 9040 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 209.97.138.97 - - [23/Aug/2020:14:25:15 +0200] "POST /wp-login.php HTTP/1.1" 200 9291 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 209.97.138.97 - - [23/Aug/2020:14:25:16 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-23 20:48:09 |
| 118.193.35.172 | attackspambots | [ssh] SSH attack |
2020-08-23 20:55:30 |
| 178.128.41.141 | attack | Aug 23 17:51:59 dhoomketu sshd[2599586]: Failed password for invalid user ubuntu from 178.128.41.141 port 46712 ssh2 Aug 23 17:55:19 dhoomketu sshd[2599684]: Invalid user administrador from 178.128.41.141 port 53776 Aug 23 17:55:19 dhoomketu sshd[2599684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.41.141 Aug 23 17:55:19 dhoomketu sshd[2599684]: Invalid user administrador from 178.128.41.141 port 53776 Aug 23 17:55:21 dhoomketu sshd[2599684]: Failed password for invalid user administrador from 178.128.41.141 port 53776 ssh2 ... |
2020-08-23 20:43:42 |
| 185.220.102.249 | attackbots | 2020-08-23T12:25:19.789339abusebot-2.cloudsearch.cf sshd[22541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=tor-exit-relay-3.anonymizing-proxy.digitalcourage.de user=root 2020-08-23T12:25:21.479471abusebot-2.cloudsearch.cf sshd[22541]: Failed password for root from 185.220.102.249 port 30396 ssh2 2020-08-23T12:25:24.201220abusebot-2.cloudsearch.cf sshd[22541]: Failed password for root from 185.220.102.249 port 30396 ssh2 2020-08-23T12:25:19.789339abusebot-2.cloudsearch.cf sshd[22541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=tor-exit-relay-3.anonymizing-proxy.digitalcourage.de user=root 2020-08-23T12:25:21.479471abusebot-2.cloudsearch.cf sshd[22541]: Failed password for root from 185.220.102.249 port 30396 ssh2 2020-08-23T12:25:24.201220abusebot-2.cloudsearch.cf sshd[22541]: Failed password for root from 185.220.102.249 port 30396 ssh2 2020-08-23T12:25:19.789339abusebot-2.cloudsearch.cf sshd[2 ... |
2020-08-23 20:33:53 |
| 54.173.162.207 | attackbots | malicious Brute-Force reported by https://www.patrick-binder.de ... |
2020-08-23 20:41:45 |
| 87.251.85.228 | attackbotsspam | Sending SPAM email |
2020-08-23 20:49:46 |
| 128.199.244.150 | attackbots | 128.199.244.150 - - [23/Aug/2020:13:25:16 +0100] "POST /wp-login.php HTTP/1.1" 200 1927 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 128.199.244.150 - - [23/Aug/2020:13:25:19 +0100] "POST /wp-login.php HTTP/1.1" 200 1868 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 128.199.244.150 - - [23/Aug/2020:13:25:19 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-23 20:45:47 |
| 14.21.42.158 | attackspambots | Aug 23 06:25:20 Host-KLAX-C sshd[23579]: Disconnected from invalid user guest 14.21.42.158 port 53002 [preauth] ... |
2020-08-23 20:45:17 |
| 178.62.199.240 | attackbots | *Port Scan* detected from 178.62.199.240 (NL/Netherlands/North Holland/Amsterdam/-). 4 hits in the last 120 seconds |
2020-08-23 20:57:43 |
| 159.89.195.29 | attackspambots | Lines containing failures of 159.89.195.29 Aug 20 23:24:20 new sshd[20023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.195.29 user=r.r Aug 20 23:24:23 new sshd[20023]: Failed password for r.r from 159.89.195.29 port 38422 ssh2 Aug 20 23:24:23 new sshd[20023]: Received disconnect from 159.89.195.29 port 38422:11: Bye Bye [preauth] Aug 20 23:24:23 new sshd[20023]: Disconnected from authenticating user r.r 159.89.195.29 port 38422 [preauth] Aug 20 23:38:40 new sshd[24577]: Invalid user dice from 159.89.195.29 port 48088 Aug 20 23:38:40 new sshd[24577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.195.29 Aug 20 23:38:42 new sshd[24577]: Failed password for invalid user dice from 159.89.195.29 port 48088 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=159.89.195.29 |
2020-08-23 20:39:13 |
| 45.95.168.96 | attack | 2020-08-23 14:18:47 dovecot_login authenticator failed for pr.predictams.live \(USER\) \[45.95.168.96\]: 535 Incorrect authentication data \(set_id=order@darkrp.com\) 2020-08-23 14:18:47 dovecot_login authenticator failed for pr.predictams.live \(USER\) \[45.95.168.96\]: 535 Incorrect authentication data \(set_id=order@german-hoeffner.net\) 2020-08-23 14:18:47 dovecot_login authenticator failed for pr.predictams.live \(USER\) \[45.95.168.96\]: 535 Incorrect authentication data \(set_id=order@yt.gl\) 2020-08-23 14:24:23 dovecot_login authenticator failed for pr.predictams.live \(USER\) \[45.95.168.96\]: 535 Incorrect authentication data \(set_id=order@german-hoeffner.net\) 2020-08-23 14:24:23 dovecot_login authenticator failed for pr.predictams.live \(USER\) \[45.95.168.96\]: 535 Incorrect authentication data \(set_id=order@darkrp.com\) ... |
2020-08-23 20:43:25 |
| 159.89.38.228 | attackspam | Aug 23 14:47:42 vps647732 sshd[15523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.38.228 Aug 23 14:47:43 vps647732 sshd[15523]: Failed password for invalid user centos from 159.89.38.228 port 36878 ssh2 ... |
2020-08-23 21:02:58 |
| 35.132.212.26 | attackbots | Aug 23 15:25:02 hosting sshd[6304]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=035-132-212-026.res.spectrum.com user=admin Aug 23 15:25:03 hosting sshd[6304]: Failed password for admin from 35.132.212.26 port 49659 ssh2 Aug 23 15:25:05 hosting sshd[6555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=035-132-212-026.res.spectrum.com user=admin Aug 23 15:25:07 hosting sshd[6555]: Failed password for admin from 35.132.212.26 port 49744 ssh2 Aug 23 15:25:09 hosting sshd[6558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=035-132-212-026.res.spectrum.com user=admin Aug 23 15:25:11 hosting sshd[6558]: Failed password for admin from 35.132.212.26 port 49786 ssh2 ... |
2020-08-23 20:56:06 |
| 139.199.18.194 | attackbots | Aug 23 18:17:16 dhoomketu sshd[2600315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.18.194 Aug 23 18:17:16 dhoomketu sshd[2600315]: Invalid user ksk from 139.199.18.194 port 53220 Aug 23 18:17:19 dhoomketu sshd[2600315]: Failed password for invalid user ksk from 139.199.18.194 port 53220 ssh2 Aug 23 18:21:58 dhoomketu sshd[2600400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.18.194 user=root Aug 23 18:22:00 dhoomketu sshd[2600400]: Failed password for root from 139.199.18.194 port 50882 ssh2 ... |
2020-08-23 20:53:24 |
| 2.92.13.63 | attackspam | $f2bV_matches |
2020-08-23 21:00:59 |