城市(city): Riga
省份(region): Riga
国家(country): Latvia
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 84.38.138.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10653
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;84.38.138.8. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025021301 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 14 08:56:51 CST 2025
;; MSG SIZE rcvd: 104
Host 8.138.38.84.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 8.138.38.84.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 35.195.238.142 | attackspambots | Unauthorized connection attempt detected from IP address 35.195.238.142 to port 2220 [J] |
2020-01-24 04:31:38 |
| 189.238.60.55 | attackspam | Lines containing failures of 189.238.60.55 Jan 23 13:48:55 zabbix sshd[1678]: Invalid user testuser from 189.238.60.55 port 52497 Jan 23 13:48:55 zabbix sshd[1678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.238.60.55 Jan 23 13:48:57 zabbix sshd[1678]: Failed password for invalid user testuser from 189.238.60.55 port 52497 ssh2 Jan 23 13:48:57 zabbix sshd[1678]: Received disconnect from 189.238.60.55 port 52497:11: Bye Bye [preauth] Jan 23 13:48:57 zabbix sshd[1678]: Disconnected from invalid user testuser 189.238.60.55 port 52497 [preauth] Jan 23 14:35:12 zabbix sshd[8356]: Invalid user csgo from 189.238.60.55 port 55654 Jan 23 14:35:12 zabbix sshd[8356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.238.60.55 Jan 23 14:35:13 zabbix sshd[8356]: Failed password for invalid user csgo from 189.238.60.55 port 55654 ssh2 Jan 23 14:35:13 zabbix sshd[8356]: Received disconnect from 1........ ------------------------------ |
2020-01-24 04:32:29 |
| 89.248.160.193 | attackspambots | Jan 23 21:03:53 h2177944 kernel: \[3008123.921032\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=89.248.160.193 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=12926 PROTO=TCP SPT=44487 DPT=11412 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 23 21:03:53 h2177944 kernel: \[3008123.921047\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=89.248.160.193 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=12926 PROTO=TCP SPT=44487 DPT=11412 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 23 21:30:46 h2177944 kernel: \[3009736.853441\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=89.248.160.193 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=9343 PROTO=TCP SPT=44487 DPT=10685 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 23 21:30:46 h2177944 kernel: \[3009736.853455\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=89.248.160.193 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=9343 PROTO=TCP SPT=44487 DPT=10685 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 23 21:34:30 h2177944 kernel: \[3009960.994476\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=89.248.160.193 DST=85.21 |
2020-01-24 04:36:01 |
| 138.197.141.133 | attackbotsspam | Jan 23 17:23:15 debian-2gb-nbg1-2 kernel: \[2055874.163906\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=138.197.141.133 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=54321 PROTO=TCP SPT=39737 DPT=8088 WINDOW=65535 RES=0x00 SYN URGP=0 |
2020-01-24 04:21:38 |
| 202.154.182.254 | attackspambots | Automatic report - XMLRPC Attack |
2020-01-24 04:03:19 |
| 209.235.67.48 | attackbotsspam | Jan 23 17:04:14 DAAP sshd[6657]: Invalid user britz from 209.235.67.48 port 33716 Jan 23 17:04:14 DAAP sshd[6657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.235.67.48 Jan 23 17:04:14 DAAP sshd[6657]: Invalid user britz from 209.235.67.48 port 33716 Jan 23 17:04:16 DAAP sshd[6657]: Failed password for invalid user britz from 209.235.67.48 port 33716 ssh2 ... |
2020-01-24 04:35:16 |
| 197.251.221.164 | attackspam | unauthorized connection attempt |
2020-01-24 04:23:19 |
| 117.66.243.77 | attack | Unauthorized connection attempt detected from IP address 117.66.243.77 to port 2220 [J] |
2020-01-24 04:07:06 |
| 76.164.234.122 | attack | Unauthorized connection attempt from IP address 76.164.234.122 on Port 3306(MYSQL) |
2020-01-24 03:55:45 |
| 92.63.196.10 | attackbots | 34282/tcp 34254/tcp 34230/tcp... [2019-11-29/2020-01-23]4057pkt,1437pt.(tcp) |
2020-01-24 04:34:46 |
| 118.126.90.89 | attackbots | Unauthorized connection attempt detected from IP address 118.126.90.89 to port 2220 [J] |
2020-01-24 04:10:05 |
| 185.234.217.164 | attackspam | 2020-01-23T16:23:44.607951 X postfix/smtpd[6975]: lost connection after AUTH from unknown[185.234.217.164] 2020-01-23T16:44:12.015545 X postfix/smtpd[8851]: lost connection after AUTH from unknown[185.234.217.164] 2020-01-23T17:04:31.017412 X postfix/smtpd[11843]: lost connection after AUTH from unknown[185.234.217.164] |
2020-01-24 04:28:33 |
| 104.248.90.77 | attack | $f2bV_matches |
2020-01-24 03:59:42 |
| 81.137.199.19 | attack | Jan 23 09:43:02 tdfoods sshd\[21053\]: Invalid user control from 81.137.199.19 Jan 23 09:43:02 tdfoods sshd\[21053\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host81-137-199-19.in-addr.btopenworld.com Jan 23 09:43:04 tdfoods sshd\[21053\]: Failed password for invalid user control from 81.137.199.19 port 53368 ssh2 Jan 23 09:47:01 tdfoods sshd\[21355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host81-137-199-19.in-addr.btopenworld.com user=root Jan 23 09:47:03 tdfoods sshd\[21355\]: Failed password for root from 81.137.199.19 port 35415 ssh2 |
2020-01-24 04:01:51 |
| 102.39.22.74 | attackspam | unauthorized connection attempt |
2020-01-24 04:24:21 |