城市(city): unknown
省份(region): unknown
国家(country): Denmark
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.18.18.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59995
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;94.18.18.139. IN A
;; AUTHORITY SECTION:
. 393 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022111700 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 18 00:12:30 CST 2022
;; MSG SIZE rcvd: 105Host 139.18.18.94.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 139.18.18.94.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 122.180.48.29 | attackbotsspam | 2020-08-26T09:38:48.477857linuxbox-skyline sshd[170407]: Invalid user juliet from 122.180.48.29 port 35836 ... |
2020-08-26 23:44:12 |
| 45.129.33.154 | attackspambots | firewall-block, port(s): 53407/tcp, 53443/tcp, 53477/tcp, 53513/tcp, 53546/tcp |
2020-08-27 00:23:06 |
| 51.161.12.231 | attack | SmallBizIT.US 4 packets to tcp(8545) |
2020-08-27 00:20:55 |
| 78.128.113.42 | attackbotsspam | SmallBizIT.US 3 packets to tcp(2227,5561,7740) |
2020-08-27 00:04:38 |
| 128.199.212.194 | attackbotsspam | 128.199.212.194 - - \[26/Aug/2020:14:35:00 +0200\] "POST /wp-login.php HTTP/1.0" 200 2889 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 128.199.212.194 - - \[26/Aug/2020:14:35:04 +0200\] "POST /wp-login.php HTTP/1.0" 200 2845 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 128.199.212.194 - - \[26/Aug/2020:14:35:08 +0200\] "POST /wp-login.php HTTP/1.0" 200 2848 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-08-26 23:44:56 |
| 116.92.213.114 | attackbotsspam | Aug 26 14:54:46 host sshd[3849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.92.213.114 user=root Aug 26 14:54:48 host sshd[3849]: Failed password for root from 116.92.213.114 port 46454 ssh2 ... |
2020-08-26 23:41:05 |
| 213.217.1.38 | attack | firewall-block, port(s): 24149/tcp |
2020-08-26 23:40:16 |
| 175.24.36.114 | attack | malicious Brute-Force reported by https://www.patrick-binder.de ... |
2020-08-26 23:35:29 |
| 62.210.99.134 | attackspam | 2020-08-26T16:31:33.844240mail.standpoint.com.ua sshd[10222]: Failed password for root from 62.210.99.134 port 37984 ssh2 2020-08-26T16:35:29.424013mail.standpoint.com.ua sshd[10725]: Invalid user camera from 62.210.99.134 port 42639 2020-08-26T16:35:29.427016mail.standpoint.com.ua sshd[10725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62-210-99-134.rev.poneytelecom.eu 2020-08-26T16:35:29.424013mail.standpoint.com.ua sshd[10725]: Invalid user camera from 62.210.99.134 port 42639 2020-08-26T16:35:31.735276mail.standpoint.com.ua sshd[10725]: Failed password for invalid user camera from 62.210.99.134 port 42639 ssh2 ... |
2020-08-26 23:49:55 |
| 85.93.20.85 | attack | 200826 9:13:45 [Warning] Access denied for user 'admin'@'85.93.20.85' (using password: YES) 200826 9:15:14 [Warning] Access denied for user 'admin'@'85.93.20.85' (using password: YES) 200826 9:16:42 [Warning] Access denied for user 'admin'@'85.93.20.85' (using password: YES) ... |
2020-08-26 23:36:25 |
| 180.253.40.127 | attackbotsspam | $f2bV_matches |
2020-08-26 23:38:10 |
| 139.180.195.64 | attack | Aug 25 20:13:36 online-web-1 sshd[2877193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.180.195.64 user=r.r Aug 25 20:13:38 online-web-1 sshd[2877193]: Failed password for r.r from 139.180.195.64 port 33072 ssh2 Aug 25 20:13:38 online-web-1 sshd[2877193]: Received disconnect from 139.180.195.64 port 33072:11: Bye Bye [preauth] Aug 25 20:13:38 online-web-1 sshd[2877193]: Disconnected from 139.180.195.64 port 33072 [preauth] Aug 25 20:15:11 online-web-1 sshd[2877352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.180.195.64 user=mysql Aug 25 20:15:13 online-web-1 sshd[2877352]: Failed password for mysql from 139.180.195.64 port 50618 ssh2 Aug 25 20:15:13 online-web-1 sshd[2877352]: Received disconnect from 139.180.195.64 port 50618:11: Bye Bye [preauth] Aug 25 20:15:13 online-web-1 sshd[2877352]: Disconnected from 139.180.195.64 port 50618 [preauth] Aug 25 20:16:35 online-web-1........ ------------------------------- |
2020-08-26 23:35:45 |
| 193.27.229.232 | attack | scans 4 times in preceeding hours on the ports (in chronological order) 65106 65406 56007 55003 |
2020-08-26 23:52:15 |
| 188.246.226.71 | attackspambots | port |
2020-08-26 23:56:28 |
| 185.156.73.57 | attack | SmallBizIT.US 6 packets to tcp(53253,61033,62204,62602,62766,64299) |
2020-08-27 00:11:24 |