城市(city): unknown
省份(region): unknown
国家(country): China
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.117.249.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44730
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;1.117.249.242. IN A
;; AUTHORITY SECTION:
. 186 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 21:43:26 CST 2022
;; MSG SIZE rcvd: 106Host 242.249.117.1.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 242.249.117.1.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 222.186.42.163 | attackspam | Oct 7 07:10:27 server2 sshd\[25802\]: User root from 222.186.42.163 not allowed because not listed in AllowUsers Oct 7 07:10:27 server2 sshd\[25804\]: User root from 222.186.42.163 not allowed because not listed in AllowUsers Oct 7 07:19:06 server2 sshd\[26341\]: User root from 222.186.42.163 not allowed because not listed in AllowUsers Oct 7 07:19:06 server2 sshd\[26343\]: User root from 222.186.42.163 not allowed because not listed in AllowUsers Oct 7 07:19:46 server2 sshd\[26360\]: User root from 222.186.42.163 not allowed because not listed in AllowUsers Oct 7 07:19:46 server2 sshd\[26358\]: User root from 222.186.42.163 not allowed because not listed in AllowUsers |
2019-10-07 12:20:02 |
| 94.83.227.81 | attackbots | DATE:2019-10-07 05:54:22, IP:94.83.227.81, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2019-10-07 12:25:57 |
| 152.136.101.65 | attackspambots | Oct 6 18:19:32 web9 sshd\[8557\]: Invalid user Renault1@3 from 152.136.101.65 Oct 6 18:19:32 web9 sshd\[8557\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.101.65 Oct 6 18:19:34 web9 sshd\[8557\]: Failed password for invalid user Renault1@3 from 152.136.101.65 port 54656 ssh2 Oct 6 18:24:44 web9 sshd\[9295\]: Invalid user Illusionen123 from 152.136.101.65 Oct 6 18:24:44 web9 sshd\[9295\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.101.65 |
2019-10-07 12:38:01 |
| 106.13.74.162 | attack | Oct 7 05:59:59 vps647732 sshd[29347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.74.162 Oct 7 06:00:01 vps647732 sshd[29347]: Failed password for invalid user Billy@2017 from 106.13.74.162 port 56264 ssh2 ... |
2019-10-07 12:23:27 |
| 14.37.38.213 | attackspambots | Oct 6 12:45:02 hanapaa sshd\[30709\]: Invalid user 0okm\(IJN8uhb from 14.37.38.213 Oct 6 12:45:02 hanapaa sshd\[30709\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.37.38.213 Oct 6 12:45:04 hanapaa sshd\[30709\]: Failed password for invalid user 0okm\(IJN8uhb from 14.37.38.213 port 53898 ssh2 Oct 6 12:49:39 hanapaa sshd\[31056\]: Invalid user 0okm\(IJN8uhb from 14.37.38.213 Oct 6 12:49:39 hanapaa sshd\[31056\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.37.38.213 |
2019-10-07 08:00:37 |
| 46.38.144.202 | attack | Oct 7 05:51:02 relay postfix/smtpd\[17726\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 7 05:52:15 relay postfix/smtpd\[16150\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 7 05:53:32 relay postfix/smtpd\[14429\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 7 05:54:46 relay postfix/smtpd\[16559\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 7 05:56:01 relay postfix/smtpd\[14429\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-10-07 12:01:50 |
| 121.136.119.7 | attackbotsspam | Oct 6 18:09:42 tdfoods sshd\[30430\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7 user=root Oct 6 18:09:45 tdfoods sshd\[30430\]: Failed password for root from 121.136.119.7 port 57408 ssh2 Oct 6 18:14:30 tdfoods sshd\[30784\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7 user=root Oct 6 18:14:33 tdfoods sshd\[30784\]: Failed password for root from 121.136.119.7 port 41152 ssh2 Oct 6 18:19:23 tdfoods sshd\[31195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7 user=root |
2019-10-07 12:21:36 |
| 223.27.91.23 | attackspam | Automatic report - Port Scan Attack |
2019-10-07 12:19:12 |
| 58.254.132.140 | attackspam | Oct 6 20:25:28 ws12vmsma01 sshd[11612]: Failed password for root from 58.254.132.140 port 46010 ssh2 Oct 6 20:29:19 ws12vmsma01 sshd[12284]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.140 user=root Oct 6 20:29:21 ws12vmsma01 sshd[12284]: Failed password for root from 58.254.132.140 port 46013 ssh2 ... |
2019-10-07 07:59:43 |
| 106.12.48.30 | attackspambots | Oct 7 04:12:46 localhost sshd\[94016\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.30 user=root Oct 7 04:12:48 localhost sshd\[94016\]: Failed password for root from 106.12.48.30 port 50250 ssh2 Oct 7 04:17:24 localhost sshd\[94132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.30 user=root Oct 7 04:17:26 localhost sshd\[94132\]: Failed password for root from 106.12.48.30 port 57898 ssh2 Oct 7 04:21:58 localhost sshd\[94268\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.48.30 user=root ... |
2019-10-07 12:22:37 |
| 46.0.203.166 | attackspambots | *Port Scan* detected from 46.0.203.166 (RU/Russia/46x0x203x166.static-customer.samara.ertelecom.ru). 4 hits in the last 50 seconds |
2019-10-07 12:03:36 |
| 103.48.232.123 | attack | Oct 7 07:11:25 server sshd\[7954\]: User root from 103.48.232.123 not allowed because listed in DenyUsers Oct 7 07:11:25 server sshd\[7954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.48.232.123 user=root Oct 7 07:11:27 server sshd\[7954\]: Failed password for invalid user root from 103.48.232.123 port 37902 ssh2 Oct 7 07:17:43 server sshd\[11989\]: User root from 103.48.232.123 not allowed because listed in DenyUsers Oct 7 07:17:43 server sshd\[11989\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.48.232.123 user=root |
2019-10-07 12:32:04 |
| 138.68.12.43 | attack | Oct 7 05:54:18 ns37 sshd[15603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.12.43 |
2019-10-07 12:29:18 |
| 14.34.28.131 | attack | Oct 6 23:46:34 vpn01 sshd[770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.34.28.131 Oct 6 23:46:37 vpn01 sshd[770]: Failed password for invalid user tir from 14.34.28.131 port 53328 ssh2 ... |
2019-10-07 07:59:00 |
| 198.23.228.223 | attackspam | Oct 7 05:51:06 vserver sshd\[6511\]: Invalid user 123 from 198.23.228.223Oct 7 05:51:08 vserver sshd\[6511\]: Failed password for invalid user 123 from 198.23.228.223 port 38795 ssh2Oct 7 05:54:47 vserver sshd\[6527\]: Invalid user Montana@123 from 198.23.228.223Oct 7 05:54:49 vserver sshd\[6527\]: Failed password for invalid user Montana@123 from 198.23.228.223 port 58719 ssh2 ... |
2019-10-07 12:10:22 |