城市(city): unknown
省份(region): unknown
国家(country): Republic of China (ROC)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.168.145.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57825
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;1.168.145.114. IN A
;; AUTHORITY SECTION:
. 299 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022092501 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 26 04:42:13 CST 2022
;; MSG SIZE rcvd: 106114.145.168.1.in-addr.arpa domain name pointer 1-168-145-114.dynamic-ip.hinet.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
114.145.168.1.in-addr.arpa name = 1-168-145-114.dynamic-ip.hinet.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 35.220.138.240 | attackspam | Apr 6 18:49:24 nbi-636 sshd[20234]: User r.r from 35.220.138.240 not allowed because not listed in AllowUsers Apr 6 18:49:24 nbi-636 sshd[20234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.220.138.240 user=r.r Apr 6 18:49:26 nbi-636 sshd[20234]: Failed password for invalid user r.r from 35.220.138.240 port 38228 ssh2 Apr 6 18:49:29 nbi-636 sshd[20234]: Received disconnect from 35.220.138.240 port 38228:11: Bye Bye [preauth] Apr 6 18:49:29 nbi-636 sshd[20234]: Disconnected from invalid user r.r 35.220.138.240 port 38228 [preauth] Apr 6 18:55:03 nbi-636 sshd[21820]: User r.r from 35.220.138.240 not allowed because not listed in AllowUsers Apr 6 18:55:03 nbi-636 sshd[21820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.220.138.240 user=r.r Apr 6 18:55:05 nbi-636 sshd[21820]: Failed password for invalid user r.r from 35.220.138.240 port 58154 ssh2 Apr 6 18:55:07 nbi-636 ........ ------------------------------- |
2020-04-08 03:34:01 |
| 109.70.100.20 | attackbotsspam | Fail2Ban Ban Triggered |
2020-04-08 03:37:07 |
| 106.13.230.238 | attack | Apr 7 15:51:10 sshgateway sshd\[16503\]: Invalid user phion from 106.13.230.238 Apr 7 15:51:10 sshgateway sshd\[16503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.230.238 Apr 7 15:51:12 sshgateway sshd\[16503\]: Failed password for invalid user phion from 106.13.230.238 port 51284 ssh2 |
2020-04-08 03:25:38 |
| 36.93.3.254 | attackbotsspam | Unauthorized connection attempt from IP address 36.93.3.254 on Port 445(SMB) |
2020-04-08 03:17:50 |
| 49.206.220.172 | attack | Unauthorized connection attempt from IP address 49.206.220.172 on Port 445(SMB) |
2020-04-08 03:27:35 |
| 188.129.89.65 | attack | Automatic report - Port Scan Attack |
2020-04-08 03:49:27 |
| 188.254.0.183 | attack | Apr 7 19:51:54 itv-usvr-01 sshd[12869]: Invalid user user from 188.254.0.183 Apr 7 19:51:54 itv-usvr-01 sshd[12869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.254.0.183 Apr 7 19:51:54 itv-usvr-01 sshd[12869]: Invalid user user from 188.254.0.183 Apr 7 19:51:56 itv-usvr-01 sshd[12869]: Failed password for invalid user user from 188.254.0.183 port 46640 ssh2 Apr 7 20:00:01 itv-usvr-01 sshd[13173]: Invalid user postgres from 188.254.0.183 |
2020-04-08 03:23:37 |
| 45.64.126.103 | attack | Apr 7 16:24:12 sshgateway sshd\[16742\]: Invalid user oracle from 45.64.126.103 Apr 7 16:24:12 sshgateway sshd\[16742\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.64.126.103 Apr 7 16:24:14 sshgateway sshd\[16742\]: Failed password for invalid user oracle from 45.64.126.103 port 51714 ssh2 |
2020-04-08 03:33:02 |
| 202.51.74.188 | attackspambots | Apr 7 18:34:11 ArkNodeAT sshd\[22575\]: Invalid user cloud from 202.51.74.188 Apr 7 18:34:11 ArkNodeAT sshd\[22575\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.51.74.188 Apr 7 18:34:13 ArkNodeAT sshd\[22575\]: Failed password for invalid user cloud from 202.51.74.188 port 47538 ssh2 |
2020-04-08 03:39:44 |
| 36.81.6.2 | attack | Attempt to attack host OS, exploiting network vulnerabilities, on 07-04-2020 19:30:11. |
2020-04-08 03:42:54 |
| 51.91.140.218 | attackspambots | Apr 7 21:09:52 lock-38 sshd[709200]: Unable to negotiate with 51.91.140.218 port 60764: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Apr 7 21:10:30 lock-38 sshd[709238]: Unable to negotiate with 51.91.140.218 port 38092: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Apr 7 21:11:08 lock-38 sshd[709260]: Unable to negotiate with 51.91.140.218 port 43912: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Apr 7 21:11:46 lock-38 sshd[709263]: Unable to negotiate with 51.91.140.218 port 49634: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Apr 7 21:12:22 lock-38 sshd[709284] ... |
2020-04-08 03:36:32 |
| 180.76.100.33 | attack | Apr 7 21:20:57 vmd48417 sshd[25373]: Failed password for root from 180.76.100.33 port 41798 ssh2 |
2020-04-08 03:43:36 |
| 94.25.95.38 | attack | Unauthorized connection attempt from IP address 94.25.95.38 on Port 445(SMB) |
2020-04-08 03:31:02 |
| 201.131.7.105 | attackspambots | Unauthorized connection attempt from IP address 201.131.7.105 on Port 445(SMB) |
2020-04-08 03:22:08 |
| 96.44.162.82 | attack | Brute Force attack - banned by Fail2Ban |
2020-04-08 03:25:55 |