城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 101.42.94.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59916
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;101.42.94.114. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 15:25:01 CST 2022
;; MSG SIZE rcvd: 106Host 114.94.42.101.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 114.94.42.101.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 88.81.95.238 | attack | Suspicious access to SMTP/POP/IMAP services. |
2020-06-12 08:05:18 |
| 2.90.148.252 | attack | Unauthorized connection attempt from IP address 2.90.148.252 on Port 445(SMB) |
2020-06-12 08:16:39 |
| 93.39.116.254 | attackspam | $f2bV_matches |
2020-06-12 08:31:45 |
| 60.50.29.149 | attackbots | Jun 9 16:19:57 localhost sshd[3626211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.50.29.149 user=r.r Jun 9 16:19:59 localhost sshd[3626211]: Failed password for r.r from 60.50.29.149 port 58914 ssh2 Jun 9 16:27:52 localhost sshd[3629092]: Invalid user wolfman from 60.50.29.149 port 50818 Jun 9 16:27:52 localhost sshd[3629092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.50.29.149 Jun 9 16:27:52 localhost sshd[3629092]: Invalid user wolfman from 60.50.29.149 port 50818 Jun 9 16:27:54 localhost sshd[3629092]: Failed password for invalid user wolfman from 60.50.29.149 port 50818 ssh2 Jun 9 16:31:38 localhost sshd[3630811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.50.29.149 user=r.r Jun 9 16:31:40 localhost sshd[3630811]: Failed password for r.r from 60.50.29.149 port 59430 ssh2 Jun 9 16:35:25 localhost sshd[3632733]: I........ ------------------------------ |
2020-06-12 08:33:26 |
| 106.12.190.177 | attackspambots | 2020-06-11T19:16:18.7817451495-001 sshd[2415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.190.177 user=root 2020-06-11T19:16:20.8799291495-001 sshd[2415]: Failed password for root from 106.12.190.177 port 57132 ssh2 2020-06-11T19:19:13.9310301495-001 sshd[2532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.190.177 user=root 2020-06-11T19:19:16.0551401495-001 sshd[2532]: Failed password for root from 106.12.190.177 port 41546 ssh2 2020-06-11T19:22:10.6775421495-001 sshd[2708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.190.177 user=root 2020-06-11T19:22:12.7665801495-001 sshd[2708]: Failed password for root from 106.12.190.177 port 54186 ssh2 ... |
2020-06-12 07:57:59 |
| 108.166.155.254 | attackbots | 2020-06-12T02:31:40.321453mail.standpoint.com.ua sshd[28035]: Invalid user clinipace from 108.166.155.254 port 48884 2020-06-12T02:31:40.324987mail.standpoint.com.ua sshd[28035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.166.155.254 2020-06-12T02:31:40.321453mail.standpoint.com.ua sshd[28035]: Invalid user clinipace from 108.166.155.254 port 48884 2020-06-12T02:31:42.664996mail.standpoint.com.ua sshd[28035]: Failed password for invalid user clinipace from 108.166.155.254 port 48884 ssh2 2020-06-12T02:33:18.131034mail.standpoint.com.ua sshd[28234]: Invalid user VM from 108.166.155.254 port 35690 ... |
2020-06-12 08:03:12 |
| 184.71.9.2 | attackspam | Jun 12 01:42:27 electroncash sshd[53511]: Failed password for invalid user postgres from 184.71.9.2 port 34434 ssh2 Jun 12 01:45:43 electroncash sshd[54381]: Invalid user aye from 184.71.9.2 port 35291 Jun 12 01:45:43 electroncash sshd[54381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.71.9.2 Jun 12 01:45:43 electroncash sshd[54381]: Invalid user aye from 184.71.9.2 port 35291 Jun 12 01:45:45 electroncash sshd[54381]: Failed password for invalid user aye from 184.71.9.2 port 35291 ssh2 ... |
2020-06-12 08:32:23 |
| 5.252.193.112 | attackbotsspam | 3389BruteforceStormFW21 |
2020-06-12 08:25:12 |
| 129.146.235.181 | attackspambots | Jun 9 17:35:53 ns sshd[3979]: Connection from 129.146.235.181 port 42090 on 134.119.39.98 port 22 Jun 9 17:35:54 ns sshd[3979]: Invalid user tecmin from 129.146.235.181 port 42090 Jun 9 17:35:54 ns sshd[3979]: Failed password for invalid user tecmin from 129.146.235.181 port 42090 ssh2 Jun 9 17:35:54 ns sshd[3979]: Received disconnect from 129.146.235.181 port 42090:11: Bye Bye [preauth] Jun 9 17:35:54 ns sshd[3979]: Disconnected from 129.146.235.181 port 42090 [preauth] Jun 9 17:49:48 ns sshd[22803]: Connection from 129.146.235.181 port 44274 on 134.119.39.98 port 22 Jun 9 17:49:49 ns sshd[22803]: User r.r from 129.146.235.181 not allowed because not listed in AllowUsers Jun 9 17:49:49 ns sshd[22803]: Failed password for invalid user r.r from 129.146.235.181 port 44274 ssh2 Jun 9 17:49:49 ns sshd[22803]: Received disconnect from 129.146.235.181 port 44274:11: Bye Bye [preauth] Jun 9 17:49:49 ns sshd[22803]: Disconnected from 129.146.235.181 port 44274 [preaut........ ------------------------------- |
2020-06-12 08:19:02 |
| 134.122.76.185 | attack | Tried to find non-existing directory/file on the server |
2020-06-12 07:55:21 |
| 145.239.239.83 | attackbots | Jun 12 01:30:07 sip sshd[618112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.239.83 Jun 12 01:30:07 sip sshd[618112]: Invalid user admin from 145.239.239.83 port 39710 Jun 12 01:30:09 sip sshd[618112]: Failed password for invalid user admin from 145.239.239.83 port 39710 ssh2 ... |
2020-06-12 08:01:54 |
| 218.76.136.89 | attackspambots | DATE:2020-06-12 00:27:08,IP:218.76.136.89,MATCHES:10,PORT:ssh |
2020-06-12 07:57:07 |
| 77.42.84.37 | attackbotsspam | Automatic report - Port Scan Attack |
2020-06-12 08:08:19 |
| 191.31.167.186 | attackbots | 20/6/11@18:26:28: FAIL: Alarm-Intrusion address from=191.31.167.186 ... |
2020-06-12 08:31:12 |
| 217.21.54.221 | attack | Jun 12 01:40:24 cp sshd[20747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.21.54.221 |
2020-06-12 08:28:36 |