城市(city): unknown
省份(region): unknown
国家(country): South Africa
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 102.214.192.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14608
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;102.214.192.242. IN A
;; AUTHORITY SECTION:
. 288 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2023102100 1800 900 604800 86400
;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 21 20:40:43 CST 2023
;; MSG SIZE rcvd: 108Host 242.192.214.102.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 242.192.214.102.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 191.53.221.147 | attack | Brute force attempt |
2019-08-15 08:49:31 |
| 218.237.65.80 | attack | 08/14/2019-20:32:38.319098 218.237.65.80 Protocol: 6 ET SCAN Potential SSH Scan |
2019-08-15 08:32:57 |
| 172.81.243.232 | attackbotsspam | Aug 15 03:45:16 server sshd\[599\]: Invalid user amp from 172.81.243.232 port 34794 Aug 15 03:45:16 server sshd\[599\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.243.232 Aug 15 03:45:19 server sshd\[599\]: Failed password for invalid user amp from 172.81.243.232 port 34794 ssh2 Aug 15 03:54:52 server sshd\[15878\]: User root from 172.81.243.232 not allowed because listed in DenyUsers Aug 15 03:54:52 server sshd\[15878\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.243.232 user=root |
2019-08-15 08:59:53 |
| 51.15.146.34 | attackbots | Aug 15 01:35:36 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3c:4d:20:28:99:3a:4d:30:af:08:00 SRC=51.15.146.34 DST=213.136.73.128 LEN=441 TOS=0x00 PREC=0x00 TTL=60 ID=0 DF PROTO=UDP SPT=6839 DPT=6060 LEN=421 Aug 15 01:35:37 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3c:4d:20:28:99:3a:4d:30:af:08:00 SRC=51.15.146.34 DST=213.136.73.128 LEN=441 TOS=0x00 PREC=0x00 TTL=60 ID=0 DF PROTO=UDP SPT=6839 DPT=6071 LEN=421 Aug 15 01:35:37 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3c:4d:20:28:99:3a:4d:30:af:08:00 SRC=51.15.146.34 DST=213.136.73.128 LEN=441 TOS=0x00 PREC=0x00 TTL=60 ID=0 DF PROTO=UDP SPT=6839 DPT=6071 LEN=421 ... |
2019-08-15 08:53:58 |
| 14.98.4.82 | attackspam | Aug 14 23:36:02 MK-Soft-VM7 sshd\[13059\]: Invalid user vi from 14.98.4.82 port 36939 Aug 14 23:36:02 MK-Soft-VM7 sshd\[13059\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.98.4.82 Aug 14 23:36:04 MK-Soft-VM7 sshd\[13059\]: Failed password for invalid user vi from 14.98.4.82 port 36939 ssh2 ... |
2019-08-15 08:39:06 |
| 175.184.233.107 | attackbots | Aug 14 20:32:10 xtremcommunity sshd\[6563\]: Invalid user tju1 from 175.184.233.107 port 43378 Aug 14 20:32:10 xtremcommunity sshd\[6563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.184.233.107 Aug 14 20:32:12 xtremcommunity sshd\[6563\]: Failed password for invalid user tju1 from 175.184.233.107 port 43378 ssh2 Aug 14 20:37:13 xtremcommunity sshd\[6815\]: Invalid user test from 175.184.233.107 port 34860 Aug 14 20:37:13 xtremcommunity sshd\[6815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.184.233.107 ... |
2019-08-15 08:42:12 |
| 54.37.139.235 | attackspam | Aug 15 02:13:29 SilenceServices sshd[12409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.139.235 Aug 15 02:13:31 SilenceServices sshd[12409]: Failed password for invalid user norm from 54.37.139.235 port 51306 ssh2 Aug 15 02:17:59 SilenceServices sshd[16274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.139.235 |
2019-08-15 08:33:21 |
| 175.100.138.200 | attack | SSH-BruteForce |
2019-08-15 08:53:15 |
| 41.39.47.132 | attackspam | 2019-08-14T20:35:22.371257mizuno.rwx.ovh sshd[18586]: Connection from 41.39.47.132 port 59342 on 78.46.61.178 port 22 2019-08-14T20:35:23.866089mizuno.rwx.ovh sshd[18586]: Invalid user admin from 41.39.47.132 port 59342 2019-08-14T20:35:23.874174mizuno.rwx.ovh sshd[18586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.39.47.132 2019-08-14T20:35:22.371257mizuno.rwx.ovh sshd[18586]: Connection from 41.39.47.132 port 59342 on 78.46.61.178 port 22 2019-08-14T20:35:23.866089mizuno.rwx.ovh sshd[18586]: Invalid user admin from 41.39.47.132 port 59342 2019-08-14T20:35:26.170143mizuno.rwx.ovh sshd[18586]: Failed password for invalid user admin from 41.39.47.132 port 59342 ssh2 ... |
2019-08-15 09:01:03 |
| 106.2.17.31 | attackspambots | Aug 15 02:19:21 legacy sshd[6981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.2.17.31 Aug 15 02:19:23 legacy sshd[6981]: Failed password for invalid user cod4server from 106.2.17.31 port 42548 ssh2 Aug 15 02:24:50 legacy sshd[7084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.2.17.31 ... |
2019-08-15 08:30:20 |
| 188.165.242.200 | attackbots | $f2bV_matches |
2019-08-15 08:39:24 |
| 118.24.50.253 | attackbotsspam | 2019-08-15T00:08:08.950088abusebot-8.cloudsearch.cf sshd\[11574\]: Invalid user lucky from 118.24.50.253 port 59824 |
2019-08-15 08:38:36 |
| 27.112.4.11 | attackbots | Aug 14 19:53:03 econome sshd[17502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.112.4.11 user=r.r Aug 14 19:53:06 econome sshd[17502]: Failed password for r.r from 27.112.4.11 port 59058 ssh2 Aug 14 19:53:06 econome sshd[17502]: Received disconnect from 27.112.4.11: 11: Normal Shutdown, Thank you for playing [preauth] Aug 14 19:53:08 econome sshd[17504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.112.4.11 user=r.r Aug 14 19:53:10 econome sshd[17504]: Failed password for r.r from 27.112.4.11 port 37310 ssh2 Aug 14 19:53:10 econome sshd[17504]: Received disconnect from 27.112.4.11: 11: Normal Shutdown, Thank you for playing [preauth] Aug 14 19:53:12 econome sshd[17506]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.112.4.11 user=r.r Aug 14 19:53:14 econome sshd[17506]: Failed password for r.r from 27.112.4.11 port 43666 ssh2 Aug 1........ ------------------------------- |
2019-08-15 08:25:07 |
| 46.229.168.131 | attack | Automatic report - Banned IP Access |
2019-08-15 08:42:39 |
| 111.3.191.194 | attackspam | 2019-08-15T00:38:11.487020abusebot-8.cloudsearch.cf sshd\[11761\]: Invalid user richard from 111.3.191.194 port 49985 |
2019-08-15 09:06:03 |