城市(city): Semarang
省份(region): Central Java
国家(country): Indonesia
运营商(isp): 3
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.106.158.227
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51452
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;103.106.158.227. IN A
;; AUTHORITY SECTION:
. 149 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022052200 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 22 21:44:35 CST 2022
;; MSG SIZE rcvd: 108Host 227.158.106.103.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 227.158.106.103.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 111.230.13.11 | attackbots | Unauthorized connection attempt detected from IP address 111.230.13.11 to port 2220 [J] |
2020-01-13 13:03:54 |
| 222.186.30.187 | attackspam | Unauthorized connection attempt detected from IP address 222.186.30.187 to port 22 |
2020-01-13 13:22:54 |
| 185.209.0.91 | attackbots | Jan 13 06:06:33 debian-2gb-nbg1-2 kernel: \[1151297.368711\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.209.0.91 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=27026 PROTO=TCP SPT=42494 DPT=3905 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-01-13 13:08:05 |
| 72.11.155.169 | attackbots | scan z |
2020-01-13 09:34:09 |
| 124.8.244.61 | attack | Honeypot attack, port: 445, PTR: 124-8-244-61.dynamic.tfn.net.tw. |
2020-01-13 13:17:29 |
| 64.204.217.25 | attackbotsspam | Honeypot hit. |
2020-01-13 13:28:10 |
| 36.78.3.92 | attackbots | $f2bV_matches |
2020-01-13 13:06:08 |
| 113.175.206.194 | attack | Unauthorized connection attempt detected from IP address 113.175.206.194 to port 445 |
2020-01-13 13:28:51 |
| 138.197.163.11 | attackspam | Unauthorized connection attempt detected from IP address 138.197.163.11 to port 2220 [J] |
2020-01-13 13:25:15 |
| 109.57.86.21 | attack | Jan 12 21:18:17 xxx sshd[29363]: Invalid user testing from 109.57.86.21 Jan 12 21:18:19 xxx sshd[29363]: Failed password for invalid user testing from 109.57.86.21 port 35318 ssh2 Jan 12 22:06:26 xxx sshd[32327]: Invalid user wp from 109.57.86.21 Jan 12 22:06:29 xxx sshd[32327]: Failed password for invalid user wp from 109.57.86.21 port 52430 ssh2 Jan 12 22:18:24 xxx sshd[742]: Invalid user redmine from 109.57.86.21 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=109.57.86.21 |
2020-01-13 09:31:56 |
| 73.8.91.33 | attack | Jan 13 05:53:55 vpn01 sshd[7354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=73.8.91.33 Jan 13 05:53:57 vpn01 sshd[7354]: Failed password for invalid user michael from 73.8.91.33 port 46136 ssh2 ... |
2020-01-13 13:15:09 |
| 125.213.150.7 | attackspam | Jan 13 05:52:09 vpn01 sshd[7301]: Failed password for root from 125.213.150.7 port 59166 ssh2 ... |
2020-01-13 13:03:05 |
| 218.58.53.234 | attackbotsspam | Jan 12 21:32:25 zn006 sshd[27659]: Invalid user radik from 218.58.53.234 Jan 12 21:32:25 zn006 sshd[27659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.58.53.234 Jan 12 21:32:28 zn006 sshd[27659]: Failed password for invalid user radik from 218.58.53.234 port 24586 ssh2 Jan 12 21:32:28 zn006 sshd[27659]: Received disconnect from 218.58.53.234: 11: Bye Bye [preauth] Jan 12 21:46:05 zn006 sshd[29380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.58.53.234 user=r.r Jan 12 21:46:07 zn006 sshd[29380]: Failed password for r.r from 218.58.53.234 port 8880 ssh2 Jan 12 21:46:07 zn006 sshd[29380]: Received disconnect from 218.58.53.234: 11: Bye Bye [preauth] Jan 12 21:50:15 zn006 sshd[29958]: Invalid user ftpadmin from 218.58.53.234 Jan 12 21:50:15 zn006 sshd[29958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.58.53.234 Jan 12 21:50:16 ........ ------------------------------- |
2020-01-13 09:30:22 |
| 222.186.30.57 | attackbotsspam | Jan 12 23:35:03 debian sshd[3646]: Unable to negotiate with 222.186.30.57 port 35367: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] Jan 13 00:04:17 debian sshd[5024]: Unable to negotiate with 222.186.30.57 port 20894: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth] ... |
2020-01-13 13:11:40 |
| 222.186.173.238 | attack | Jan 12 18:56:46 web9 sshd\[13208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238 user=root Jan 12 18:56:48 web9 sshd\[13208\]: Failed password for root from 222.186.173.238 port 28978 ssh2 Jan 12 18:57:05 web9 sshd\[13266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238 user=root Jan 12 18:57:07 web9 sshd\[13266\]: Failed password for root from 222.186.173.238 port 45228 ssh2 Jan 12 18:57:26 web9 sshd\[13340\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238 user=root |
2020-01-13 13:00:24 |