城市(city): unknown
省份(region): unknown
国家(country): Indonesia
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.161.73.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30613
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;103.161.73.42. IN A
;; AUTHORITY SECTION:
. 506 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 16:50:51 CST 2022
;; MSG SIZE rcvd: 106Host 42.73.161.103.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 42.73.161.103.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 178.63.55.70 | attackspambots | Automatic report - Port Scan Attack |
2019-10-31 01:49:14 |
| 85.93.20.86 | attack | 191030 14:12:01 \[Warning\] Access denied for user 'root'@'85.93.20.86' \(using password: YES\) 191030 18:50:30 \[Warning\] Access denied for user 'root'@'85.93.20.86' \(using password: YES\) 191030 18:58:43 \[Warning\] Access denied for user 'root'@'85.93.20.86' \(using password: YES\) ... |
2019-10-31 02:06:34 |
| 81.22.45.190 | attackbots | Oct 30 18:24:33 mc1 kernel: \[3742595.702585\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=27151 PROTO=TCP SPT=46310 DPT=38916 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 30 18:26:40 mc1 kernel: \[3742722.656640\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=22092 PROTO=TCP SPT=46310 DPT=38883 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 30 18:27:26 mc1 kernel: \[3742769.218836\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.190 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=33320 PROTO=TCP SPT=46310 DPT=38697 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-31 01:54:28 |
| 202.120.37.249 | attackspambots | Oct 30 18:32:28 fr01 sshd[24133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.120.37.249 user=root Oct 30 18:32:30 fr01 sshd[24133]: Failed password for root from 202.120.37.249 port 52114 ssh2 Oct 30 18:37:09 fr01 sshd[24968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.120.37.249 user=root Oct 30 18:37:11 fr01 sshd[24968]: Failed password for root from 202.120.37.249 port 34580 ssh2 ... |
2019-10-31 01:47:10 |
| 145.239.116.170 | attackbots | Oct 30 10:23:56 reporting sshd[31041]: Invalid user download from 145.239.116.170 Oct 30 10:23:56 reporting sshd[31041]: Failed password for invalid user download from 145.239.116.170 port 57730 ssh2 Oct 30 10:28:28 reporting sshd[918]: Invalid user tester from 145.239.116.170 Oct 30 10:28:28 reporting sshd[918]: Failed password for invalid user tester from 145.239.116.170 port 48614 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=145.239.116.170 |
2019-10-31 02:09:57 |
| 34.80.183.219 | attackbotsspam | Oct 30 15:42:30 vps647732 sshd[27043]: Failed password for root from 34.80.183.219 port 42116 ssh2 ... |
2019-10-31 02:08:59 |
| 172.94.125.135 | attackspam | $f2bV_matches |
2019-10-31 02:05:03 |
| 119.203.240.76 | attackbotsspam | Oct 30 13:49:35 web8 sshd\[31574\]: Invalid user Design@2017 from 119.203.240.76 Oct 30 13:49:35 web8 sshd\[31574\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.203.240.76 Oct 30 13:49:37 web8 sshd\[31574\]: Failed password for invalid user Design@2017 from 119.203.240.76 port 28736 ssh2 Oct 30 13:55:35 web8 sshd\[2290\]: Invalid user technojazz from 119.203.240.76 Oct 30 13:55:35 web8 sshd\[2290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.203.240.76 |
2019-10-31 02:11:01 |
| 106.54.220.178 | attackspam | Oct 30 18:40:16 tux-35-217 sshd\[17765\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.220.178 user=root Oct 30 18:40:18 tux-35-217 sshd\[17765\]: Failed password for root from 106.54.220.178 port 60910 ssh2 Oct 30 18:44:20 tux-35-217 sshd\[17808\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.220.178 user=root Oct 30 18:44:22 tux-35-217 sshd\[17808\]: Failed password for root from 106.54.220.178 port 42344 ssh2 ... |
2019-10-31 01:54:10 |
| 13.82.211.43 | attackspam | 13.82.211.43 - - [29/Oct/2019:16:55:30 +0200] "GET /sites/all/modules/avatar_uploader/lib/demo/view.php?file=../../../../../../../../../../../sites/default/settings.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.63 Safari/537.31" 13.82.211.43 - - [29/Oct/2019:16:55:31 +0200] "POST /admin/people/create?render=overlay&render=overlay HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.63 Safari/537.31" ... |
2019-10-31 01:58:03 |
| 138.68.254.131 | attackspam | 138.68.254.131 - - [30/Oct/2019:17:32:09 +0100] "GET /wp-login.php HTTP/1.1" 404 462 ... |
2019-10-31 02:02:39 |
| 118.24.30.97 | attackbotsspam | Oct 30 12:37:46 server sshd[2730]: Failed password for invalid user testftp from 118.24.30.97 port 46432 ssh2 Oct 30 12:42:36 server sshd[3241]: Failed password for invalid user zhouh from 118.24.30.97 port 55408 ssh2 Oct 30 12:47:33 server sshd[3714]: Failed password for uucp from 118.24.30.97 port 35730 ssh2 |
2019-10-31 02:16:31 |
| 177.7.17.230 | attackbots | postfix (unknown user, SPF fail or relay access denied) |
2019-10-31 01:58:56 |
| 61.141.64.155 | attackspam | Lines containing failures of 61.141.64.155 Oct 30 00:49:04 cdb sshd[13625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.141.64.155 user=r.r Oct 30 00:49:06 cdb sshd[13625]: Failed password for r.r from 61.141.64.155 port 9833 ssh2 Oct 30 00:49:07 cdb sshd[13625]: Received disconnect from 61.141.64.155 port 9833:11: Bye Bye [preauth] Oct 30 00:49:07 cdb sshd[13625]: Disconnected from authenticating user r.r 61.141.64.155 port 9833 [preauth] Oct 30 00:53:29 cdb sshd[14068]: Invalid user test from 61.141.64.155 port 31431 Oct 30 00:53:29 cdb sshd[14068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.141.64.155 Oct 30 00:53:31 cdb sshd[14068]: Failed password for invalid user test from 61.141.64.155 port 31431 ssh2 Oct 30 00:53:31 cdb sshd[14068]: Received disconnect from 61.141.64.155 port 31431:11: Bye Bye [preauth] Oct 30 00:53:31 cdb sshd[14068]: Disconnected from invalid user te........ ------------------------------ |
2019-10-31 01:47:56 |
| 140.249.22.238 | attackspambots | Oct 30 14:57:31 vps691689 sshd[12882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.249.22.238 Oct 30 14:57:33 vps691689 sshd[12882]: Failed password for invalid user snowboar from 140.249.22.238 port 60310 ssh2 ... |
2019-10-31 01:41:27 |