城市(city): San Diego
省份(region): California
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.129.160.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60689
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.129.160.49. IN A
;; AUTHORITY SECTION:
. 152 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020030201 1800 900 604800 86400
;; Query time: 50 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 03 10:19:28 CST 2020
;; MSG SIZE rcvd: 118Host 49.160.129.104.in-addr.arpa not found: 2(SERVFAIL)
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 49.160.129.104.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.13.11.238 | attackbots | Apr 28 08:41:04 ns392434 sshd[24694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.11.238 user=root Apr 28 08:41:07 ns392434 sshd[24694]: Failed password for root from 106.13.11.238 port 50090 ssh2 Apr 28 08:46:06 ns392434 sshd[24838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.11.238 user=root Apr 28 08:46:09 ns392434 sshd[24838]: Failed password for root from 106.13.11.238 port 44322 ssh2 Apr 28 08:49:43 ns392434 sshd[24933]: Invalid user server from 106.13.11.238 port 57608 Apr 28 08:49:43 ns392434 sshd[24933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.11.238 Apr 28 08:49:43 ns392434 sshd[24933]: Invalid user server from 106.13.11.238 port 57608 Apr 28 08:49:45 ns392434 sshd[24933]: Failed password for invalid user server from 106.13.11.238 port 57608 ssh2 Apr 28 08:53:08 ns392434 sshd[25088]: Invalid user test from 106.13.11.238 port 42664 |
2020-04-28 15:28:01 |
| 92.63.194.106 | attack | Apr 28 09:32:48 lock-38 sshd[1646869]: Invalid user guest from 92.63.194.106 port 35441 Apr 28 09:32:48 lock-38 sshd[1646869]: Failed password for invalid user guest from 92.63.194.106 port 35441 ssh2 Apr 28 09:32:48 lock-38 sshd[1646869]: Invalid user guest from 92.63.194.106 port 35441 Apr 28 09:32:48 lock-38 sshd[1646869]: Failed password for invalid user guest from 92.63.194.106 port 35441 ssh2 Apr 28 09:32:48 lock-38 sshd[1646869]: Connection closed by invalid user guest 92.63.194.106 port 35441 [preauth] ... |
2020-04-28 15:41:12 |
| 95.110.229.194 | attack | Invalid user dada from 95.110.229.194 port 47436 |
2020-04-28 15:19:18 |
| 109.166.131.83 | attackbots | Bruteforce detected by fail2ban |
2020-04-28 15:38:19 |
| 23.121.22.212 | attackbotsspam | trying to access non-authorized port |
2020-04-28 15:28:51 |
| 191.191.98.243 | attackbots | Apr 28 06:11:25 mail sshd\[11264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.191.98.243 user=root Apr 28 06:11:27 mail sshd\[11264\]: Failed password for root from 191.191.98.243 port 57296 ssh2 Apr 28 06:18:06 mail sshd\[11296\]: Invalid user appldev from 191.191.98.243 Apr 28 06:18:06 mail sshd\[11296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.191.98.243 ... |
2020-04-28 15:25:49 |
| 119.92.118.59 | attackbots | Invalid user mys from 119.92.118.59 port 55678 |
2020-04-28 15:51:06 |
| 189.164.145.53 | attackbots | 20/4/27@23:50:57: FAIL: Alarm-Network address from=189.164.145.53 ... |
2020-04-28 15:25:00 |
| 106.12.38.109 | attackspambots | 2020-04-28T06:34:51.432371centos sshd[1515]: Failed password for invalid user snowflake from 106.12.38.109 port 50804 ssh2 2020-04-28T06:40:08.376177centos sshd[1890]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.38.109 user=root 2020-04-28T06:40:10.191774centos sshd[1890]: Failed password for root from 106.12.38.109 port 55594 ssh2 ... |
2020-04-28 15:26:25 |
| 159.89.131.172 | attack | Invalid user tester from 159.89.131.172 port 53958 |
2020-04-28 15:15:28 |
| 129.211.171.24 | attack | Invalid user ajp from 129.211.171.24 port 48404 |
2020-04-28 15:27:31 |
| 106.13.103.1 | attack | Apr 28 07:06:29 ns382633 sshd\[21370\]: Invalid user yarn from 106.13.103.1 port 50290 Apr 28 07:06:29 ns382633 sshd\[21370\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1 Apr 28 07:06:31 ns382633 sshd\[21370\]: Failed password for invalid user yarn from 106.13.103.1 port 50290 ssh2 Apr 28 07:11:10 ns382633 sshd\[22338\]: Invalid user ebs from 106.13.103.1 port 35976 Apr 28 07:11:10 ns382633 sshd\[22338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1 |
2020-04-28 15:31:28 |
| 157.245.74.244 | attack | 157.245.74.244 - - [28/Apr/2020:08:16:57 +0200] "GET /wp-login.php HTTP/1.1" 200 6108 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - [28/Apr/2020:08:16:59 +0200] "POST /wp-login.php HTTP/1.1" 200 6338 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 157.245.74.244 - - [28/Apr/2020:08:17:00 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-04-28 15:07:11 |
| 54.37.210.39 | attack | Automatic report - Port Scan Attack |
2020-04-28 15:36:17 |
| 165.22.31.24 | attackbotsspam | 165.22.31.24 - - \[28/Apr/2020:06:41:12 +0200\] "POST /wp-login.php HTTP/1.1" 200 9652 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 165.22.31.24 - - \[28/Apr/2020:06:41:12 +0200\] "POST /wp-login.php HTTP/1.1" 200 9521 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ... |
2020-04-28 15:22:29 |