城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.16.13.47
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9940
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.16.13.47. IN A
;; AUTHORITY SECTION:
. 111 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022032701 1800 900 604800 86400
;; Query time: 46 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 28 10:06:50 CST 2022
;; MSG SIZE rcvd: 105
Host 47.13.16.104.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 47.13.16.104.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 80.82.77.33 | attackspambots |
|
2020-07-01 05:45:42 |
| 185.74.4.110 | attackspambots | Jun 30 11:04:28 *** sshd[23951]: Invalid user usuario from 185.74.4.110 |
2020-07-01 05:43:12 |
| 112.85.42.194 | attacknormal | pfTop: Up State 1-11/11, View: default, Order: none, Cache: 10000 01:25:59 PR DIR SRC DEST STATE AGE EXP PKTS BYTES udp Out 192.168.0.77:42244 162.159.200.1:123 MULTIPLE:MULTIPLE 04:14:38 00:00:56 964 73264 udp Out 192.168.0.77:29349 162.159.200.1:123 MULTIPLE:MULTIPLE 04:14:38 00:00:40 966 73416 udp Out 192.168.0.77:25019 162.159.200.123:123 MULTIPLE:MULTIPLE 04:14:38 00:00:55 964 73264 tcp In 192.168.0.55:56807 192.168.0.77:22 ESTABLISHED:ESTABLISHED 04:11:45 23:48:41 76 21340 tcp In 192.168.0.55:56934 192.168.0.77:22 ESTABLISHED:ESTABLISHED 03:58:27 23:59:55 7747 1393025 tcp In 192.168.0.55:52547 192.168.0.77:22 ESTABLISHED:ESTABLISHED 03:09:45 23:50:38 4306 643001 tcp In 192.168.0.55:52890 192.168.0.77:22 ESTABLISHED:ESTABLISHED 02:43:08 23:57:38 4616 537897 udp Out 192.168.0.77:5188 84.2.44.19:123 MULTIPLE:MULTIPLE 02:14:24 00:00:39 514 39064 udp Out 192.168.0.77:11516 193.25.222.240:123 MULTIPLE:MULTIPLE 00:10:01 00:00:38 38 2888 tcp In 112.85.42.194:54932 192.168.0.77:22 FIN_WAIT_2:FIN_WAIT_2 00:01:24 00:00:10 30 4880 tcp In 112.85.42.194:36209 192.168.0.77:22 TIME_WAIT:TIME_WAIT 00:00:21 00:01:14 30 4868 |
2020-07-01 06:28:33 |
| 85.235.34.62 | attack | 2020-06-30T17:34:02+0200 Failed SSH Authentication/Brute Force Attack. (Server 9) |
2020-07-01 05:47:33 |
| 192.35.169.43 | attack |
|
2020-07-01 06:20:08 |
| 142.93.104.32 | attack | 2020-06-30T10:28:50.487141morrigan.ad5gb.com sshd[2920184]: Invalid user counter from 142.93.104.32 port 57248 2020-06-30T10:28:52.174935morrigan.ad5gb.com sshd[2920184]: Failed password for invalid user counter from 142.93.104.32 port 57248 ssh2 |
2020-07-01 05:43:49 |
| 178.155.104.66 | attack | Unauthorized connection attempt from IP address 178.155.104.66 on Port 445(SMB) |
2020-07-01 05:47:56 |
| 161.35.37.149 | attackbotsspam | Unauthorized connection attempt detected from IP address 161.35.37.149 to port 8364 |
2020-07-01 05:41:36 |
| 222.190.145.130 | attack | SSH Brute-Force reported by Fail2Ban |
2020-07-01 05:53:44 |
| 159.89.9.84 | attack | (sshd) Failed SSH login from 159.89.9.84 (DE/Germany/-): 5 in the last 3600 secs |
2020-07-01 06:35:13 |
| 49.88.112.60 | attack | 2020-06-30T18:42:17.084801amanda2.illicoweb.com sshd\[46732\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.60 user=root 2020-06-30T18:42:19.442094amanda2.illicoweb.com sshd\[46732\]: Failed password for root from 49.88.112.60 port 59025 ssh2 2020-06-30T18:42:24.155833amanda2.illicoweb.com sshd\[46732\]: Failed password for root from 49.88.112.60 port 59025 ssh2 2020-06-30T18:42:27.352330amanda2.illicoweb.com sshd\[46732\]: Failed password for root from 49.88.112.60 port 59025 ssh2 2020-06-30T18:48:58.758125amanda2.illicoweb.com sshd\[46886\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.60 user=root ... |
2020-07-01 06:26:32 |
| 37.59.43.63 | attackspambots | Invalid user support from 37.59.43.63 port 52792 |
2020-07-01 06:13:07 |
| 51.83.171.20 | attack | Jun 30 18:49:20 debian-2gb-nbg1-2 kernel: \[15794397.527600\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=51.83.171.20 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=44401 PROTO=TCP SPT=50964 DPT=63390 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-01 05:52:50 |
| 178.19.163.143 | attack |
|
2020-07-01 06:23:51 |
| 185.249.197.204 | attackspambots | tried sql-injection |
2020-07-01 05:56:58 |