城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.18.94.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31853
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.18.94.20. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 15:40:04 CST 2022
;; MSG SIZE rcvd: 105Host 20.94.18.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 20.94.18.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 36.91.108.27 | attackbots | 20/7/30@08:08:11: FAIL: Alarm-Network address from=36.91.108.27 20/7/30@08:08:12: FAIL: Alarm-Network address from=36.91.108.27 ... |
2020-07-30 22:18:51 |
| 207.46.13.31 | attack | Automatic report - Banned IP Access |
2020-07-30 22:14:20 |
| 217.182.253.249 | attackspambots | Jul 30 11:15:22 firewall sshd[13914]: Invalid user yhding from 217.182.253.249 Jul 30 11:15:24 firewall sshd[13914]: Failed password for invalid user yhding from 217.182.253.249 port 35762 ssh2 Jul 30 11:19:38 firewall sshd[14011]: Invalid user xiehongjun from 217.182.253.249 ... |
2020-07-30 22:37:08 |
| 77.40.123.115 | attackbotsspam | Brute force attempt |
2020-07-30 22:08:54 |
| 140.143.210.92 | attackspambots | Jul 30 14:10:48 onepixel sshd[1175692]: Invalid user yingying from 140.143.210.92 port 43532 Jul 30 14:10:48 onepixel sshd[1175692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.210.92 Jul 30 14:10:48 onepixel sshd[1175692]: Invalid user yingying from 140.143.210.92 port 43532 Jul 30 14:10:50 onepixel sshd[1175692]: Failed password for invalid user yingying from 140.143.210.92 port 43532 ssh2 Jul 30 14:14:58 onepixel sshd[1178099]: Invalid user lfx from 140.143.210.92 port 56158 |
2020-07-30 22:23:18 |
| 174.219.152.27 | attack | Brute forcing email accounts |
2020-07-30 22:19:28 |
| 49.233.157.204 | attack | Jul 30 14:11:15 localhost sshd[84346]: Invalid user zhangjiyu from 49.233.157.204 port 45512 Jul 30 14:11:15 localhost sshd[84346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.157.204 Jul 30 14:11:15 localhost sshd[84346]: Invalid user zhangjiyu from 49.233.157.204 port 45512 Jul 30 14:11:17 localhost sshd[84346]: Failed password for invalid user zhangjiyu from 49.233.157.204 port 45512 ssh2 Jul 30 14:16:37 localhost sshd[84876]: Invalid user liujing from 49.233.157.204 port 44136 ... |
2020-07-30 22:41:08 |
| 180.66.207.67 | attackbotsspam | $f2bV_matches |
2020-07-30 22:48:52 |
| 207.244.92.6 | attackbots |
|
2020-07-30 22:52:29 |
| 167.99.49.115 | attack | Jul 30 16:40:31 meumeu sshd[513374]: Invalid user ziyb from 167.99.49.115 port 35738 Jul 30 16:40:31 meumeu sshd[513374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.49.115 Jul 30 16:40:31 meumeu sshd[513374]: Invalid user ziyb from 167.99.49.115 port 35738 Jul 30 16:40:33 meumeu sshd[513374]: Failed password for invalid user ziyb from 167.99.49.115 port 35738 ssh2 Jul 30 16:44:35 meumeu sshd[513595]: Invalid user jiaxin from 167.99.49.115 port 45674 Jul 30 16:44:35 meumeu sshd[513595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.49.115 Jul 30 16:44:35 meumeu sshd[513595]: Invalid user jiaxin from 167.99.49.115 port 45674 Jul 30 16:44:37 meumeu sshd[513595]: Failed password for invalid user jiaxin from 167.99.49.115 port 45674 ssh2 Jul 30 16:48:48 meumeu sshd[513768]: Invalid user sunjian from 167.99.49.115 port 55610 ... |
2020-07-30 22:55:14 |
| 222.73.201.96 | attackbotsspam | 2020-07-30T15:08:26.350804vps773228.ovh.net sshd[14126]: Failed password for invalid user newuser from 222.73.201.96 port 57004 ssh2 2020-07-30T15:21:17.088363vps773228.ovh.net sshd[14237]: Invalid user sunhao from 222.73.201.96 port 52273 2020-07-30T15:21:17.105686vps773228.ovh.net sshd[14237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.73.201.96 2020-07-30T15:21:17.088363vps773228.ovh.net sshd[14237]: Invalid user sunhao from 222.73.201.96 port 52273 2020-07-30T15:21:18.956472vps773228.ovh.net sshd[14237]: Failed password for invalid user sunhao from 222.73.201.96 port 52273 ssh2 ... |
2020-07-30 22:45:20 |
| 216.218.206.103 | attackspambots | GPL RPC portmap listing UDP 111 - port: 111 proto: udp cat: Decode of an RPC Querybytes: 82 |
2020-07-30 22:45:45 |
| 175.144.196.53 | attack | Blocked for port scanning. Time: Thu Jul 30. 01:47:15 2020 +0200 IP: 175.144.196.53 (MY/Malaysia/-) Sample of block hits: Jul 30 01:46:48 vserv kernel: [5242311.778725] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=175.144.196.53 DST=[removed] LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=23282 PROTO=TCP SPT=64428 DPT=8291 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 30 01:46:48 vserv kernel: [5242311.779035] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=175.144.196.53 DST=[removed] LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=23283 PROTO=TCP SPT=64429 DPT=8291 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 30 01:46:51 vserv kernel: [5242314.800908] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=175.144.196.53 DST=[removed] LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=24048 PROTO=TCP SPT=64686 DPT=8291 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 30 01:46:51 vserv kernel: [5242314.809282] Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=175.144.196.53 DST=[removed] LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=24049 PROTO=TCP SPT=64687 DPT=8291 |
2020-07-30 22:30:35 |
| 128.14.209.242 | attackspambots | 128.14.209.242 - - [30/Jul/2020:09:06:15 -0500] "GET https://www.ad5gb.com/ HTTP/1.1" 400 346 400 346 0 0 225 416 406 295 1 DIRECT FIN FIN TCP_MISS |
2020-07-30 22:15:59 |
| 128.14.16.173 | attackspam | Lines containing failures of 128.14.16.173 Jul 28 12:53:39 shared02 sshd[1803]: Invalid user gzy from 128.14.16.173 port 34524 Jul 28 12:53:39 shared02 sshd[1803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.14.16.173 Jul 28 12:53:42 shared02 sshd[1803]: Failed password for invalid user gzy from 128.14.16.173 port 34524 ssh2 Jul 28 12:53:42 shared02 sshd[1803]: Received disconnect from 128.14.16.173 port 34524:11: Bye Bye [preauth] Jul 28 12:53:42 shared02 sshd[1803]: Disconnected from invalid user gzy 128.14.16.173 port 34524 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=128.14.16.173 |
2020-07-30 22:24:45 |