城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.20.1.108
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49002
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.20.1.108. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021602 1800 900 604800 86400
;; Query time: 20 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 06:33:06 CST 2022
;; MSG SIZE rcvd: 105Host 108.1.20.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 108.1.20.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 129.204.67.235 | attackspam | Jul 24 09:27:01 s64-1 sshd[16841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.67.235 Jul 24 09:27:03 s64-1 sshd[16841]: Failed password for invalid user mqm from 129.204.67.235 port 44440 ssh2 Jul 24 09:32:49 s64-1 sshd[16929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.67.235 ... |
2019-07-24 15:34:51 |
| 221.160.100.14 | attack | 2019-07-24T07:38:30.203914abusebot-3.cloudsearch.cf sshd\[6455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.160.100.14 user=root |
2019-07-24 15:38:36 |
| 163.172.82.142 | attackbotsspam | Scanning (more than 2 packets) random ports - tries to find possible vulnerable services |
2019-07-24 15:10:38 |
| 213.55.92.81 | attackbotsspam | 2019-07-24T06:44:15.371687hub.schaetter.us sshd\[12952\]: Invalid user team2 from 213.55.92.81 2019-07-24T06:44:15.421072hub.schaetter.us sshd\[12952\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.55.92.81 2019-07-24T06:44:17.540532hub.schaetter.us sshd\[12952\]: Failed password for invalid user team2 from 213.55.92.81 port 53124 ssh2 2019-07-24T06:50:07.928380hub.schaetter.us sshd\[12981\]: Invalid user zd from 213.55.92.81 2019-07-24T06:50:07.968995hub.schaetter.us sshd\[12981\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.55.92.81 ... |
2019-07-24 15:02:17 |
| 159.65.148.115 | attackspam | Jul 24 09:13:56 SilenceServices sshd[11938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.148.115 Jul 24 09:13:59 SilenceServices sshd[11938]: Failed password for invalid user scanner from 159.65.148.115 port 54308 ssh2 Jul 24 09:20:44 SilenceServices sshd[16881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.148.115 |
2019-07-24 15:24:00 |
| 51.68.230.54 | attackspam | Invalid user oracle from 51.68.230.54 port 38804 |
2019-07-24 15:28:39 |
| 103.3.221.84 | attackbotsspam | Invalid user demo from 103.3.221.84 port 6206 |
2019-07-24 16:04:35 |
| 5.39.92.185 | attackbots | Jul 24 01:38:12 aat-srv002 sshd[2546]: Failed password for root from 5.39.92.185 port 60091 ssh2 Jul 24 01:43:14 aat-srv002 sshd[2702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.92.185 Jul 24 01:43:16 aat-srv002 sshd[2702]: Failed password for invalid user mycat from 5.39.92.185 port 57663 ssh2 ... |
2019-07-24 15:08:09 |
| 115.74.197.194 | attack | Jul 24 01:28:13 localhost kernel: [15190286.912280] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=115.74.197.194 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=2138 DF PROTO=TCP SPT=50752 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 24 01:28:13 localhost kernel: [15190286.912307] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=115.74.197.194 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=2138 DF PROTO=TCP SPT=50752 DPT=445 SEQ=2163634903 ACK=0 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (020405A00103030801010402) Jul 24 01:28:16 localhost kernel: [15190290.000505] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=115.74.197.194 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=2353 DF PROTO=TCP SPT=50752 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 Jul 24 01:28:16 localhost kernel: [15190290.000534] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=115.74.19 |
2019-07-24 15:12:47 |
| 5.9.40.211 | attack | Jul 24 01:31:00 aat-srv002 sshd[2367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.9.40.211 Jul 24 01:31:03 aat-srv002 sshd[2367]: Failed password for invalid user elvis from 5.9.40.211 port 50644 ssh2 Jul 24 01:35:22 aat-srv002 sshd[2475]: Failed password for root from 5.9.40.211 port 47040 ssh2 Jul 24 01:39:51 aat-srv002 sshd[2573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.9.40.211 ... |
2019-07-24 15:04:33 |
| 103.114.104.53 | attack | Invalid user user from 103.114.104.53 port 52185 |
2019-07-24 16:04:06 |
| 134.175.62.14 | attackspam | Invalid user cron from 134.175.62.14 port 55398 |
2019-07-24 15:58:43 |
| 190.119.190.122 | attackspambots | SSH bruteforce (Triggered fail2ban) |
2019-07-24 15:46:03 |
| 84.3.76.191 | attackspam | HU Hungary 54034CBF.catv.pool.telekom.hu Hits: 11 |
2019-07-24 15:27:27 |
| 121.151.153.108 | attackbots | Invalid user cron from 121.151.153.108 port 50506 |
2019-07-24 15:59:51 |