城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.20.11.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22907
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.20.11.66. IN A
;; AUTHORITY SECTION:
. 286 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 17 16:33:53 CST 2022
;; MSG SIZE rcvd: 105Host 66.11.20.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 66.11.20.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 62.234.59.145 | attack | SASL PLAIN auth failed: ruser=... |
2020-05-05 07:56:31 |
| 51.210.4.54 | attack | Lines containing failures of 51.210.4.54 May 4 00:15:01 kmh-vmh-002-fsn07 sshd[18447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.210.4.54 user=r.r May 4 00:15:03 kmh-vmh-002-fsn07 sshd[18447]: Failed password for r.r from 51.210.4.54 port 58934 ssh2 May 4 00:15:04 kmh-vmh-002-fsn07 sshd[18447]: Received disconnect from 51.210.4.54 port 58934:11: Bye Bye [preauth] May 4 00:15:04 kmh-vmh-002-fsn07 sshd[18447]: Disconnected from authenticating user r.r 51.210.4.54 port 58934 [preauth] May 4 00:27:41 kmh-vmh-002-fsn07 sshd[6606]: Invalid user esbuser from 51.210.4.54 port 40588 May 4 00:27:41 kmh-vmh-002-fsn07 sshd[6606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.210.4.54 May 4 00:27:43 kmh-vmh-002-fsn07 sshd[6606]: Failed password for invalid user esbuser from 51.210.4.54 port 40588 ssh2 May 4 00:27:44 kmh-vmh-002-fsn07 sshd[6606]: Received disconnect from 51.210.4.54........ ------------------------------ |
2020-05-05 08:00:07 |
| 36.22.187.34 | attack | May 5 00:24:37 dev0-dcde-rnet sshd[10355]: Failed password for root from 36.22.187.34 port 38340 ssh2 May 5 00:28:41 dev0-dcde-rnet sshd[10453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.22.187.34 May 5 00:28:44 dev0-dcde-rnet sshd[10453]: Failed password for invalid user beatrice from 36.22.187.34 port 36556 ssh2 |
2020-05-05 08:21:37 |
| 52.56.153.29 | attackbots | Automatic report - XMLRPC Attack |
2020-05-05 07:36:51 |
| 182.48.38.103 | attack | 2020-05-04T20:23:12.659421vpc sshd[14394]: Disconnected from 182.48.38.103 port 33610 [preauth] 2020-05-04T20:23:14.177827vpc sshd[14396]: Disconnected from 182.48.38.103 port 34103 [preauth] 2020-05-04T20:23:15.589456vpc sshd[14398]: Disconnected from 182.48.38.103 port 34571 [preauth] 2020-05-04T20:23:17.029131vpc sshd[14400]: Invalid user vyos from 182.48.38.103 port 34991 2020-05-04T20:23:17.222768vpc sshd[14400]: Disconnected from 182.48.38.103 port 34991 [preauth] ... |
2020-05-05 08:16:23 |
| 85.118.117.108 | attack | xmlrpc attack |
2020-05-05 08:16:55 |
| 201.97.148.185 | attackbots | Honeypot attack, port: 81, PTR: dup-201-97-148-185.prod-dial.com.mx. |
2020-05-05 07:52:03 |
| 124.205.224.179 | attackbotsspam | May 4 23:28:12 * sshd[9819]: Failed password for root from 124.205.224.179 port 59732 ssh2 May 4 23:30:45 * sshd[10221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.205.224.179 |
2020-05-05 07:52:33 |
| 185.244.151.102 | attackspambots | DNS QUERY AMPLIFICATION ATTEMPT |
2020-05-05 07:23:01 |
| 106.54.245.34 | attackspambots | May 5 01:35:52 h1745522 sshd[3271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.245.34 user=root May 5 01:35:53 h1745522 sshd[3271]: Failed password for root from 106.54.245.34 port 48158 ssh2 May 5 01:40:35 h1745522 sshd[4119]: Invalid user vbox from 106.54.245.34 port 47038 May 5 01:40:35 h1745522 sshd[4119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.245.34 May 5 01:40:35 h1745522 sshd[4119]: Invalid user vbox from 106.54.245.34 port 47038 May 5 01:40:37 h1745522 sshd[4119]: Failed password for invalid user vbox from 106.54.245.34 port 47038 ssh2 May 5 01:45:18 h1745522 sshd[4842]: Invalid user hzt from 106.54.245.34 port 45922 May 5 01:45:18 h1745522 sshd[4842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.245.34 May 5 01:45:18 h1745522 sshd[4842]: Invalid user hzt from 106.54.245.34 port 45922 May 5 01:45:19 h1745522 ss ... |
2020-05-05 08:21:08 |
| 93.104.214.189 | attackbots | Lines containing failures of 93.104.214.189 May 4 18:57:06 linuxrulz sshd[1846]: Did not receive identification string from 93.104.214.189 port 56942 May 4 18:57:06 linuxrulz sshd[1847]: Did not receive identification string from 93.104.214.189 port 49446 May 4 18:57:06 linuxrulz sshd[1848]: Did not receive identification string from 93.104.214.189 port 60624 May 4 19:00:22 linuxrulz sshd[2484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.104.214.189 user=r.r May 4 19:00:24 linuxrulz sshd[2484]: Failed password for r.r from 93.104.214.189 port 59076 ssh2 May 4 19:00:25 linuxrulz sshd[2484]: Received disconnect from 93.104.214.189 port 59076:11: Normal Shutdown, Thank you for playing [preauth] May 4 19:00:25 linuxrulz sshd[2484]: Disconnected from authenticating user r.r 93.104.214.189 port 59076 [preauth] May 4 19:00:26 linuxrulz sshd[2488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ........ ------------------------------ |
2020-05-05 07:48:13 |
| 45.142.195.6 | attackspam | May 5 01:47:17 vmanager6029 postfix/smtpd\[1894\]: warning: unknown\[45.142.195.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 5 01:48:39 vmanager6029 postfix/smtpd\[1894\]: warning: unknown\[45.142.195.6\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-05-05 07:50:58 |
| 221.219.212.170 | attack | May 5 01:15:02 server sshd[27776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.219.212.170 May 5 01:15:04 server sshd[27776]: Failed password for invalid user lorena from 221.219.212.170 port 39230 ssh2 May 5 01:18:08 server sshd[28093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.219.212.170 ... |
2020-05-05 07:43:49 |
| 14.29.214.188 | attack | May 5 00:24:45 dev0-dcde-rnet sshd[10367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.188 May 5 00:24:47 dev0-dcde-rnet sshd[10367]: Failed password for invalid user janis from 14.29.214.188 port 51232 ssh2 May 5 00:29:26 dev0-dcde-rnet sshd[10475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.214.188 |
2020-05-05 07:57:46 |
| 36.81.203.211 | attackspambots | May 4 22:23:43 nextcloud sshd\[14390\]: Invalid user iptv from 36.81.203.211 May 4 22:23:43 nextcloud sshd\[14390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.81.203.211 May 4 22:23:45 nextcloud sshd\[14390\]: Failed password for invalid user iptv from 36.81.203.211 port 52644 ssh2 |
2020-05-05 07:49:21 |