城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.20.138.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14342
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.20.138.34. IN A
;; AUTHORITY SECTION:
. 368 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400
;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 02:03:02 CST 2022
;; MSG SIZE rcvd: 106Host 34.138.20.104.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 34.138.20.104.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 49.88.112.72 | attack | Oct 30 11:28:13 sauna sshd[106317]: Failed password for root from 49.88.112.72 port 52271 ssh2 ... |
2019-10-30 17:35:47 |
| 1.203.115.140 | attackspam | Oct 29 20:14:06 auw2 sshd\[12457\]: Invalid user panu from 1.203.115.140 Oct 29 20:14:06 auw2 sshd\[12457\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.203.115.140 Oct 29 20:14:08 auw2 sshd\[12457\]: Failed password for invalid user panu from 1.203.115.140 port 41441 ssh2 Oct 29 20:19:20 auw2 sshd\[12880\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.203.115.140 user=root Oct 29 20:19:23 auw2 sshd\[12880\]: Failed password for root from 1.203.115.140 port 59115 ssh2 |
2019-10-30 17:18:17 |
| 178.76.69.132 | attack | Automatic report - XMLRPC Attack |
2019-10-30 17:25:05 |
| 218.0.0.82 | attackspam | 1433/tcp [2019-10-30]1pkt |
2019-10-30 17:00:25 |
| 42.115.206.184 | attackbotsspam | 445/tcp [2019-10-30]1pkt |
2019-10-30 17:19:30 |
| 84.51.0.198 | attackspam | Sending SPAM email |
2019-10-30 17:07:52 |
| 209.17.96.66 | attackspambots | From CCTV User Interface Log ...::ffff:209.17.96.66 - - [30/Oct/2019:04:38:58 +0000] "-" 400 179 ... |
2019-10-30 17:02:28 |
| 198.98.52.143 | attack | Oct 30 09:02:44 rotator sshd\[27745\]: Address 198.98.52.143 maps to tor-exit.jwhite.network, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Oct 30 09:02:46 rotator sshd\[27745\]: Failed password for root from 198.98.52.143 port 56860 ssh2Oct 30 09:02:49 rotator sshd\[27745\]: Failed password for root from 198.98.52.143 port 56860 ssh2Oct 30 09:02:52 rotator sshd\[27745\]: Failed password for root from 198.98.52.143 port 56860 ssh2Oct 30 09:02:55 rotator sshd\[27745\]: Failed password for root from 198.98.52.143 port 56860 ssh2Oct 30 09:02:57 rotator sshd\[27745\]: Failed password for root from 198.98.52.143 port 56860 ssh2 ... |
2019-10-30 17:34:16 |
| 51.15.249.8 | attackbots | 2019-10-30T07:25:54.829065shield sshd\[7355\]: Invalid user appldev from 51.15.249.8 port 35542 2019-10-30T07:25:54.834544shield sshd\[7355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.249.8 2019-10-30T07:25:56.442906shield sshd\[7355\]: Failed password for invalid user appldev from 51.15.249.8 port 35542 ssh2 2019-10-30T07:27:12.082450shield sshd\[7455\]: Invalid user tomcat from 51.15.249.8 port 43712 2019-10-30T07:27:12.088085shield sshd\[7455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.249.8 |
2019-10-30 17:08:08 |
| 123.241.108.244 | attack | 23/tcp [2019-10-30]1pkt |
2019-10-30 17:36:20 |
| 88.99.2.180 | attackspam | Attack xmlrpc.php , wp-login.php |
2019-10-30 17:28:56 |
| 201.235.248.38 | attackbots | serveres are UTC -0400 Lines containing failures of 201.235.248.38 Oct 28 06:40:41 tux2 sshd[6982]: Invalid user central from 201.235.248.38 port 58048 Oct 28 06:40:41 tux2 sshd[6982]: Failed password for invalid user central from 201.235.248.38 port 58048 ssh2 Oct 28 06:40:41 tux2 sshd[6982]: Received disconnect from 201.235.248.38 port 58048:11: Bye Bye [preauth] Oct 28 06:40:41 tux2 sshd[6982]: Disconnected from invalid user central 201.235.248.38 port 58048 [preauth] Oct 28 06:46:47 tux2 sshd[7314]: Failed password for r.r from 201.235.248.38 port 40142 ssh2 Oct 28 06:46:47 tux2 sshd[7314]: Received disconnect from 201.235.248.38 port 40142:11: Bye Bye [preauth] Oct 28 06:46:47 tux2 sshd[7314]: Disconnected from authenticating user r.r 201.235.248.38 port 40142 [preauth] Oct 28 06:52:14 tux2 sshd[7616]: Invalid user scarlet from 201.235.248.38 port 50448 Oct 28 06:52:14 tux2 sshd[7616]: Failed password for invalid user scarlet from 201.235.248.38 port 50448 ssh2 Oct ........ ------------------------------ |
2019-10-30 17:20:20 |
| 72.129.154.181 | attackspam | Automatic report - Port Scan Attack |
2019-10-30 17:18:58 |
| 104.154.75.13 | attackbots | miraniessen.de 104.154.75.13 \[30/Oct/2019:06:29:45 +0100\] "POST /wp-login.php HTTP/1.1" 200 5974 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" miraniessen.de 104.154.75.13 \[30/Oct/2019:06:29:46 +0100\] "POST /wp-login.php HTTP/1.1" 200 5975 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-10-30 17:15:45 |
| 162.243.5.51 | attackbotsspam | Oct 30 03:42:04 www6-3 sshd[25149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.5.51 user=r.r Oct 30 03:42:06 www6-3 sshd[25149]: Failed password for r.r from 162.243.5.51 port 35600 ssh2 Oct 30 03:42:06 www6-3 sshd[25149]: Received disconnect from 162.243.5.51 port 35600:11: Bye Bye [preauth] Oct 30 03:42:06 www6-3 sshd[25149]: Disconnected from 162.243.5.51 port 35600 [preauth] Oct 30 03:50:23 www6-3 sshd[25594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.5.51 user=r.r Oct 30 03:50:25 www6-3 sshd[25594]: Failed password for r.r from 162.243.5.51 port 37294 ssh2 Oct 30 03:50:25 www6-3 sshd[25594]: Received disconnect from 162.243.5.51 port 37294:11: Bye Bye [preauth] Oct 30 03:50:25 www6-3 sshd[25594]: Disconnected from 162.243.5.51 port 37294 [preauth] Oct 30 03:56:26 www6-3 sshd[25981]: Invalid user cacheman from 162.243.5.51 port 50278 Oct 30 03:56:26 www6-3 ss........ ------------------------------- |
2019-10-30 17:04:43 |